Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
File:                     tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json)
Hash identifier:          rSHY+z5gLek4HVIEvApmQ36mXZSWKMoUxxvN5xr+hs4=
Subject key identifier:   E5:FC:14:E4:27:57:87:DB:BD:A9:0F:73:2B:F0:1D:36:24:88:31:44
Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Certificate issuer:       /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Certificate serial:       0198861FA89D28096ACA77C66AF517F635EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
Manifest number:          161D
Signing time:             Thu 07 Aug 2025 20:01:18 +0000
Manifest this update:     Thu 07 Aug 2025 20:01:18 +0000
Manifest next update:     Fri 08 Aug 2025 20:01:18 +0000
Files and hashes:         1: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: Ah2sUH933su7Sq60x6/KcVNSfkhEuS2ppuzCxl0BLlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:1f:a8:9d:28:09:6a:ca:77:c6:6a:f5:17:f6:35:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
        Validity
            Not Before: Aug  7 20:01:18 2025 GMT
            Not After : Aug  8 20:01:18 2025 GMT
        Subject: CN=e5fc14e4275787dbbda90f732bf01d3624883144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:da:76:15:bf:71:d1:95:bf:86:8a:b7:02:d9:
                    31:07:37:48:39:35:96:a4:a3:ca:f2:a6:cd:2a:04:
                    36:64:cc:e5:29:40:ab:6d:c6:fc:91:93:f4:ee:36:
                    d9:2f:a4:d3:12:9a:81:26:1d:55:b2:ed:d1:4f:71:
                    e6:80:46:a3:8c:af:3c:be:44:ce:2c:3b:a0:64:27:
                    a5:24:d4:df:2f:44:2c:af:cc:e0:fb:d4:dd:79:04:
                    d0:d7:33:bb:a0:f3:3e:9e:b0:82:bb:f3:e3:ee:f1:
                    4f:cb:37:31:34:36:6c:80:b6:dd:d7:0c:7a:c8:9a:
                    0a:f1:00:0c:5e:93:01:30:2b:a1:14:27:f6:60:2b:
                    82:88:fa:05:e7:df:12:39:17:47:6a:b5:b8:2a:19:
                    3a:8f:1f:2a:62:c3:6e:0b:bd:28:15:52:16:2e:15:
                    a8:f1:7d:a4:9b:aa:ee:15:33:f4:3e:8f:ea:81:c3:
                    ee:1c:8d:9f:b9:88:a2:6d:ff:c5:46:50:15:a9:95:
                    fc:4d:28:8e:3f:b6:69:d2:01:ba:64:d7:ab:11:03:
                    33:3a:6e:b9:32:13:63:ed:a1:8d:2d:ff:06:c2:88:
                    7a:0c:69:ad:1b:f3:47:14:24:c8:a4:0e:13:1b:f1:
                    84:4d:47:15:f8:25:1a:96:9f:79:f9:1e:ab:65:17:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:14:E4:27:57:87:DB:BD:A9:0F:73:2B:F0:1D:36:24:88:31:44
            X509v3 Authority Key Identifier:
                keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a6:c7:89:7d:12:b9:57:74:4a:22:ed:e3:d0:63:17:7e:3d:
         a3:2a:1d:38:79:d1:25:8a:b8:96:bc:0a:37:dd:27:3d:a1:22:
         78:60:e9:fc:c8:75:56:68:b8:88:b4:51:3d:d2:35:2c:23:93:
         bd:51:8a:64:82:d5:25:5d:35:fa:5f:ca:ef:74:b6:51:dc:2c:
         a8:cc:28:d1:8e:a3:b1:c3:61:40:ab:e3:0c:53:01:ad:de:90:
         0b:35:9c:d5:fb:a2:1c:8c:ad:38:5f:ad:10:ee:8e:38:af:b9:
         ae:aa:e2:45:69:b2:75:9d:d1:ac:e8:ca:a2:0d:e9:8d:82:26:
         90:1e:a2:ee:a3:fa:10:b2:ef:3c:b9:39:09:59:03:63:82:a3:
         a7:9c:97:eb:c2:5f:ca:51:d0:c8:1a:7c:ef:e8:db:21:ba:d4:
         9d:28:78:bb:9a:f5:72:8a:8f:90:a5:fe:c3:37:07:c9:c5:63:
         23:a5:5a:a0:83:f2:9e:eb:48:da:1e:a2:3a:7c:fe:7c:77:4d:
         85:91:e0:e4:4a:18:90:60:ea:d3:27:72:ca:60:8e:f2:67:85:
         74:44:da:3e:e6:e0:6d:71:d4:e0:b8:13:06:b7:44:64:82:7c:
         27:b5:5c:5c:56:4f:3a:10:6f:66:95:6d:49:d5:27:ac:86:bd:
         27:11:ed:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGH6idKAlqynfGavUX9jXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OTQyMjQ3NmUxYWU1ZWEwZDU4ZTRmOGZkZjkxZjA1ZjEw
MmZlZmIwHhcNMjUwODA3MjAwMTE4WhcNMjUwODA4MjAwMTE4WjAzMTEwLwYDVQQD
EyhlNWZjMTRlNDI3NTc4N2RiYmRhOTBmNzMyYmYwMWQzNjI0ODgzMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dp2Fb9x0ZW/hoq3AtkxBzdIOTWW
pKPK8qbNKgQ2ZMzlKUCrbcb8kZP07jbZL6TTEpqBJh1Vsu3RT3HmgEajjK88vkTO
LDugZCelJNTfL0Qsr8zg+9TdeQTQ1zO7oPM+nrCCu/Pj7vFPyzcxNDZsgLbd1wx6
yJoK8QAMXpMBMCuhFCf2YCuCiPoF598SORdHarW4Khk6jx8qYsNuC70oFVIWLhWo
8X2km6ruFTP0Po/qgcPuHI2fuYiibf/FRlAVqZX8TSiOP7Zp0gG6ZNerEQMzOm65
MhNj7aGNLf8Gwoh6DGmtG/NHFCTIpA4TG/GETUcV+CUalp95+R6rZRdmLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOX8FOQnV4fbvakPcyvwHTYkiDFEMB8GA1UdIwQY
MBaAFLaUIkduGuXqDVjk+P35HwXxAv77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNDlhZmUtMTVhZS00ODVhLWFmNzYt
NjY1MTZmZmNlNzUwLzEvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lNDlhZmUtMTVhZS00ODVhLWFmNzYtNjY1MTZmZmNlNzUw
LzEvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6bHiX0S
uVd0SiLt49BjF349oyodOHnRJYq4lrwKN90nPaEieGDp/Mh1Vmi4iLRRPdI1LCOT
vVGKZILVJV01+l/K73S2UdwsqMwo0Y6jscNhQKvjDFMBrd6QCzWc1fuiHIytOF+t
EO6OOK+5rqriRWmydZ3RrOjKog3pjYImkB6i7qP6ELLvPLk5CVkDY4Kjp5yX68Jf
ylHQyBp87+jbIbrUnSh4u5r1coqPkKX+wzcHycVjI6VaoIPynutI2h6iOnz+fHdN
hZHg5EoYkGDq0ydyymCO8meFdETaPubgbXHU4LgTBrdEZIJ8J7VcXFZPOhBvZpVt
SdUnrIa9JxHt4A==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:15 2025 by rpki-client