Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File:                     TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier:          Egkv13QeknYDlpGqgGp6TLQvf9nw+M6ephF3jtAwS0c=
Subject key identifier:   FF:9B:0F:75:58:A6:54:31:CC:65:BF:19:AE:D6:72:F8:5D:21:18:28
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer:       /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial:       0198D472479A016E8932884CE4D711F8931F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number:          0D2B
Signing time:             Sat 23 Aug 2025 01:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 01:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 01:01:55 +0000
Files and hashes:         1: Eef9PJNL2EuivvyYqwaqWfVHj-s.roa (hash: WDNmX7wRHN2XarNVrEqn9MAoWY+yPBJbf2QpjmHAIQQ=)
                          2: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: u1ca9EtSjpvj5ak9lRwxzj7x3sYJmsIyAgQBBi5ZYIw=)
                          3: VknLSw01F6JnIGcpuDroFOQ6wlg.roa (hash: x8OBiPpoyvPs1xLJUu7Ja3HvluBnOuxAWAGhM5OwwjU=)
                          4: YJqBlZ2Fe8Khq-5phtHszQ17dp0.roa (hash: 5y6pIty0B50Ya59ZjY0WQF6A2tMefyueh/h5IfLk1iU=)
                          5: bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa (hash: 1PiFMOcXEw++DLpqX3fex/SiFqoIja/HYiTy+CElJPg=)
                          6: r3uflPboabvJIaGhEdaIDk06CD4.roa (hash: QFdRnoH0mopWuiJhq5qtq34F0JBoW9vig+Ki8iy8bE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:47:9a:01:6e:89:32:88:4c:e4:d7:11:f8:93:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
        Validity
            Not Before: Aug 23 01:01:55 2025 GMT
            Not After : Aug 24 01:01:55 2025 GMT
        Subject: CN=ff9b0f7558a65431cc65bf19aed672f85d211828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:67:93:93:69:ed:aa:82:9c:3c:16:4a:5a:
                    21:f5:56:b8:32:dd:bd:19:cb:c1:a6:ee:39:15:88:
                    dd:82:eb:0d:c0:97:db:d6:e5:67:61:6f:ff:b6:2f:
                    66:94:d2:65:14:c2:30:3c:46:c5:9e:8f:4e:0c:da:
                    3b:c3:1e:26:f4:f2:32:12:90:30:33:43:13:9e:6e:
                    2f:d4:ff:96:39:d0:6f:9b:6c:88:05:a3:7e:b6:1c:
                    d9:18:4c:24:a7:24:c2:af:d2:9d:07:77:90:96:5f:
                    30:a6:b8:76:0e:25:c4:6d:45:75:8b:1a:d6:f2:78:
                    62:eb:c4:f0:27:79:42:26:2b:2c:b7:a9:0c:c7:7e:
                    ba:b8:d1:97:99:14:d3:21:1a:56:c4:15:0c:4a:b0:
                    fe:0c:72:5b:99:04:27:b0:a9:62:1a:d2:71:ef:78:
                    c8:05:e1:50:8e:b5:29:c7:28:6d:86:52:8d:42:cb:
                    9c:05:12:d2:41:80:41:0c:2a:93:78:f1:27:cf:0b:
                    c1:b2:aa:47:cc:e2:08:b5:ce:14:68:61:83:cd:b0:
                    a1:4d:d9:0a:23:9b:0d:8c:81:cd:9f:48:fc:19:dc:
