Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File:                     tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier:          cUUwxq3NCdA0k7rXrLvNpr98/X1lXeoCDqLILtOGdqY=
Subject key identifier:   FE:4D:66:EC:19:9F:F7:36:8C:D4:BB:B3:91:D4:1B:56:71:CF:7F:FF
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer:       /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial:       019882796D3F032DEB2F278C39AE4E6C17B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number:          105A
Signing time:             Thu 07 Aug 2025 03:00:52 +0000
Manifest this update:     Thu 07 Aug 2025 03:00:52 +0000
Manifest next update:     Fri 08 Aug 2025 03:00:52 +0000
Files and hashes:         1: ggC5V29BMdNUn59EruOGoGZJaaQ.roa (hash: ttIpUsiJ4qeM8pCSgboK+Vkbkx0DrAYP7DxfAZL+EN4=)
                          2: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: rkHiR2PtariOOLUeyiMx756ituBcmT9DKzprw/frjaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:79:6d:3f:03:2d:eb:2f:27:8c:39:ae:4e:6c:17:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
        Validity
            Not Before: Aug  7 03:00:52 2025 GMT
            Not After : Aug  8 03:00:52 2025 GMT
        Subject: CN=fe4d66ec199ff7368cd4bbb391d41b5671cf7fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:49:35:be:e6:d3:a7:d8:49:52:c9:17:a1:1c:
                    f0:51:c3:98:f7:63:9a:f2:77:78:88:d7:fb:d6:b2:
                    23:39:44:62:0d:bf:d9:d3:fb:d8:97:0b:61:22:b1:
                    42:76:88:ff:bb:ba:d8:46:04:17:ec:67:7d:39:07:
                    ce:45:e0:10:30:bc:e9:ca:bb:70:75:a3:19:92:dd:
                    b7:82:cd:20:dc:4b:5e:49:35:ae:6b:b3:cb:7d:7b:
                    35:c8:1f:48:ec:0d:38:75:44:a6:cb:38:b9:5b:dc:
                    41:1e:f4:82:b6:a1:1c:2d:a9:04:06:6b:d3:d8:fc:
                    08:ee:81:96:94:40:af:5b:68:74:98:7c:95:c4:3a:
                    98:16:d3:1a:53:1f:df:75:aa:5f:23:05:2c:48:c5:
                    b8:7a:5b:da:a6:f2:f3:4c:ed:62:97:54:dd:84:d0:
                    d2:ea:81:f9:68:ae:a3:bd:ec:11:ca:9f:79:36:37:
                    9b:a8:ca:50:dd:ba:c0:28:ef:fb:e4:51:6a:d5:c6:
                    79:70:1c:73:48:50:c3:b3:34:64:6b:ee:52:97:b4:
                    00:3c:e2:6a:84:89:4f:37:4f:f4:36:ce:16:be:1d:
                    da:6a:a8:d1:13:fd:f8:6b:90:cd:ff:59:cc:12:a2:
                    73:53:dc:03:4e:64:17:1f:f5:83:af:98:91:29:77:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4D:66:EC:19:9F:F7:36:8C:D4:BB:B3:91:D4:1B:56:71:CF:7F:FF
            X509v3 Authority Key Identifier:
                keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:7a:ee:64:88:32:b2:db:ce:d5:df:29:04:cb:10:f5:40:61:
         f3:21:3a:45:c7:e4:3a:79:1f:06:0e:91:7b:02:30:a2:fc:cf:
         01:d4:b6:fe:8d:7f:59:91:41:a7:2a:7b:0b:56:b2:60:78:38:
         96:ec:3e:7f:4a:e4:41:13:29:e3:f1:d1:13:54:d0:bc:23:2c:
         40:87:ea:28:33:d2:37:bc:e4:ad:a8:a9:ad:d5:26:fc:b2:a1:
         a4:3f:11:aa:17:7d:0b:5c:38:05:1d:70:15:9f:76:87:35:af:
         21:cd:38:ca:34:f6:f8:ec:96:91:c1:6e:40:8f:f2:96:2c:e7:
         1d:de:4f:99:f5:84:07:af:70:f8:e2:29:3b:46:d4:36:f9:cd:
         70:bd:c3:f9:0b:5b:8a:73:5a:b2:74:f0:2e:20:82:b8:bc:67:
         6b:ff:85:3f:58:98:b4:ed:5d:b4:34:da:0b:4a:f7:8c:f2:25:
         d4:62:a8:ec:53:61:e3:38:bc:9f:ac:63:9a:ce:9d:6c:5a:5f:
         2d:19:9c:62:13:cd:a6:f8:2f:2c:07:28:9f:0f:fd:69:7d:0d:
         f5:35:ff:bc:6b:4f:d5:da:78:62:dd:ea:60:51:cb:3b:c8:30:
         ec:82:30:4a:98:f7:26:62:c6:5f:99:bf:ea:b4:45:e6:5d:b9:
         10:ba:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:00:15 2025 by rpki-client