Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File:                     Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier:          d/VKgKqP8PfjNifpwgauS5XMb6cMGshjO7wfwzBpDfQ=
Subject key identifier:   66:61:F4:9D:34:22:00:10:78:00:63:88:C9:49:1F:B9:23:89:85:32
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer:       /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial:       01987418B2DAF1745F6775D2331BDC8FD3DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number:          1623
Signing time:             Mon 04 Aug 2025 08:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:32 +0000
Files and hashes:         1: 5jwygws2szQICkFAbQDt0DfTE24.roa (hash: CRuVg76LibQeWgQvKJXvsry4Ac92m/NILVupnVOrdIE=)
                          2: 8i0pFHh3jLLr_PpCWW1tgeOnNls.roa (hash: zniHfjj60ALgt1todbQ0gmqBBGRN1w6Z180L0gimowg=)
                          3: M-D765qKLa5rpx98GwEizjipWV0.roa (hash: sZVekYH0lnyQrwkjPmHgYKbukfVk03AtK4DNYJI9l9w=)
                          4: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: u2yzl972Zqww4/OvsDhx+VpsHOzwM69XQuyDMS2QKKs=)
                          5: ehgAzBDC5TDJSiS2woTLYA9Z-4E.roa (hash: K6RVhNClpsXwi3nvwOK5VpovbryAZNiXfSXsDcn1PP4=)
                          6: vOfFSwnv08l6OdPeZZK6ruAsY5E.roa (hash: HCrYAQ+7uNSAWRDrRhQ/VN8mpYkiEOW8ifFbRzWfvZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:b2:da:f1:74:5f:67:75:d2:33:1b:dc:8f:d3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
        Validity
            Not Before: Aug  4 08:00:32 2025 GMT
            Not After : Aug  5 08:00:32 2025 GMT
        Subject: CN=6661f49d3422001078006388c9491fb923898532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:b7:63:be:79:bb:a6:b5:9f:60:e9:bf:27:
                    89:62:96:0a:18:af:79:f0:ee:87:48:72:fa:b5:82:
                    51:8c:2f:ee:43:ea:47:a8:98:97:26:71:78:21:4f:
                    21:6d:91:6e:95:02:3e:08:6a:f4:94:bb:c1:6e:f6:
                    c3:bb:5b:26:d3:d5:44:ea:65:23:82:a1:0d:e6:8b:
                    28:20:dd:8b:d6:87:b1:06:37:93:93:e5:f8:44:37:
                    f1:aa:15:0b:20:62:7d:fd:e3:49:ab:b5:c4:67:3d:
                    78:1f:8e:c3:35:e1:ef:1d:f2:7b:e0:ea:b8:5a:81:
                    af:57:b3:bc:28:7c:11:80:7c:4f:0c:28:fa:9d:38:
                    21:b0:2b:5d:72:b1:27:5f:97:4b:f8:31:c6:b5:57:
                    a8:90:90:f2:85:29:cc:76:97:3f:a2:3b:67:f7:f3:
                    9e:eb:23:a9:3c:1a:3c:aa:18:f8:b0:8e:bf:c5:1d:
                    fe:64:02:83:c8:42:47:32:41:ad:23:3f:6f:b2:46:
                    a4:1a:79:2f:fa:e5:14:ec:b7:c4:55:a2:00:4b:0d:
                    61:d7:36:6c:7d:e4:50:03:94:bc:84:dd:9f:09:e5:
                    db:e9:27:e7:7f:fd:64:4c:e4:31:c7:62:11:e0:f8:
                    1f:15:51:39:02:df:59:d7:72:63:26:b6:fd:aa:91:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:61:F4:9D:34:22:00:10:78:00:63:88:C9:49:1F:B9:23:89:85:32
            X509v3 Authority Key Identifier:
                keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:83:8a:54:59:09:c9:4d:c4:a0:07:89:8b:9f:3b:bb:af:af:
         ac:75:16:fa:58:45:11:2e:d9:6f:04:5e:14:af:f5:2f:c7:81:
         ca:6e:cb:54:00:7c:cf:63:95:bc:ec:cd:17:c0:cf:8a:31:99:
         b4:5c:84:57:28:8a:97:b3:09:45:09:0d:10:e7:b6:7a:be:a1:
         c2:6c:db:d7:79:4e:fc:37:9a:f3:f5:26:c1:2f:d4:32:51:9a:
         2b:81:5d:c3:77:a1:28:15:56:b5:bc:93:11:5a:07:62:46:1f:
         d9:da:a6:3a:2d:27:c9:06:84:49:41:c6:11:35:d3:6a:7a:01:
         b7:9c:4e:b4:ad:21:13:ea:c6:3a:1a:0a:c6:36:f5:0f:77:6b:
         1d:74:e0:e3:a8:82:e5:4b:74:68:ba:1c:b0:4c:ed:4f:43:64:
         09:2b:bd:0d:e6:87:75:56:9d:fb:ad:09:68:63:7a:2a:0e:cd:
         72:ff:4d:1f:48:25:60:ba:73:aa:dc:d5:23:f5:13:1b:dc:10:
         97:a5:29:95:c2:f9:be:86:83:d3:15:f8:1a:2e:19:bb:e3:07:
         aa:0d:de:4e:09:a4:35:35:ca:5c:26:36:c6:af:ea:7f:3c:26:
         ff:1e:bf:2c:01:6d:3b:c2:d9:c0:93:52:0c:9b:ef:03:20:19:
         e3:d7:fa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:37 2025 by rpki-client