Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
File:                     TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json)
Hash identifier:          z2WLw5GOOY+OT1mOBQoots3i+x4+H6OgVjPEj8FM+04=
Subject key identifier:   31:2E:25:9B:F5:FA:E8:FB:73:87:27:00:22:8E:19:69:3D:53:10:D5
Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
Certificate issuer:       /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Certificate serial:       0198D4727688E28109D127CABBADB3D06EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
Manifest number:          03E3
Signing time:             Sat 23 Aug 2025 01:02:07 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:07 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:07 +0000
Files and hashes:         1: M1M7HuPtGiosGSo4FBz1zc0zdo4.roa (hash: NcnqoCTtbPhCjxo06sSrzfv3k+hjFXX2MJeaGNHx2bI=)
                          2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: bGNJeBp/AkHZT8eBYQMc6cbySgckUvDOD4ngfcVswck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:76:88:e2:81:09:d1:27:ca:bb:ad:b3:d0:6e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
        Validity
            Not Before: Aug 23 01:02:07 2025 GMT
            Not After : Aug 24 01:02:07 2025 GMT
        Subject: CN=312e259bf5fae8fb73872700228e19693d5310d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:d9:74:42:09:45:44:0b:03:9d:7f:59:06:
                    c2:2e:ba:f1:8c:00:45:b4:bc:63:df:72:e5:b4:13:
                    75:6c:6f:ad:b4:ab:cc:8e:6a:fd:6b:43:bd:e0:ae:
                    87:05:fe:26:1b:77:b2:a1:d5:9d:b3:48:50:24:95:
                    2a:69:2b:2b:1a:17:a5:51:d0:87:14:26:f8:95:e8:
                    8e:b6:82:a9:00:2a:07:3d:b7:4b:e6:cd:dd:c8:9e:
                    97:e1:2e:be:76:c6:01:72:b1:5d:2b:1e:6f:f9:af:
                    f4:22:25:f2:7a:34:b1:cd:a5:2d:21:71:a7:d5:29:
                    9d:9c:7a:fc:bc:61:53:58:b8:74:0c:43:f4:48:28:
                    93:da:c1:95:14:15:94:ac:ea:49:1d:82:bb:8d:ce:
                    c8:f2:a9:ba:c7:b2:ff:bf:83:9b:78:4b:46:53:27:
                    1b:74:03:ad:fa:bc:f5:7f:aa:41:eb:8c:6e:44:6f:
                    2d:c6:57:2a:f1:46:cc:d3:54:46:95:96:0c:85:b8:
                    c6:69:f4:92:34:6c:86:87:d3:6b:5c:0a:fe:96:5e:
                    db:6f:99:3b:83:36:4e:16:7b:1a:b6:61:05:5e:42:
                    27:3e:cf:d4:39:a5:fd:b5:f1:23:74:71:53:cc:9b:
                    19:aa:5c:0e:0b:cf:bc:9f:3b:73:9c:b2:bf:fc:0c:
                    d2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2E:25:9B:F5:FA:E8:FB:73:87:27:00:22:8E:19:69:3D:53:10:D5
            X509v3 Authority Key Identifier:
                keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0f:4b:d3:75:0a:b7:5d:36:d2:6f:30:2c:65:95:65:fc:78:
         fb:ab:fe:de:b2:a0:6a:e1:37:d3:d0:33:76:9a:3f:b5:9a:af:
         57:41:df:bf:08:e3:0d:7c:04:42:ec:d5:0d:cb:4e:ac:92:f5:
         c6:93:ae:03:35:4d:48:c5:25:20:67:e1:29:25:b0:3e:15:66:
         e9:60:30:49:af:89:ba:88:dd:72:19:e6:25:85:ba:94:0b:7e:
         4f:27:b4:53:27:6b:f0:61:72:e8:c5:f7:ff:0b:14:86:e9:af:
         d7:95:c0:d6:cb:74:6e:5c:60:90:01:2c:02:b8:81:fa:8f:9d:
         88:11:ae:21:8c:ee:07:98:76:23:2e:18:31:fe:2d:4e:2c:c8:
         1b:99:56:37:0b:70:9d:e3:b7:b8:95:25:2c:e0:6f:98:73:71:
         70:1f:2e:16:b9:4d:9f:b8:ac:29:85:65:e6:6b:9f:04:41:d3:
         16:f6:18:8b:eb:31:0a:af:e6:bb:82:4f:d9:77:c8:8d:75:b8:
         d5:35:35:20:df:5e:45:7b:ae:58:c2:84:d5:30:8b:60:ea:55:
         d8:eb:bb:02:3a:d4:ee:6e:93:5f:36:d7:da:c8:5a:16:cb:32:
         bd:56:7e:01:cc:ee:b0:ba:da:f9:09:5f:60:7f:78:e0:8d:db:
         ad:f1:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:34 2025 by rpki-client