Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
File:                     TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json)
Hash identifier:          nBk8TTG2axvSlDzkXK1yiW0zSa9Ui6b0t5e/mgfjE8s=
Subject key identifier:   9D:52:D2:44:26:F7:06:58:A8:AE:20:48:F4:4B:42:FB:7B:63:48:5E
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Certificate issuer:       /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial:       019872CFB5A76D553646FE99C90835607C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
Manifest number:          1555
Signing time:             Mon 04 Aug 2025 02:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:11 +0000
Files and hashes:         1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=)
                          2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=)
                          3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=)
                          4: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=)
                          5: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=)
                          6: QxU1oUg0L71x8I3OUGU7EffxOtQ.roa (hash: x4WguF8OrW9WYJ2uUgagYn93WyWPPdlfvjM3+EJeaQQ=)
                          7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: OF1ZIiHhC7EKHaLJ0xDqzlU/48e34qEP6zSRmImIQ1Q=)
                          8: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=)
                          9: euBBsPSZDk2hi4oMNwl8jWUt_ZQ.roa (hash: +ITOQ37NY3K8KZwFVE/U+tAJpUP5s6XRPDFSdyZ1pcc=)
                          10: h7aMZY4rs8JTQ1CJz5QbU9M1OvM.roa (hash: KFfDZ9dh2Ge3x0fBy92J3uTwn6FSGd+/h28pAkysnlM=)
                          11: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=)
                          12: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=)
                          13: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:b5:a7:6d:55:36:46:fe:99:c9:08:35:60:7c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
        Validity
            Not Before: Aug  4 02:01:11 2025 GMT
            Not After : Aug  5 02:01:11 2025 GMT
        Subject: CN=9d52d24426f70658a8ae2048f44b42fb7b63485e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:26:f1:39:7f:e9:32:11:92:97:df:34:65:
                    f8:5f:19:de:da:a7:d5:70:5d:7f:e4:2f:78:a8:5c:
                    dc:48:9d:29:10:d0:ba:29:34:97:d0:84:9e:30:11:
                    5c:4a:75:7b:b5:a2:d0:ef:72:4b:4d:18:21:d0:6a:
                    0c:db:36:67:e2:c9:9f:df:90:47:d0:27:ef:71:b0:
                    24:7b:9a:4c:02:97:ec:46:e0:41:af:78:4b:58:3a:
                    df:a5:d3:4d:21:ba:58:cd:e1:89:8c:98:83:48:24:
                    fd:90:42:42:f3:a4:cb:40:40:b8:9d:d7:fa:ba:b0:
                    4b:cb:64:d9:2b:75:03:f3:63:84:be:fe:78:e5:02:
                    28:ea:df:74:bb:aa:e6:10:db:4c:fc:b1:11:9f:c5:
                    39:1f:df:4f:ca:63:56:33:de:2a:8c:9e:12:08:4e:
                    8c:fc:4a:de:9c:e0:df:f5:2a:88:eb:9d:6b:0c:70:
                    d1:a3:72:a0:a9:3a:94:37:77:2a:81:f3:0f:4b:d5:
                    f7:ea:b0:cf:18:93:47:8d:5e:56:b6:10:ce:b7:53:
                    ce:ea:70:1d:63:0c:2c:fd:f3:08:b1:41:2a:f4:0d:
                    30:74:04:49:7a:9f:b2:26:39:27:6c:32:18:55:05:
                    7c:7a:42:7c:f3:6c:26:3b:1e:7e:20:ec:1e:21:1c:
                    8b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:52:D2:44:26:F7:06:58:A8:AE:20:48:F4:4B:42:FB:7B:63:48:5E
            X509v3 Authority Key Identifier:
                keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e1:d1:24:02:fc:be:cf:8b:cf:12:54:4c:51:06:18:3d:09:
         c6:e7:5b:e1:2d:3c:3d:d5:8e:be:38:4f:98:a5:a1:3d:af:f5:
         78:1b:4e:2b:c3:74:b6:a3:65:6e:e1:79:82:86:6c:88:ac:68:
         2b:96:c2:07:2f:86:fe:50:5b:27:f4:3d:4e:42:5a:36:f4:3a:
         05:f3:be:3d:bb:9d:f8:3e:b9:3b:a6:16:2d:5c:be:60:25:85:
         78:1c:4c:fb:5d:ae:dc:16:48:67:2a:f1:08:35:9e:30:09:41:
         0c:8b:f2:d8:b8:ac:99:19:bb:5c:45:e7:08:13:13:77:32:8b:
         3c:58:fb:13:97:0d:14:e8:d9:72:02:41:a4:10:2f:72:5f:ed:
         75:e3:d7:53:13:1a:64:1e:83:3a:de:68:57:35:a6:81:97:89:
         fd:87:05:f5:ba:9e:9e:38:6b:2b:52:8a:88:43:26:28:34:d3:
         5a:ca:92:d2:14:da:fd:b2:21:4c:60:dd:8a:79:3b:ba:39:3e:
         21:57:61:c0:29:41:2d:ce:69:8a:ee:a2:e3:85:d5:41:19:a9:
         af:0b:af:73:2b:fb:a7:47:19:df:3f:df:8a:8c:a8:45:82:f8:
         d9:d1:92:ff:f3:f2:0d:0b:af:b0:60:31:56:0a:52:56:12:52:
         40:4a:8d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz7WnbVU2Rv6ZyQg1YHyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5
MWQ0YTkwHhcNMjUwODA0MDIwMTExWhcNMjUwODA1MDIwMTExWjAzMTEwLwYDVQQD
Eyg5ZDUyZDI0NDI2ZjcwNjU4YThhZTIwNDhmNDRiNDJmYjdiNjM0ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8cm8Tl/6TIRkpffNGX4Xxne2qfV
cF1/5C94qFzcSJ0pENC6KTSX0ISeMBFcSnV7taLQ73JLTRgh0GoM2zZn4smf35BH
0CfvcbAke5pMApfsRuBBr3hLWDrfpdNNIbpYzeGJjJiDSCT9kEJC86TLQEC4ndf6
urBLy2TZK3UD82OEvv545QIo6t90u6rmENtM/LERn8U5H99PymNWM94qjJ4SCE6M
/ErenODf9SqI651rDHDRo3KgqTqUN3cqgfMPS9X36rDPGJNHjV5WthDOt1PO6nAd
Ywws/fMIsUEq9A0wdARJep+yJjknbDIYVQV8ekJ882wmOx5+IOweIRyLcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1S0kQm9wZYqK4gSPRLQvt7Y0heMB8GA1UdIwQY
MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt
ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl
LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquHRJAL8
vs+LzxJUTFEGGD0Jxudb4S08PdWOvjhPmKWhPa/1eBtOK8N0tqNlbuF5goZsiKxo
K5bCBy+G/lBbJ/Q9TkJaNvQ6BfO+Pbud+D65O6YWLVy+YCWFeBxM+12u3BZIZyrx
CDWeMAlBDIvy2LismRm7XEXnCBMTdzKLPFj7E5cNFOjZcgJBpBAvcl/tdePXUxMa
ZB6DOt5oVzWmgZeJ/YcF9bqenjhrK1KKiEMmKDTTWsqS0hTa/bIhTGDdink7ujk+
IVdhwClBLc5piu6i44XVQRmprwuvcyv7p0cZ3z/fioyoRYL42dGS//PyDQuvsGAx
VgpSVhJSQEqNKw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:19 2025 by rpki-client