Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          qUruwle/8pacXO/SzUs0vjpEdr8Oyx5QDm/RuhRFgPE=
Subject key identifier:   60:6C:AB:4D:0B:47:46:24:4F:E9:29:B2:6A:71:D8:97:C5:92:6A:7D
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       01988B0F0763FD7686C12DB4EFEE5D4085A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          055F
Signing time:             Fri 08 Aug 2025 19:01:14 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:14 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:14 +0000
Files and hashes:         1: 4ib--cnqLp0oi-QRP9CJRqv85Fk.roa (hash: NsYpYhfEaLmslYSk1TQ4VoW4ixy6WRpz9PM1r2Tk7Rg=)
                          2: MtLhAuf2NgYHgf0idQEjB2O5NSs.roa (hash: au7HQECLFDd4UQvAj9wy4z/oD6hBOrQVLU0RNpgJw7c=)
                          3: R23zeQRDOen9HPSmR-eKHeta0HU.roa (hash: lKe4syLzRE8BrGtoS0ZImyw7G/jxJEgSU5WDE02BXs8=)
                          4: Rb4b2fJCublE-IL8HhGXicF9sEM.roa (hash: PyYAOqircy60MPWz4V06L7QvOxOEimKDajTYlawGVcc=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: 2OCPx5O1E9UKwejvFBbUN+mF87S+6xuPvHCK+EY9IDs=)
                          6: nPr9uZx_D8jJFj15etiyotIJZFA.roa (hash: pbSWt6WwR9cxpCQXd7EkLbNcjMbaXCcbiCmqJC5x8GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:07:63:fd:76:86:c1:2d:b4:ef:ee:5d:40:85:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Aug  8 19:01:14 2025 GMT
            Not After : Aug  9 19:01:14 2025 GMT
        Subject: CN=606cab4d0b4746244fe929b26a71d897c5926a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1b:4b:91:91:91:59:4b:6c:b0:8f:0d:53:c0:
                    0e:90:a9:2e:d4:a0:0a:aa:f6:bc:9e:4e:16:73:32:
                    ab:33:b5:ed:a8:a6:07:03:1b:42:5e:bd:ff:23:42:
                    6a:82:49:c6:8b:c9:40:fc:38:e0:f6:dd:e9:f0:15:
                    fd:d7:4d:d9:5e:81:c8:49:1c:7a:8f:5a:bb:a0:bb:
                    6b:ba:5f:ad:82:98:08:6c:8f:05:38:de:f3:d0:db:
                    93:63:ba:86:fc:59:29:44:51:cf:5a:c9:b8:37:c5:
                    7f:85:ea:21:6c:b3:7b:9e:9a:62:5a:fd:e7:3a:c3:
                    5e:e7:1a:9e:7a:38:1f:52:03:8b:8e:9d:a0:3f:25:
                    1d:06:14:48:fd:bc:df:49:d9:87:c0:c1:d3:f1:5d:
                    c7:27:26:62:a3:33:17:4d:01:72:00:09:30:3a:9d:
                    ac:d5:45:7b:60:7f:59:3f:9c:36:a7:cf:ba:16:cb:
                    08:01:6f:08:95:26:65:51:83:9d:b5:63:e3:74:6a:
                    6d:47:6f:9d:53:02:c2:c6:f0:9a:e3:78:86:5a:7a:
                    1e:d3:59:2f:df:fd:d8:de:90:dd:38:68:eb:94:8b:
                    53:f2:9a:95:e1:fe:78:5c:41:2c:cf:1c:05:77:ff:
