Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File:                     TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier:          yqgrL5CIJWsw483unStgM1iR99NbIlIAFx3b/BW+zS4=
Subject key identifier:   4F:FB:41:77:F6:62:D9:6B:2D:43:80:4A:BD:74:75:41:79:87:ED:65
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer:       /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial:       0198D4E06FD746730BDC3FFF5D026C148818
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number:          138C
Signing time:             Sat 23 Aug 2025 03:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:15 +0000
Files and hashes:         1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=)
                          2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: 2+ixjfxfdxnxTnlgGXzyskHLZ/08KvlQbpD63wEohRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:6f:d7:46:73:0b:dc:3f:ff:5d:02:6c:14:88:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
        Validity
            Not Before: Aug 23 03:02:15 2025 GMT
            Not After : Aug 24 03:02:15 2025 GMT
        Subject: CN=4ffb4177f662d96b2d43804abd7475417987ed65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:99:21:89:d8:c9:e9:7e:16:b1:36:d4:39:
                    39:bc:5b:99:e7:f8:cd:c1:3b:5d:67:8f:2b:23:2c:
                    6e:8e:d8:21:0b:86:05:45:96:cf:cf:26:98:c3:61:
                    29:69:9e:cc:87:e3:8b:6d:1f:23:e2:cc:36:dc:c4:
                    a2:1e:a4:ed:99:53:4d:cc:6b:46:ee:d3:02:33:8a:
                    9b:1b:da:c3:47:c2:1d:b2:d7:89:54:c1:ad:b6:5b:
                    a0:ff:79:77:00:3b:0c:b5:a8:7b:59:b4:65:e2:56:
                    4b:69:83:24:03:2e:ef:f8:c3:8b:19:6c:f1:33:65:
                    d2:28:7a:51:62:69:34:f4:51:a4:d2:97:31:d1:5b:
                    e6:9b:68:3b:9a:98:ec:85:2f:44:d2:8a:a3:a5:9e:
                    a1:22:45:0b:b3:eb:d8:60:80:ca:5b:01:54:73:bf:
                    33:8f:53:2c:7c:ee:b6:13:fa:8c:1a:51:9b:a1:ff:
                    7a:06:e0:80:3d:86:fb:2a:fe:2e:77:07:75:41:83:
                    08:91:71:6f:9d:9f:b4:24:c9:0c:e0:37:af:58:39:
                    70:bc:94:e0:a1:89:2f:6f:3f:61:f8:9d:a3:c3:3e:
                    76:8e:0e:37:38:cb:a5:f5:c8:63:98:0e:bb:3d:a3:
                    3f:d3:db:ff:70:60:de:8d:38:7e:a3:14:e3:88:0c:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FB:41:77:F6:62:D9:6B:2D:43:80:4A:BD:74:75:41:79:87:ED:65
            X509v3 Authority Key Identifier:
                keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:26:0d:64:3a:13:dc:ef:57:f6:fb:4c:02:8a:dd:f2:56:52:
         e6:77:0a:b2:96:50:35:db:c7:f7:93:3b:cf:c0:f4:cb:d5:2c:
         a4:98:a9:2e:f2:a4:d9:a3:d2:e4:0d:d4:5f:63:21:9c:95:96:
         4a:e1:68:ec:8c:7a:89:25:56:af:df:26:d3:ca:b4:09:f1:6b:
         da:26:37:70:66:68:e3:97:2b:1f:e7:e5:fc:09:62:04:1f:dd:
         64:79:2d:01:b8:82:48:5c:b3:26:a6:3d:fb:ec:5e:ae:b2:71:
         d0:53:5f:f5:b8:e9:de:9d:31:17:66:9f:a4:af:2b:2e:d6:df:
         c8:c0:d6:63:02:7a:55:f8:9b:02:8f:c1:d9:e7:41:8e:a0:a2:
         39:1b:67:ba:3c:e4:a5:c7:c2:c4:9c:fe:fe:a0:20:a9:2b:4b:
         07:ca:83:77:1b:f5:f6:bc:13:aa:6c:ad:98:bc:f8:14:b4:ec:
         a7:df:0c:2a:90:49:7f:32:85:52:94:4d:fa:46:25:57:fa:d2:
         e9:d6:49:31:9c:3b:6e:a5:c3:35:3e:c6:e3:07:78:cc:f8:82:
         4e:b2:0d:0c:d2:8a:76:94:01:03:e7:58:47:89:fa:af:a0:77:
         2a:cd:ec:72:02:a2:59:57:dc:53:73:0c:e5:35:46:1e:01:37:
         ef:42:96:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4G/XRnML3D//XQJsFIgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMDcxYmFkOTI5ZTM2MmIwNjJiODljODdmYTQxYjVkZWRh
NGZmYzAwHhcNMjUwODIzMDMwMjE1WhcNMjUwODI0MDMwMjE1WjAzMTEwLwYDVQQD
Eyg0ZmZiNDE3N2Y2NjJkOTZiMmQ0MzgwNGFiZDc0NzU0MTc5ODdlZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnuZIYnYyel+FrE21Dk5vFuZ5/jN
wTtdZ48rIyxujtghC4YFRZbPzyaYw2EpaZ7Mh+OLbR8j4sw23MSiHqTtmVNNzGtG
7tMCM4qbG9rDR8IdsteJVMGttlug/3l3ADsMtah7WbRl4lZLaYMkAy7v+MOLGWzx
M2XSKHpRYmk09FGk0pcx0Vvmm2g7mpjshS9E0oqjpZ6hIkULs+vYYIDKWwFUc78z
j1MsfO62E/qMGlGbof96BuCAPYb7Kv4udwd1QYMIkXFvnZ+0JMkM4DevWDlwvJTg
oYkvbz9h+J2jwz52jg43OMul9chjmA67PaM/09v/cGDejTh+oxTjiAyvcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/7QXf2YtlrLUOASr10dUF5h+1lMB8GA1UdIwQY
MBaAFEwHG62SnjYrBiuJyH+kG13tpP/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Mzg0MWItYTUyNi00MGUzLThhNGYt
YmMxZDlhMDM0NTkzLzEvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85Mzg0MWItYTUyNi00MGUzLThhNGYtYmMxZDlhMDM0NTkz
LzEvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiYNZDoT
3O9X9vtMAord8lZS5ncKspZQNdvH95M7z8D0y9UspJipLvKk2aPS5A3UX2MhnJWW
SuFo7Ix6iSVWr98m08q0CfFr2iY3cGZo45crH+fl/AliBB/dZHktAbiCSFyzJqY9
++xerrJx0FNf9bjp3p0xF2afpK8rLtbfyMDWYwJ6VfibAo/B2edBjqCiORtnujzk
pcfCxJz+/qAgqStLB8qDdxv19rwTqmytmLz4FLTsp98MKpBJfzKFUpRN+kYlV/rS
6dZJMZw7bqXDNT7G4wd4zPiCTrINDNKKdpQBA+dYR4n6r6B3Ks3scgKiWVfcU3MM
5TVGHgE370KWqw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:44 2025 by rpki-client