Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
File:                     TYEGKSpQrK_qaBfLoczmd6J34OE.mft (raw, json)
Hash identifier:          cyOBFeXPdtDMXRxO309ifY9Oy1A1LVppLpZJGUdY4ac=
Subject key identifier:   C7:86:B8:26:83:EB:04:82:42:D3:A3:D0:6B:DE:C4:7B:11:7F:EA:4F
Authority key identifier: 4D:81:06:29:2A:50:AC:AF:EA:68:17:CB:A1:CC:E6:77:A2:77:E0:E1
Certificate issuer:       /CN=4d8106292a50acafea6817cba1cce677a277e0e1
Certificate serial:       01987306E98BD120F605914837F3F702F47B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYEGKSpQrK_qaBfLoczmd6J34OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
Manifest number:          048A
Signing time:             Mon 04 Aug 2025 03:01:29 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:29 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:29 +0000
Files and hashes:         1: TYEGKSpQrK_qaBfLoczmd6J34OE.crl (hash: qQw0v5M6Dzc2UEdiPNXfS1+ADJl4KSrSEosPU/VM53U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYEGKSpQrK_qaBfLoczmd6J34OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:e9:8b:d1:20:f6:05:91:48:37:f3:f7:02:f4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8106292a50acafea6817cba1cce677a277e0e1
        Validity
            Not Before: Aug  4 03:01:29 2025 GMT
            Not After : Aug  5 03:01:29 2025 GMT
        Subject: CN=c786b82683eb048242d3a3d06bdec47b117fea4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:f5:44:7a:bc:0e:e1:65:03:eb:f2:c3:31:
                    e7:01:f3:25:e1:08:a4:00:50:85:bf:dd:73:0d:25:
                    10:72:39:45:9a:6e:2b:ed:e8:d0:54:48:fd:47:88:
                    21:74:50:bb:94:75:ee:48:42:2a:0a:21:f4:ac:1e:
                    50:a3:19:76:78:5b:84:11:d9:71:29:f3:b4:41:50:
                    28:af:12:e2:aa:f8:96:fc:a0:14:b5:9f:a8:91:91:
                    ae:0f:f0:26:45:d9:b5:dc:5f:f0:01:53:27:dd:98:
                    94:9a:de:aa:c6:f7:b8:fe:77:5c:cb:e2:c9:0e:be:
                    7a:69:50:bc:de:26:0f:06:ed:38:9d:54:12:7d:c5:
                    34:2e:e4:29:d7:5d:6c:8f:46:95:da:7d:2a:7d:62:
                    04:00:e3:cb:d2:f6:00:62:ae:af:ea:10:2e:be:8b:
                    ce:07:95:d0:74:ad:c9:e5:31:5e:19:28:ef:ac:f3:
                    da:cb:d4:09:b6:a1:4a:46:08:e1:be:70:17:17:7c:
                    ed:72:6a:c4:23:95:a0:c8:f2:d2:0c:8f:7d:ae:74:
                    94:44:83:f8:0b:80:bc:a8:c4:fb:f7:12:71:e3:b1:
                    fd:d5:29:d4:37:07:bf:4e:81:6a:9a:51:ff:56:15:
                    a0:6f:1c:01:6c:20:0f:53:ba:bb:fd:1a:bc:53:44:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:B8:26:83:EB:04:82:42:D3:A3:D0:6B:DE:C4:7B:11:7F:EA:4F
            X509v3 Authority Key Identifier:
