Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File:                     Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier:          BBfr8Xl7HjRqjAcjTSbrJeamp9R89EBwDHfi5Zlvf9U=
Subject key identifier:   90:02:BC:25:19:C3:FB:18:EF:6E:64:F2:2C:7B:BC:D1:1C:A7:88:45
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer:       /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial:       0198D4E0599BC32949FCA6F11A89D6FEE8CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:09 +0000
Files and hashes:         1: 88NNjHCiX9_36_Ap90bLZBoJu2g.roa (hash: ZT80OMK3BXF8ZC1FoGfNRJbcIwwVIXvLAOficLJgVoc=)
                          2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: mX7xbG3ZKsq+lSgyMtvzI8o4kkQqvULmT8613jmW0qA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:59:9b:c3:29:49:fc:a6:f1:1a:89:d6:fe:e8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
        Validity
            Not Before: Aug 23 03:02:09 2025 GMT
            Not After : Aug 24 03:02:09 2025 GMT
        Subject: CN=9002bc2519c3fb18ef6e64f22c7bbcd11ca78845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:64:57:86:39:cc:50:f7:88:c9:2a:72:43:
                    27:fd:10:d8:de:b2:52:ef:02:86:54:4a:56:e0:9d:
                    7f:12:5f:f7:9f:67:d9:e3:51:17:f5:4f:c8:fb:21:
                    54:71:79:11:e6:a6:7e:ba:dc:1b:49:be:b3:d6:b9:
                    c2:2d:42:3d:2a:53:bf:48:d7:38:7f:43:29:4f:4a:
                    37:ec:a1:83:8a:6e:9f:0d:b3:85:e3:b0:0c:d2:de:
                    88:1c:c1:08:1f:3d:7e:4f:67:ef:f9:a0:25:49:07:
                    89:b2:bf:62:03:cb:9e:91:cc:ed:05:78:b0:55:f4:
                    50:cc:2c:42:21:ce:3a:78:4f:41:ea:30:ed:42:0e:
                    b2:ee:be:91:1f:1d:80:24:ea:30:ba:d0:67:a1:d1:
                    f2:0a:25:5b:6e:24:6c:f6:92:49:36:9d:36:3d:5c:
                    41:88:f9:44:5d:e9:4a:73:87:76:aa:e5:60:d1:97:
                    71:82:ab:1c:0f:1c:e2:b0:2d:14:0e:7b:10:d3:7c:
                    14:21:99:e0:cd:3d:d2:d9:e7:b0:2c:7a:6b:40:2d:
                    c4:ac:27:d2:d8:27:92:21:62:02:12:96:5c:e6:d0:
                    d5:67:04:70:23:c2:5b:60:5c:87:13:f8:0f:a5:fe:
                    c6:cb:66:ea:4f:16:17:ec:30:0a:e9:37:9f:55:8a:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:BC:25:19:C3:FB:18:EF:6E:64:F2:2C:7B:BC:D1:1C:A7:88:45
            X509v3 Authority Key Identifier:
                keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6a:2f:42:f4:b4:a8:ba:0d:5d:76:69:19:e4:93:b0:d9:90:
         5f:d2:db:d7:30:29:61:3b:0e:38:8a:ce:31:06:07:42:cf:d5:
         86:38:66:fc:da:b5:42:d3:67:f0:b2:5d:c8:13:50:9f:9d:58:
         01:19:61:1b:02:bf:15:4b:3b:4a:1c:ca:bb:de:81:12:b4:76:
         c6:22:0a:b5:a8:d2:33:b3:a2:f9:8d:91:2f:6b:76:e6:b0:0f:
         7a:80:52:75:45:94:3a:4d:14:04:86:63:da:f7:4b:eb:78:15:
         a8:c3:64:d3:3b:97:eb:45:a8:d5:ed:d8:20:74:58:14:28:3c:
         16:cd:ee:52:e8:0e:ea:75:b4:d3:fb:18:2c:12:2f:9e:9d:01:
         b5:ba:87:85:c7:11:bf:96:07:bb:a8:ae:b3:a2:ec:83:9a:d7:
         be:2f:8c:77:cb:fb:33:ae:81:8b:9b:22:b3:6e:e9:4a:e0:5b:
         b0:95:c9:ff:0d:84:90:6d:77:41:61:7b:7b:89:d9:0b:0b:76:
         8e:ea:2f:49:d4:8d:ce:1a:6b:47:c5:06:49:85:27:d7:2a:31:
         f1:ff:ef:08:e3:8c:76:0d:a9:1f:e0:8e:c4:2c:62:46:41:da:
         05:1c:07:91:85:f3:02:50:fb:89:40:4f:55:11:06:f8:2d:68:
         bb:1b:23:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:59 2025 by rpki-client