Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
File:                     TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft (raw, json)
Hash identifier:          ckmXeZgHOf2224AFt+Cq3v3RtZwhtHWhTEyQKmzkmY4=
Subject key identifier:   9E:54:A2:8C:4E:FB:19:C3:FE:AA:34:C7:68:5C:E0:8C:BD:08:FA:74
Authority key identifier: 4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
Certificate issuer:       /CN=4e7856d295580936916a553fb9bfb59f3a176804
Certificate serial:       0198D5F1DCE3DB7F7230821357518A490F14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
Manifest number:          EC
Signing time:             Sat 23 Aug 2025 08:00:54 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:54 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:54 +0000
Files and hashes:         1: PQkIeE659gopb00eRM_lG80Gc8o.roa (hash: jYp7n+Hnf2RwdwBfym+F/7I14DXBfuEPAe6US1OGNLE=)
                          2: TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl (hash: KRvlZY6ZQ6SVWVDWKFeSTe3xaC1r3P8QD7qwNJ8gOgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:dc:e3:db:7f:72:30:82:13:57:51:8a:49:0f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7856d295580936916a553fb9bfb59f3a176804
        Validity
            Not Before: Aug 23 08:00:54 2025 GMT
            Not After : Aug 24 08:00:54 2025 GMT
        Subject: CN=9e54a28c4efb19c3feaa34c7685ce08cbd08fa74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:22:4f:5e:43:87:8d:4f:e2:8c:e0:ec:c3:
                    32:b8:7e:e6:63:34:f5:be:73:9c:fe:e2:aa:3a:57:
                    9b:5f:f5:1c:fa:93:e0:44:29:71:eb:c2:fa:a3:3b:
                    2f:44:85:8e:a6:bf:84:16:29:31:6b:1c:d0:13:2c:
                    b5:d7:af:85:c4:9c:ba:75:11:32:61:74:5d:d3:2f:
                    7c:b2:5d:0d:ae:a4:c2:c4:03:03:b7:ea:78:b8:63:
                    f6:97:2d:ac:22:5f:9f:f9:af:4a:67:87:73:79:d8:
                    ff:93:56:74:3a:bc:eb:a9:78:7b:d8:8f:3f:99:37:
                    52:c9:0d:4c:7a:78:8b:61:61:e2:75:18:88:1f:19:
                    cf:7d:c0:89:c9:0d:ac:74:5f:e9:2d:2b:de:67:2b:
                    d0:5b:74:f0:9c:14:50:2b:12:8c:5f:b8:a5:fe:41:
                    ab:40:7d:93:bd:dd:7d:bd:42:c0:62:b0:e6:82:67:
                    25:10:ad:78:dd:7e:50:f7:4f:dc:b2:40:87:2d:12:
                    67:5c:b6:8e:6f:fb:b9:63:75:98:2d:a7:6b:06:09:
                    a2:5f:c9:6b:c3:1f:ca:62:54:d5:90:79:ae:46:ee:
                    f6:ca:d5:c2:b0:1c:4e:78:c9:87:74:6e:b1:aa:d1:
                    7e:f3:c6:fb:14:e8:34:39:62:9f:77:b1:17:58:53:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:54:A2:8C:4E:FB:19:C3:FE:AA:34:C7:68:5C:E0:8C:BD:08:FA:74