                    17:44:4f:d3:4d:67:92:a1:82:a4:b7:11:1d:84:2c:
                    f2:4c:d1:c3:d8:57:e7:63:ca:17:0e:33:52:b9:bc:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:0F:75:58:A6:54:31:CC:65:BF:19:AE:D6:72:F8:5D:21:18:28
            X509v3 Authority Key Identifier:
                keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:7c:19:58:fa:3a:1f:93:ac:3e:70:f7:0d:0d:21:7d:99:
         97:54:52:17:a6:d5:ec:61:d4:68:38:9d:01:11:07:59:08:0f:
         d2:14:0c:69:0e:78:e8:19:6a:ff:4e:c0:7e:27:c4:3a:28:7c:
         f7:c5:57:b6:65:40:07:58:25:d6:c7:b3:83:b7:20:36:cb:35:
         54:79:55:1f:db:f9:77:7d:7d:26:cb:56:57:bb:86:65:75:0d:
         6d:8a:8a:e0:d9:de:e4:e4:ca:77:c5:3e:ac:e6:8f:35:68:87:
         92:1e:8f:0b:da:ed:75:a1:7b:97:46:55:2c:57:03:37:a7:55:
         75:a7:57:14:94:71:5f:d1:57:ca:73:ba:f6:63:cc:6b:82:c6:
         23:ee:c2:ab:25:c5:9d:f3:c3:fc:0f:d0:2f:35:38:f5:05:64:
         38:2e:cd:e0:eb:ea:47:96:8e:5d:28:19:0e:b9:77:e6:be:fe:
         b5:c8:95:24:17:64:3f:19:8d:b2:e9:86:61:64:bc:8d:d8:1a:
         b2:46:e3:3b:26:5f:44:fc:df:74:2d:e2:52:2e:89:ae:de:d6:
         d9:1d:ae:94:ed:e7:1c:3d:97:be:7f:66:de:59:32:e8:72:91:
         c7:7a:65:91:18:9d:51:ce:ab:c8:ab:33:bd:d6:f7:c0:51:e1:
         58:42:fa:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUckeaAW6JMohM5NcR+JMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzBhZjFhOTk4ODZjOTEwMWQxMzVmNTRiZDJiZGVmMzU4
YjI2NmUwHhcNMjUwODIzMDEwMTU1WhcNMjUwODI0MDEwMTU1WjAzMTEwLwYDVQQD
EyhmZjliMGY3NTU4YTY1NDMxY2M2NWJmMTlhZWQ2NzJmODVkMjExODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhZnk5Np7aqCnDwWSloh9Va4Mt29
GcvBpu45FYjdgusNwJfb1uVnYW//ti9mlNJlFMIwPEbFno9ODNo7wx4m9PIyEpAw
M0MTnm4v1P+WOdBvm2yIBaN+thzZGEwkpyTCr9KdB3eQll8wprh2DiXEbUV1ixrW
8nhi68TwJ3lCJisst6kMx366uNGXmRTTIRpWxBUMSrD+DHJbmQQnsKliGtJx73jI
BeFQjrUpxyhthlKNQsucBRLSQYBBDCqTePEnzwvBsqpHzOIItc4UaGGDzbChTdkK
I5sNjIHNn0j8GdwXRE/TTWeSoYKktxEdhCzyTNHD2FfnY8oXDjNSubxaBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+bD3VYplQxzGW/Ga7WcvhdIRgoMB8GA1UdIwQY
MBaAFE1wrxqZiGyRAdE19UvSve81iyZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEt
NDYxYWIwZWNlZTAxLzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEtNDYxYWIwZWNlZTAx
LzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALch8GVj6
Oh+TrD5w9w0NIX2Zl1RSF6bV7GHUaDidAREHWQgP0hQMaQ546Blq/07AfifEOih8
98VXtmVAB1gl1sezg7cgNss1VHlVH9v5d319JstWV7uGZXUNbYqK4Nne5OTKd8U+
rOaPNWiHkh6PC9rtdaF7l0ZVLFcDN6dVdadXFJRxX9FXynO69mPMa4LGI+7CqyXF
nfPD/A/QLzU49QVkOC7N4OvqR5aOXSgZDrl35r7+tciVJBdkPxmNsumGYWS8jdga
skbjOyZfRPzfdC3iUi6Jrt7W2R2ulO3nHD2Xvn9m3lky6HKRx3plkRidUc6ryKsz
vdb3wFHhWEL6Wg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:05 2025 by rpki-client