Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File:                     tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier:          uncdGhQG0Qw3HIW/msxK0TEE2N8kiqgU2M2kzeUy1sc=
Subject key identifier:   7F:80:D7:11:E5:1B:3E:ED:0E:68:25:B4:26:8F:0C:40:94:D0:0F:2E
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer:       /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial:       01988BEAF79C0C47447D6EEECF34F9D8D87F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number:          1531
Signing time:             Fri 08 Aug 2025 23:01:28 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:28 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:28 +0000
Files and hashes:         1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
                          2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
                          3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: dnlhRlWP9A4SqizeKrUvg1VWCEhG8ydNbpLSTdPvV5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:f7:9c:0c:47:44:7d:6e:ee:cf:34:f9:d8:d8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
        Validity
            Not Before: Aug  8 23:01:28 2025 GMT
            Not After : Aug  9 23:01:28 2025 GMT
        Subject: CN=7f80d711e51b3eed0e6825b4268f0c4094d00f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a1:0b:4b:42:70:b8:42:c3:5d:7d:93:bc:c0:
                    65:74:6a:37:b9:9e:45:1d:a9:01:e3:1c:d4:85:0a:
                    c6:71:92:c8:a6:dd:fb:48:66:b3:ba:05:5b:cc:d5:
                    a5:29:e1:3b:01:80:28:89:5d:6c:2c:8e:69:40:c9:
                    f8:6a:9e:fe:c2:6c:89:bf:ff:39:ee:05:7f:b1:b9:
                    60:ae:7f:db:61:f4:6c:b2:68:3d:69:2e:1f:58:8a:
                    8c:d4:9c:3c:77:7b:5e:cb:df:e7:04:d8:cc:ed:89:
                    d0:e9:56:8e:a5:94:24:f5:69:1d:01:36:73:6b:6e:
                    f0:6f:ad:b9:22:01:c5:ec:ff:73:79:e7:b5:b4:99:
                    fc:54:d7:9d:e3:05:ab:5f:74:0f:bf:1d:3d:65:db:
                    78:c1:23:04:dd:35:c0:34:38:0e:d7:61:1c:e2:16:
                    02:18:8b:ea:a4:63:ba:d5:5f:f8:47:c2:a3:80:ca:
                    12:5d:55:5f:bc:b8:f8:c5:6b:e9:e8:13:e5:5b:05:
                    61:96:8b:e9:82:fd:7e:9c:c8:ff:5b:2c:c6:26:c1:
                    e0:29:c2:f8:a2:75:0e:7d:33:68:5a:1e:44:bc:b0:
                    80:2c:ce:03:3f:d2:90:77:70:17:e5:d8:38:bc:ed:
                    88:22:59:fb:57:93:2d:3e:80:19:47:c2:f8:69:b8:
                    01:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:80:D7:11:E5:1B:3E:ED:0E:68:25:B4:26:8F:0C:40:94:D0:0F:2E
            X509v3 Authority Key Identifier:
                keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a2:e2:eb:13:9d:9a:eb:34:d3:8a:9a:6c:7f:9d:ea:d9:ea:
         54:2f:75:39:b4:b0:01:c1:d0:8e:2c:1f:48:09:8b:c8:d5:d3:
         8e:33:95:b2:e9:71:be:97:ef:06:6b:b5:73:d6:e2:50:d1:85:
         c4:04:a1:e4:27:78:81:41:1c:9a:d2:d1:ca:73:42:e8:ed:37:
         0d:aa:97:5f:85:ec:a6:fe:5f:22:b0:ae:55:6b:d7:26:c7:42:
         e7:67:22:96:a5:aa:f3:5b:ed:0c:55:55:f7:69:6c:dc:41:ad:
         6a:80:19:71:d7:f7:fc:5b:b4:63:c8:9a:56:17:af:27:46:6c:
         f8:73:2b:75:a5:c9:50:7c:ba:cc:24:3c:31:ac:bc:0b:3b:4f:
         3a:c9:82:27:f8:6a:0d:e0:7c:d0:30:97:cd:16:e1:c9:48:1f:
         0b:e1:39:70:8f:fc:80:9e:88:a1:36:50:66:3d:46:c1:2c:e0:
         f9:5c:1a:bd:69:2c:4e:3f:12:46:87:ba:e7:e9:10:97:90:ac:
         dc:e6:25:84:bd:57:86:02:81:8c:a1:2d:30:30:c1:b4:1a:f1:
         d1:25:76:2e:16:ec:2c:5f:83:ba:cc:d8:88:49:0a:c5:62:16:
         ce:75:e9:9f:cf:8e:bd:4f:56:d0:c3:c0:d8:13:00:b6:97:cc:
         b3:25:e4:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6vecDEdEfW7uzzT52Nh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTA2YmNlM2Y3ZTFhZTNhN2UyY2I5YWQyMDVjNGNkZmIw
MmRkYjUwHhcNMjUwODA4MjMwMTI4WhcNMjUwODA5MjMwMTI4WjAzMTEwLwYDVQQD
Eyg3ZjgwZDcxMWU1MWIzZWVkMGU2ODI1YjQyNjhmMGM0MDk0ZDAwZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qELS0JwuELDXX2TvMBldGo3uZ5F
HakB4xzUhQrGcZLIpt37SGazugVbzNWlKeE7AYAoiV1sLI5pQMn4ap7+wmyJv/85
7gV/sblgrn/bYfRssmg9aS4fWIqM1Jw8d3tey9/nBNjM7YnQ6VaOpZQk9WkdATZz
a27wb625IgHF7P9zeee1tJn8VNed4wWrX3QPvx09Zdt4wSME3TXANDgO12Ec4hYC
GIvqpGO61V/4R8KjgMoSXVVfvLj4xWvp6BPlWwVhlovpgv1+nMj/WyzGJsHgKcL4
onUOfTNoWh5EvLCALM4DP9KQd3AX5dg4vO2IIln7V5MtPoAZR8L4abgBkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+A1xHlGz7tDmgltCaPDECU0A8uMB8GA1UdIwQY
MBaAFLRQa84/fhrjp+LLmtIFxM37At21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMt
ZjhhMzc4MGMzNDhlLzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMtZjhhMzc4MGMzNDhl
LzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKLi6xOd
mus004qabH+d6tnqVC91ObSwAcHQjiwfSAmLyNXTjjOVsulxvpfvBmu1c9biUNGF
xASh5Cd4gUEcmtLRynNC6O03DaqXX4Xspv5fIrCuVWvXJsdC52cilqWq81vtDFVV
92ls3EGtaoAZcdf3/Fu0Y8iaVhevJ0Zs+HMrdaXJUHy6zCQ8May8CztPOsmCJ/hq
DeB80DCXzRbhyUgfC+E5cI/8gJ6IoTZQZj1GwSzg+VwavWksTj8SRoe65+kQl5Cs
3OYlhL1XhgKBjKEtMDDBtBrx0SV2LhbsLF+DuszYiEkKxWIWznXpn8+OvU9W0MPA
2BMAtpfMsyXk/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:12 2025 by rpki-client