Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File:                     tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier:          6rUZpSN6l9y8bVT6goB/aTABYwTC0iyETt1sB3Y1DeU=
Subject key identifier:   26:ED:D6:63:E4:26:60:CD:98:9E:4C:E5:FF:6A:59:86:DF:31:EC:F6
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer:       /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial:       01987D8A217914B0B6A458D75E65E2B1A4B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number:          0441
Signing time:             Wed 06 Aug 2025 04:01:01 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:01 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:01 +0000
Files and hashes:         1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
                          2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: +r/u04eU6wQ8Www8J+J84w08wRYAhScoaEDn7pfH0jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:21:79:14:b0:b6:a4:58:d7:5e:65:e2:b1:a4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
        Validity
            Not Before: Aug  6 04:01:01 2025 GMT
            Not After : Aug  7 04:01:01 2025 GMT
        Subject: CN=26edd663e42660cd989e4ce5ff6a5986df31ecf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:cf:55:6b:fe:70:85:f9:b3:bf:28:e9:68:
                    d7:b0:2d:99:ab:4c:a9:a9:67:97:86:c3:25:76:e1:
                    b6:fd:12:8c:31:74:fc:b8:85:4e:ea:1a:65:ae:1b:
                    29:a6:fd:88:e3:07:0f:c1:06:47:66:da:f7:01:fb:
                    1e:00:71:0d:e5:95:48:0d:ad:a3:73:c4:f7:50:09:
                    c8:04:1d:a9:70:eb:8c:26:ae:b0:de:61:35:5a:07:
                    3d:91:70:81:8c:8a:c2:77:43:ab:11:81:6e:ab:4c:
                    cf:e4:9f:d9:83:16:10:18:fc:80:68:44:e9:2b:a9:
                    d8:a9:99:44:c5:22:bf:32:24:90:18:3c:3b:c3:89:
                    f2:ea:37:41:e1:f2:36:cf:de:b8:9f:64:13:bb:0c:
                    55:95:6e:fd:25:10:77:11:aa:4c:3d:a4:c7:96:c4:
                    80:10:51:19:80:5e:23:33:7f:10:53:94:1e:2e:24:
                    cb:82:b0:6b:c9:d5:ce:e0:5e:2d:06:4d:26:a3:41:
                    e6:22:a7:34:19:63:d8:c4:65:07:1b:0e:10:a6:44:
                    e7:25:5b:85:88:c6:79:db:7d:26:a1:83:b7:45:8b:
                    01:eb:91:b6:6e:8c:ce:22:ca:01:80:b5:01:8e:91:
                    44:ac:96:e2:90:35:fa:74:70:78:fb:7a:58:51:b9:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:ED:D6:63:E4:26:60:CD:98:9E:4C:E5:FF:6A:59:86:DF:31:EC:F6
            X509v3 Authority Key Identifier:
                keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:89:82:bc:fd:7a:d0:c9:9b:ea:7d:5c:6e:01:ae:78:6d:52:
         19:75:e2:1b:8f:0c:2a:f3:ec:fd:62:5f:cd:6e:0b:dd:7b:a9:
         ab:7d:8f:f5:2c:f0:0a:41:d2:a1:34:37:26:53:77:d0:21:ea:
         20:dc:06:f2:b1:1b:36:f2:7b:1d:49:27:ed:12:9b:c4:37:ff:
         23:95:5c:01:cd:6b:0e:f0:a3:b2:c8:ed:93:3a:2b:1a:2e:5f:
         e5:2b:43:fd:df:13:3c:9f:16:16:ad:f9:79:85:d3:10:66:a3:
         c2:1b:39:03:87:4e:2b:06:73:c5:fe:13:be:aa:b1:9d:c1:25:
         48:1a:a3:65:6c:71:89:40:e3:5f:e6:24:40:26:12:4e:fe:c8:
         ac:4b:0e:ac:ac:fd:56:7b:eb:06:43:ad:09:05:3b:8d:12:03:
         0a:22:27:76:7f:c0:0a:18:75:dd:d5:a1:8b:cc:9b:b3:98:60:
         cf:6e:6a:4e:68:50:68:f0:b0:6e:fa:b7:e5:6b:8d:14:70:20:
         65:c7:44:58:a6:2c:23:5e:70:ea:d9:2d:0b:95:6b:e4:3c:91:
         3c:a7:dd:39:63:42:41:4f:ec:1b:23:3e:8e:a4:0c:f7:68:86:
         54:79:52:7b:25:05:2f:0e:67:d2:c3:72:7a:ec:c8:4a:74:2b:
         69:23:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:36 2025 by rpki-client