            X509v3 Authority Key Identifier:
                keyid:4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2b:da:c7:78:a2:b2:0f:ea:d0:51:db:a9:fa:ee:22:ce:75:
         98:65:03:e0:f3:d1:91:aa:09:09:32:af:d2:13:50:f8:e7:20:
         82:04:bc:bb:80:cd:ff:1c:db:a9:10:e9:86:46:e6:4a:3c:01:
         b7:d6:3b:41:ca:4a:fe:e9:43:80:02:e2:1c:79:ad:dc:1f:21:
         0e:64:34:27:2b:f0:81:d5:4a:4a:fb:38:59:85:c2:0d:78:65:
         4e:92:50:ac:38:fa:55:86:01:8f:de:5a:71:4c:74:b9:73:6a:
         ac:66:c0:50:4e:03:29:e9:ee:73:40:85:f1:08:38:05:a3:85:
         93:75:99:e3:73:9c:58:31:60:ba:b0:fa:5b:65:3d:c5:ee:f6:
         b2:f3:cf:84:21:bb:93:db:84:e2:0b:d4:43:66:72:c0:b9:0c:
         d3:0a:3b:90:20:b1:df:70:5c:5e:99:ee:97:32:70:23:53:8e:
         a9:dd:3b:14:59:ed:90:9c:66:e2:44:63:81:4c:3a:1a:e1:65:
         3e:45:84:9a:f5:3b:97:5a:c9:51:d6:6d:b8:6a:65:d8:00:3b:
         46:dc:e3:f5:27:1f:b4:f1:5c:97:ac:e4:62:d0:eb:09:0f:81:
         50:56:0e:01:67:fd:02:62:7d:6f:fc:cd:0f:7d:49:97:09:a3:
         c4:61:85:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8dzj239yMIITV1GKSQ8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzg1NmQyOTU1ODA5MzY5MTZhNTUzZmI5YmZiNTlmM2Ex
NzY4MDQwHhcNMjUwODIzMDgwMDU0WhcNMjUwODI0MDgwMDU0WjAzMTEwLwYDVQQD
Eyg5ZTU0YTI4YzRlZmIxOWMzZmVhYTM0Yzc2ODVjZTA4Y2JkMDhmYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJgiT15Dh41P4ozg7MMyuH7mYzT1
vnOc/uKqOlebX/Uc+pPgRClx68L6ozsvRIWOpr+EFikxaxzQEyy116+FxJy6dREy
YXRd0y98sl0NrqTCxAMDt+p4uGP2ly2sIl+f+a9KZ4dzedj/k1Z0OrzrqXh72I8/
mTdSyQ1MeniLYWHidRiIHxnPfcCJyQ2sdF/pLSveZyvQW3TwnBRQKxKMX7il/kGr
QH2Tvd19vULAYrDmgmclEK143X5Q90/cskCHLRJnXLaOb/u5Y3WYLadrBgmiX8lr
wx/KYlTVkHmuRu72ytXCsBxOeMmHdG6xqtF+88b7FOg0OWKfd7EXWFMy0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5UooxO+xnD/qo0x2hc4Iy9CPp0MB8GA1UdIwQY
MBaAFE54VtKVWAk2kWpVP7m/tZ86F2gEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5oVzBwVllDVGFSYWxVX3ViLTFuem9YYUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83ZjliZTEtYjcyYi00NTg1LWEyYmQt
ZTRkYThhYzJiM2RiLzEvVG5oVzBwVllDVGFSYWxVX3ViLTFuem9YYUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83ZjliZTEtYjcyYi00NTg1LWEyYmQtZTRkYThhYzJiM2Ri
LzEvVG5oVzBwVllDVGFSYWxVX3ViLTFuem9YYUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCvax3ii
sg/q0FHbqfruIs51mGUD4PPRkaoJCTKv0hNQ+OcgggS8u4DN/xzbqRDphkbmSjwB
t9Y7QcpK/ulDgALiHHmt3B8hDmQ0JyvwgdVKSvs4WYXCDXhlTpJQrDj6VYYBj95a
cUx0uXNqrGbAUE4DKenuc0CF8Qg4BaOFk3WZ43OcWDFgurD6W2U9xe72svPPhCG7
k9uE4gvUQ2ZywLkM0wo7kCCx33BcXpnulzJwI1OOqd07FFntkJxm4kRjgUw6GuFl
PkWEmvU7l1rJUdZtuGpl2AA7Rtzj9ScftPFcl6zkYtDrCQ+BUFYOAWf9AmJ9b/zN
D31JlwmjxGGF3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:57 2025 by rpki-client