                    59:68:d6:89:43:5c:11:b4:bf:ce:c2:58:a8:d0:c5:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6C:AB:4D:0B:47:46:24:4F:E9:29:B2:6A:71:D8:97:C5:92:6A:7D
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:a9:a7:26:66:9a:f6:47:ee:12:d6:cf:5e:b5:53:12:2d:87:
         89:93:b0:c6:cc:3a:c1:d6:c3:ab:39:96:40:c7:2d:b8:2d:1a:
         5d:3b:df:48:74:2c:af:26:49:d9:d8:bb:67:03:f6:d9:f5:b4:
         95:fb:0b:b1:82:ff:7b:2c:e1:0b:22:10:f0:32:6b:a8:f5:c7:
         dd:29:d6:61:93:ca:e9:8d:ab:37:04:7c:9b:5e:53:40:8b:fa:
         19:08:b5:c7:e9:b4:22:ad:3a:9c:86:b6:cf:2f:a3:a3:5f:35:
         de:a9:63:e4:0d:82:28:cb:9a:96:c3:0c:9c:16:41:9e:b4:ae:
         6f:5b:2c:4c:6b:c5:63:0c:60:6d:d0:d5:48:bd:b6:30:5f:07:
         db:61:b2:1e:76:47:e7:be:71:9c:d1:74:4b:e7:27:44:36:4a:
         b6:79:89:92:61:83:93:f0:1f:3f:5f:8f:e3:db:4b:dd:8a:60:
         9b:01:f2:c7:97:64:c6:48:e3:c0:88:c0:5b:5b:74:3a:dd:40:
         d2:9b:b3:69:f8:18:32:70:1c:50:b1:00:d6:e0:3b:91:98:5b:
         38:52:16:42:64:09:20:ae:24:ab:ec:63:1e:4d:c2:4b:e9:3e:
         1d:76:b8:26:2f:9c:19:3d:0e:3a:c2:19:bb:9d:bd:e6:d6:ff:
         a4:b9:36:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDwdj/XaGwS207+5dQIWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYTY1YzdlZGJhNDY5ZDA5OWQ3NmFhY2Q3ZGMyNjNmNGRm
ZWM1ZWIwHhcNMjUwODA4MTkwMTE0WhcNMjUwODA5MTkwMTE0WjAzMTEwLwYDVQQD
Eyg2MDZjYWI0ZDBiNDc0NjI0NGZlOTI5YjI2YTcxZDg5N2M1OTI2YTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5htLkZGRWUtssI8NU8AOkKku1KAK
qva8nk4WczKrM7XtqKYHAxtCXr3/I0JqgknGi8lA/Djg9t3p8BX9103ZXoHISRx6
j1q7oLtrul+tgpgIbI8FON7z0NuTY7qG/FkpRFHPWsm4N8V/heohbLN7nppiWv3n
OsNe5xqeejgfUgOLjp2gPyUdBhRI/bzfSdmHwMHT8V3HJyZiozMXTQFyAAkwOp2s
1UV7YH9ZP5w2p8+6FssIAW8IlSZlUYOdtWPjdGptR2+dUwLCxvCa43iGWnoe01kv
3/3Y3pDdOGjrlItT8pqV4f54XEEszxwFd/9ZaNaJQ1wRtL/Owlio0MVzxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBsq00LR0YkT+kpsmpx2JfFkmp9MB8GA1UdIwQY
MBaAFE6mXH7bpGnQmddqrNfcJj9N/sXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYt
NTEwMGEyNmQyNzRiLzEvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYtNTEwMGEyNmQyNzRi
LzEvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0qmnJmaa
9kfuEtbPXrVTEi2HiZOwxsw6wdbDqzmWQMctuC0aXTvfSHQsryZJ2di7ZwP22fW0
lfsLsYL/eyzhCyIQ8DJrqPXH3SnWYZPK6Y2rNwR8m15TQIv6GQi1x+m0Iq06nIa2
zy+jo1813qlj5A2CKMualsMMnBZBnrSub1ssTGvFYwxgbdDVSL22MF8H22GyHnZH
575xnNF0S+cnRDZKtnmJkmGDk/AfP1+P49tL3YpgmwHyx5dkxkjjwIjAW1t0Ot1A
0puzafgYMnAcULEA1uA7kZhbOFIWQmQJIK4kq+xjHk3CS+k+HXa4Ji+cGT0OOsIZ
u5295tb/pLk2nw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:37 2025 by rpki-client