Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File:                     tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier:          o9c4N595JQPyLeLnpOej9velY+Jk4IyJq89WvKgGm3M=
Subject key identifier:   BC:35:87:8E:58:2C:5D:C5:26:40:4E:1C:BE:60:0E:19:5A:A9:66:03
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer:       /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial:       01988168693FE74D7080CED4BB466B2892B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number:          086B
Signing time:             Wed 06 Aug 2025 22:02:40 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:40 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:40 +0000
Files and hashes:         1: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: vLT+gq01kz3vqJ3Ew12lFaG1LYhGTp7awK1k9hmEE5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:69:3f:e7:4d:70:80:ce:d4:bb:46:6b:28:92:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
        Validity
            Not Before: Aug  6 22:02:40 2025 GMT
            Not After : Aug  7 22:02:40 2025 GMT
        Subject: CN=bc35878e582c5dc526404e1cbe600e195aa96603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:14:84:dc:e6:94:83:6d:a9:46:35:9f:8a:
                    17:33:82:6b:62:09:32:8e:cc:76:d3:f6:92:98:9a:
                    d0:64:b1:c1:c4:b3:c2:0f:c1:41:2a:96:dd:f3:f7:
                    31:76:c3:dd:62:73:ce:19:f5:08:0a:fd:78:84:57:
                    91:db:bf:c1:66:c0:9c:81:d7:de:3e:9f:bb:b5:46:
                    a9:12:28:df:e0:7f:1d:e0:b0:cf:61:af:6b:5a:57:
                    f4:aa:fd:56:14:a8:c5:df:26:b6:3f:3f:fe:c5:4b:
                    59:da:a2:6a:2f:27:b8:3e:a8:42:be:76:00:24:ab:
                    f7:1c:d2:90:5f:6c:82:ea:82:15:32:85:e3:01:74:
                    70:a0:30:57:68:b5:65:67:e2:2d:25:b9:2a:bf:f4:
                    9a:d0:73:22:59:b5:d1:1e:a0:a6:a7:ad:85:73:8b:
                    cb:7a:86:b5:0f:78:75:59:f5:a9:44:cf:4f:dd:f6:
                    7b:04:73:e0:14:12:13:28:c8:70:20:01:97:7a:b0:
                    3f:88:b8:a8:ea:cb:44:2d:32:78:00:81:66:a9:27:
                    f1:6a:47:e3:c6:5d:ee:ba:fe:ac:53:f1:b0:28:73:
                    a4:cc:0e:19:c3:ff:97:e8:1e:9f:68:1f:7e:8a:23:
                    12:89:50:99:13:be:fa:e8:49:1e:ec:c6:a5:1f:aa:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:35:87:8E:58:2C:5D:C5:26:40:4E:1C:BE:60:0E:19:5A:A9:66:03
            X509v3 Authority Key Identifier:
                keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:60:33:4d:63:fe:02:f3:f4:28:6d:0a:e7:8b:ce:5f:1e:94:
         af:f5:32:17:ce:59:e6:b0:01:c6:58:fc:30:dc:a5:a2:e6:63:
         35:09:fe:33:8b:88:8d:23:f4:62:3a:3a:a6:1d:e9:1e:e3:03:
         52:56:12:ad:20:0e:28:5e:39:39:3d:97:fd:10:a7:5d:4d:6d:
         35:07:b7:4d:71:65:90:11:c4:2c:9f:60:31:a0:fb:81:27:96:
         78:14:7d:ea:b7:f0:d4:26:97:47:f5:0a:1f:38:37:c1:45:4e:
         2a:68:2b:64:9a:60:d9:2a:0e:99:c9:72:6f:89:83:ba:c1:f0:
         de:30:67:7c:19:f0:d1:22:22:80:8b:4e:a7:e5:22:8f:3c:3c:
         33:25:8a:13:d8:19:79:4f:63:78:1e:08:1f:1f:bc:b5:da:0c:
         fc:1e:cb:ce:47:4f:9f:66:5e:f3:98:4d:0a:b2:6d:30:9c:e3:
         1b:5f:da:8b:65:bf:cd:d5:93:c5:d9:e8:97:fc:08:17:ff:2b:
         44:db:9d:0d:28:a9:33:a1:de:89:e6:0f:e4:13:1b:27:70:17:
         94:30:c3:6a:1e:c9:b1:ac:c9:53:53:60:fe:69:0a:93:6d:f8:
         98:23:74:4f:63:b7:1d:13:a0:ca:22:b4:3e:aa:d6:29:12:da:
         d1:a6:9b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaGk/501wgM7Uu0ZrKJK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NmM0OTg1Y2Q2MDY0MzIyMGUwNjRhMmUxMTRkNzhmNWIw
MzljMmIwHhcNMjUwODA2MjIwMjQwWhcNMjUwODA3MjIwMjQwWjAzMTEwLwYDVQQD
EyhiYzM1ODc4ZTU4MmM1ZGM1MjY0MDRlMWNiZTYwMGUxOTVhYTk2NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ0UhNzmlINtqUY1n4oXM4JrYgky
jsx20/aSmJrQZLHBxLPCD8FBKpbd8/cxdsPdYnPOGfUICv14hFeR27/BZsCcgdfe
Pp+7tUapEijf4H8d4LDPYa9rWlf0qv1WFKjF3ya2Pz/+xUtZ2qJqLye4PqhCvnYA
JKv3HNKQX2yC6oIVMoXjAXRwoDBXaLVlZ+ItJbkqv/Sa0HMiWbXRHqCmp62Fc4vL
eoa1D3h1WfWpRM9P3fZ7BHPgFBITKMhwIAGXerA/iLio6stELTJ4AIFmqSfxakfj
xl3uuv6sU/GwKHOkzA4Zw/+X6B6faB9+iiMSiVCZE7766Eke7MalH6qRJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLw1h45YLF3FJkBOHL5gDhlaqWYDMB8GA1UdIwQY
MBaAFLZsSYXNYGQyIOBkouEU149bA5wrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG14SmhjMWdaRElnNEdTaTRSVFhqMXNEbkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xZDBjMzktMjU1NS00NjhmLWJlNjYt
ZmY5YmFiOTBhZjE4LzEvdG14SmhjMWdaRElnNEdTaTRSVFhqMXNEbkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xZDBjMzktMjU1NS00NjhmLWJlNjYtZmY5YmFiOTBhZjE4
LzEvdG14SmhjMWdaRElnNEdTaTRSVFhqMXNEbkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGAzTWP+
AvP0KG0K54vOXx6Ur/UyF85Z5rABxlj8MNylouZjNQn+M4uIjSP0Yjo6ph3pHuMD
UlYSrSAOKF45OT2X/RCnXU1tNQe3TXFlkBHELJ9gMaD7gSeWeBR96rfw1CaXR/UK
Hzg3wUVOKmgrZJpg2SoOmclyb4mDusHw3jBnfBnw0SIigItOp+Uijzw8MyWKE9gZ
eU9jeB4IHx+8tdoM/B7LzkdPn2Ze85hNCrJtMJzjG1/ai2W/zdWTxdnol/wIF/8r
RNudDSipM6HeieYP5BMbJ3AXlDDDah7JsazJU1Ng/mkKk234mCN0T2O3HROgyiK0
PqrWKRLa0aabDQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:55 2025 by rpki-client