Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
File:                     tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json)
Hash identifier:          x5Xp5is06R8557M+gUvBuR7mOhPQt0MEw8ag/EPQd4c=
Subject key identifier:   EC:5E:D9:F9:09:98:E9:8A:71:F8:88:61:68:52:CA:EE:66:7F:16:E5
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Certificate issuer:       /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial:       01987DF7F16DDD0C8E4B7576ED27BA4719A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
Manifest number:          1432
Signing time:             Wed 06 Aug 2025 06:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:57 +0000
Files and hashes:         1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=)
                          2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: YeMlXeQ1t6YliQJPoV4PCBvgMv10xvsHhxCIriF5qnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:f1:6d:dd:0c:8e:4b:75:76:ed:27:ba:47:19:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
        Validity
            Not Before: Aug  6 06:00:57 2025 GMT
            Not After : Aug  7 06:00:57 2025 GMT
        Subject: CN=ec5ed9f90998e98a71f888616852caee667f16e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:d8:4e:12:b9:f6:8f:a2:e6:94:cb:19:57:
                    2f:25:83:7b:e6:6e:39:a2:d1:fc:ed:7c:ad:27:42:
                    8e:52:7a:84:91:60:77:93:4d:26:f3:8c:d4:59:9f:
                    2a:7c:71:ec:38:f5:e4:5a:f2:e0:90:b0:22:7c:f7:
                    64:81:67:8f:e0:fa:15:50:79:84:8b:94:9a:04:97:
                    50:50:e7:cd:51:38:6c:86:ab:70:6f:d0:7d:4c:7b:
                    66:6c:28:84:fc:63:c7:8b:57:3e:60:22:d5:74:ea:
                    a2:ae:71:63:a0:90:b8:92:ce:99:22:9c:31:d2:80:
                    31:a4:e4:2d:1c:13:a6:2c:e6:d0:3b:33:60:bb:d8:
                    a5:90:c0:b3:c1:09:f9:1d:08:a4:93:35:02:46:fe:
                    d1:92:af:0b:c4:f7:8a:e2:b3:d3:ec:2f:2f:d5:32:
                    52:93:79:26:ab:f4:8f:08:d6:30:19:d7:5f:67:95:
                    05:2e:06:2b:83:1c:c0:c9:bb:fd:88:a3:cc:f5:15:
                    be:e1:24:cf:69:40:7b:c8:90:be:fb:7b:6d:f1:63:
                    68:82:4f:2f:c7:25:fc:9e:74:7f:6a:e9:d6:12:23:
                    2a:2b:93:a9:df:33:04:a7:1f:9d:05:19:a2:97:b6:
                    d5:13:fb:65:16:78:b0:88:e2:68:8e:a2:d0:12:fd:
                    8c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:D9:F9:09:98:E9:8A:71:F8:88:61:68:52:CA:EE:66:7F:16:E5
            X509v3 Authority Key Identifier:
                keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:41:63:32:8c:c3:e5:4e:11:ad:83:cd:bb:91:4b:8a:2a:df:
         4d:07:72:11:92:4e:71:36:48:3e:7c:e4:eb:6d:7d:5d:dd:52:
         dd:d6:4b:f3:95:f4:ef:fb:a9:60:18:fe:84:f6:72:7a:0f:e2:
         c1:b0:ae:ed:8a:9d:9f:78:c4:8e:a7:dc:bf:3d:eb:76:86:fd:
         e2:40:27:e8:81:d2:6f:55:2e:fe:b8:51:27:16:97:a7:09:97:
         c8:27:22:11:2e:86:e6:cc:55:12:92:ce:3e:c0:3a:24:61:30:
         0b:ca:1e:56:af:6d:a2:b2:78:99:f4:7d:c8:61:5d:fe:5b:86:
         d6:dc:b4:b0:4f:c0:d8:c4:b9:7d:a1:7d:b8:3e:16:aa:ab:2d:
         cf:8b:74:81:96:23:a9:a1:43:b9:9c:19:6b:ee:68:7e:2b:10:
         cb:f9:10:55:35:ee:d1:db:d6:6b:ef:95:d5:a8:d3:cd:e4:24:
         2a:01:43:a2:76:70:b9:d6:8d:55:5c:60:2e:d4:4c:bd:63:53:
         e3:3a:94:13:f1:91:97:96:cf:7e:81:a0:9e:99:7d:75:3e:ae:
         a8:0d:4f:d9:67:57:b5:03:15:92:f2:42:c0:4b:ef:bf:2a:85:
         e4:fb:fe:8b:3b:e1:ec:e9:e6:73:fd:d9:1e:26:3d:b4:74:71:
         da:35:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:03 2025 by rpki-client