Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File:                     TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier:          GXmPzL/XedOjGHjRbGlfwT/ABZqBwnr5NfaVI3sVh9E=
Subject key identifier:   A4:75:1D:7F:A3:9F:24:6D:0F:B9:C2:C7:AE:63:72:04:D9:DB:63:3B
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer:       /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial:       019879AEE8D14DF563527FDA60291787AF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number:          161D
Signing time:             Tue 05 Aug 2025 10:02:42 +0000
Manifest this update:     Tue 05 Aug 2025 10:02:42 +0000
Manifest next update:     Wed 06 Aug 2025 10:02:42 +0000
Files and hashes:         1: AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa (hash: qvJ/L4CGhxXYThfrwcSRz9uge4t0blzZ120bzRELDv8=)
                          2: F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa (hash: MXWzMDDGEU1JVdMLECcVtcWDfSvCJBYg9H2NNF7s8es=)
                          3: NT96ZXytZXeLYG8nYXbccb_AzMM.roa (hash: jF7i9U0X2AT56VYqylel02ci97XBnH5+7EoAI42ntOM=)
                          4: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: rzLP++oVPe/rmp4sCoRvW71mxB6e0z1xS7+3EhEu/rA=)
                          5: dZ8FONS7KKnXtPOWC1aUQDIHQr4.roa (hash: eYi/BgNAuN/BBQLuz4zrndBhjJKwJ84q4OAoqSVG8XI=)
                          6: kw0uZTx7n5NT55NNgp7YJmoV9Go.roa (hash: 8XlRvDMZFDhRr5qjjN+VGMeejBbNLMwpbYD6/C4LFwY=)
                          7: mLDvK3-bwZrItlCvgdik3bR3f2M.roa (hash: YyM0oKefpsy5Jzp3sMVhcN2qGFNdHn75iID1HMnlHcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ae:e8:d1:4d:f5:63:52:7f:da:60:29:17:87:af:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
        Validity
            Not Before: Aug  5 10:02:42 2025 GMT
            Not After : Aug  6 10:02:42 2025 GMT
        Subject: CN=a4751d7fa39f246d0fb9c2c7ae637204d9db633b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:be:5b:96:b1:35:a5:11:2d:9a:55:2d:f7:
                    a7:ac:22:da:9d:6c:47:e3:a9:39:81:fc:c3:70:b6:
                    df:5a:df:fb:63:cc:ca:98:f1:5b:9a:4d:8d:a1:14:
                    3d:e1:4a:e5:c3:6f:da:35:e8:58:b5:cf:52:7f:a2:
                    eb:69:db:e1:97:d3:35:78:7b:51:b5:90:52:7e:ef:
                    81:22:b9:61:95:4a:64:7d:d0:59:76:74:fb:b2:b0:
                    d3:84:9e:3c:d2:25:a2:63:03:8b:c6:70:92:b8:31:
                    ff:bb:1b:c5:95:19:a3:ad:3d:3b:9f:6b:2d:c3:67:
                    ca:52:6f:7a:7d:fa:f7:0a:a7:6f:08:e1:ab:23:23:
                    f1:08:7a:6b:12:1b:88:5c:3e:78:57:aa:10:c3:a3:
                    7b:55:ec:3d:43:99:c2:ad:26:f3:d6:3e:c9:ac:5e:
                    b0:3a:6f:9b:50:db:a7:60:9d:02:55:a6:09:c2:b6:
                    da:a1:65:99:26:f0:77:7f:a3:c6:ac:0f:d9:a3:14:
                    03:85:e7:73:26:87:70:13:5d:2a:f9:67:7c:d8:b1:
                    d4:5c:78:de:fd:6f:39:ff:58:61:dc:3b:29:2b:ee:
                    4a:9e:73:d4:6b:40:34:78:9d:4a:3a:27:a7:a6:20:
                    49:76:29:0c:57:85:68:53:86:eb:a1:ae:8a:aa:b7:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:75:1D:7F:A3:9F:24:6D:0F:B9:C2:C7:AE:63:72:04:D9:DB:63:3B
            X509v3 Authority Key Identifier:
                keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:35:ea:af:6c:25:f4:eb:f9:2f:e1:6b:67:c9:52:f5:53:36:
         0b:c9:ea:51:ca:b6:1d:5c:ea:44:ec:c4:67:2c:f0:55:7f:a3:
         27:ef:76:b4:cf:28:7a:3d:b1:e3:ab:6b:8d:37:6a:47:0f:83:
         39:d8:47:50:3c:f7:7b:15:6d:8e:77:22:e6:f5:6d:b6:8e:bb:
         d2:26:c0:de:57:3e:20:6c:5f:5b:6b:db:6f:4d:96:d7:63:98:
         9f:0c:57:03:79:2f:80:5b:15:81:1a:6a:6b:78:bd:69:07:88:
         1c:c6:a1:a2:fb:39:96:29:81:94:51:55:92:d5:02:82:da:99:
         31:0d:13:6a:3a:e0:6b:14:2d:f7:a4:5b:59:02:cb:15:f7:bc:
         f0:dd:e4:18:01:28:0e:fc:cb:f8:49:bb:a5:df:5b:46:e2:0c:
         d2:d4:71:42:0f:86:4a:f7:94:0e:70:56:5a:a4:b1:7d:ad:3f:
         aa:58:ea:dc:b5:c2:d1:a8:27:4b:6c:53:31:5e:55:24:bf:0e:
         c8:21:70:11:d0:f1:7c:68:cf:4f:62:8f:4c:09:37:d0:a8:c1:
         a8:94:fc:42:24:c7:c6:21:68:ee:d8:91:4f:00:1d:c2:6a:32:
         06:d0:ed:e5:4c:cb:ef:64:6d:82:7c:01:68:a4:25:60:c5:7d:
         17:43:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:45:29 2025 by rpki-client