                keyid:4D:81:06:29:2A:50:AC:AF:EA:68:17:CB:A1:CC:E6:77:A2:77:E0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYEGKSpQrK_qaBfLoczmd6J34OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6a:44:ef:31:a7:54:53:49:1b:db:3c:04:4e:a2:06:ad:6b:
         03:de:8f:16:71:d7:f8:f5:86:30:00:67:c6:a7:0f:05:3a:33:
         ad:ff:3e:46:42:ed:a7:61:71:e4:b4:b5:e3:bc:fd:34:6d:21:
         b0:10:00:43:21:55:49:94:48:c9:1c:b2:e9:7f:7a:30:e4:ef:
         4d:dc:f2:13:65:89:82:ba:ef:c1:5c:21:3a:29:c1:4c:b3:c1:
         c1:9c:a3:65:ae:73:53:94:00:5c:31:14:cf:75:3e:93:c1:d8:
         7a:6f:29:ce:fc:81:46:9c:10:4c:61:eb:7b:f9:c2:52:09:1b:
         93:75:d3:79:e7:53:3b:6b:e0:d3:a6:c1:a4:93:0a:49:49:75:
         e1:d8:1f:f9:d2:55:88:2c:10:5d:61:d6:34:b8:b2:8d:ba:aa:
         f4:7b:69:eb:88:8f:33:ed:59:19:d2:2f:b6:f1:bd:f5:6a:db:
         ed:f2:3c:f4:63:87:8e:3f:37:04:d4:53:b6:21:45:27:cd:eb:
         9d:d3:71:85:71:63:90:9e:f9:40:25:1e:06:cf:8f:1b:4d:e2:
         bc:1f:9b:77:68:68:cb:68:da:fe:8e:c0:34:43:10:bb:3c:7a:
         84:85:b5:0a:d5:69:2b:ce:aa:b9:90:17:6b:64:e7:d3:68:f8:
         6a:83:7b:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBumL0SD2BZFIN/P3AvR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkODEwNjI5MmE1MGFjYWZlYTY4MTdjYmExY2NlNjc3YTI3
N2UwZTEwHhcNMjUwODA0MDMwMTI5WhcNMjUwODA1MDMwMTI5WjAzMTEwLwYDVQQD
EyhjNzg2YjgyNjgzZWIwNDgyNDJkM2EzZDA2YmRlYzQ3YjExN2ZlYTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sz1RHq8DuFlA+vywzHnAfMl4Qik
AFCFv91zDSUQcjlFmm4r7ejQVEj9R4ghdFC7lHXuSEIqCiH0rB5Qoxl2eFuEEdlx
KfO0QVAorxLiqviW/KAUtZ+okZGuD/AmRdm13F/wAVMn3ZiUmt6qxve4/ndcy+LJ
Dr56aVC83iYPBu04nVQSfcU0LuQp111sj0aV2n0qfWIEAOPL0vYAYq6v6hAuvovO
B5XQdK3J5TFeGSjvrPPay9QJtqFKRgjhvnAXF3ztcmrEI5WgyPLSDI99rnSURIP4
C4C8qMT79xJx47H91SnUNwe/ToFqmlH/VhWgbxwBbCAPU7q7/Rq8U0TsAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeGuCaD6wSCQtOj0GvexHsRf+pPMB8GA1UdIwQY
MBaAFE2BBikqUKyv6mgXy6HM5neid+DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFlFR0tTcFFyS19xYUJmTG9jem1kNkozNE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mNTQxZDEtNWNmOS00NDgxLThhMDct
M2E1YjM2OTY4MTdkLzEvVFlFR0tTcFFyS19xYUJmTG9jem1kNkozNE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mNTQxZDEtNWNmOS00NDgxLThhMDctM2E1YjM2OTY4MTdk
LzEvVFlFR0tTcFFyS19xYUJmTG9jem1kNkozNE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmpE7zGn
VFNJG9s8BE6iBq1rA96PFnHX+PWGMABnxqcPBTozrf8+RkLtp2Fx5LS147z9NG0h
sBAAQyFVSZRIyRyy6X96MOTvTdzyE2WJgrrvwVwhOinBTLPBwZyjZa5zU5QAXDEU
z3U+k8HYem8pzvyBRpwQTGHre/nCUgkbk3XTeedTO2vg06bBpJMKSUl14dgf+dJV
iCwQXWHWNLiyjbqq9Htp64iPM+1ZGdIvtvG99Wrb7fI89GOHjj83BNRTtiFFJ83r
ndNxhXFjkJ75QCUeBs+PG03ivB+bd2hoy2ja/o7ANEMQuzx6hIW1CtVpK86quZAX
a2Tn02j4aoN7iQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:02 2025 by rpki-client