Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File:                     tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier:          /orRU6TJhgdY6k9xkusDSGnNs2Iiqg+pN3QoRhvKb84=
Subject key identifier:   9B:5F:FD:56:20:E0:B9:6E:F6:81:13:86:41:5E:63:F5:43:8E:D4:A9
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer:       /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial:       019890356BEDD221F50A2E299FCD3D8FD926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number:          1630
Signing time:             Sat 09 Aug 2025 19:01:16 +0000
Manifest this update:     Sat 09 Aug 2025 19:01:16 +0000
Manifest next update:     Sun 10 Aug 2025 19:01:16 +0000
Files and hashes:         1: 3wNNo-iI2pc3szTShzwRJQcPQ9g.roa (hash: UlE7Git4bpx6FDGabnpMDUtAooHhFae2TZHIhuwKgXk=)
                          2: MqT4HJJOzTQVMwOVUIPQ89Vg7oc.roa (hash: afWnYJW6s1CaDObkwTU5kA7v+0oYXDgnGB/f5yofQ5k=)
                          3: P7UI9wbXQO7767Ee_OeO-FbHpEk.roa (hash: 3nnbFB8QPYfC95SG+310oNK9akUzhHQ/muxTMob6BTg=)
                          4: U39msWOqgwaliq8DKMspRhKQ3Kg.roa (hash: Z6S+9hFUTMzmzmKnTFgFfim8JmWqS4uAPgj1Z/Z4oQ8=)
                          5: sGGZndDmRMx-w7J8U5J6G3BFVOk.roa (hash: uF6jgyxh4ugT/l6V+mIZvN4IJ+X7IddAc7QQehPWZsY=)
                          6: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: 7XetWdMPJWqDzHAHXZ1+b7gu49tN2dWEzV8lLgIR6xA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:35:6b:ed:d2:21:f5:0a:2e:29:9f:cd:3d:8f:d9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
        Validity
            Not Before: Aug  9 19:01:16 2025 GMT
            Not After : Aug 10 19:01:16 2025 GMT
        Subject: CN=9b5ffd5620e0b96ef6811386415e63f5438ed4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cb:02:8e:70:7a:de:2a:14:64:b5:eb:24:6b:
                    9b:78:41:30:29:f1:e1:99:5c:72:ff:7a:e3:07:b7:
                    38:f6:8e:ec:0a:1b:4c:a0:5a:44:eb:7f:42:e5:1e:
                    1d:8b:d0:c1:1a:cb:95:4b:8b:f6:02:39:7d:90:f0:
                    85:6d:57:3d:8e:49:a8:56:83:f9:62:7b:1b:4e:2a:
                    5f:b7:6f:7a:bf:54:f5:82:d3:7a:6e:4d:ae:f4:50:
                    e5:72:79:0d:1f:98:e6:d7:3b:51:e6:e2:e0:e3:7d:
                    2b:8e:69:68:ba:02:9f:e3:7b:6b:4f:52:26:7f:f7:
                    c2:1d:c0:91:95:69:ef:44:1f:39:32:57:a8:01:27:
                    33:82:88:81:d5:e9:24:15:71:3e:fb:2f:5c:52:21:
                    12:51:e0:59:bd:40:8f:50:fb:7c:6a:2a:22:5b:f5:
                    f6:9e:8b:e0:a3:e7:53:6f:83:0b:2f:90:b0:6b:d3:
                    29:2d:51:aa:9d:df:e1:3f:18:06:d8:e8:24:8c:71:
                    d9:35:a0:ba:9a:c6:4c:72:6d:83:28:51:ef:6a:42:
                    97:b6:14:89:1b:76:4f:09:0f:0f:56:d7:e0:ad:01:
                    13:ed:84:08:98:ec:59:8e:6c:d9:f3:ea:6a:f4:6b:
                    50:67:82:0e:c7:bf:ae:de:f2:63:ed:65:d2:eb:10:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5F:FD:56:20:E0:B9:6E:F6:81:13:86:41:5E:63:F5:43:8E:D4:A9
            X509v3 Authority Key Identifier:
                keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:15:bd:8e:8e:eb:a1:e4:bf:80:94:bd:c6:6e:2a:5e:dc:
         63:7f:31:87:8d:57:b9:cc:17:5d:1a:ce:1f:ee:8c:24:05:77:
         d2:60:9e:ca:bb:21:42:b5:cc:86:e0:2f:c6:31:d5:af:b5:37:
         aa:e0:d1:8a:52:10:5b:06:9c:17:46:25:b6:9d:06:95:1f:d0:
         a7:13:13:d3:ad:c9:4f:35:90:95:91:ee:65:e9:5a:28:08:5b:
         2e:0f:1e:52:dc:a2:4c:a4:4f:da:78:5a:fa:67:17:a2:d8:1e:
         5c:86:68:6c:80:4f:a9:57:31:e6:01:5f:e3:f0:92:f2:26:d9:
         99:47:7b:23:d8:53:aa:00:bd:de:9d:32:31:32:35:91:97:99:
         2f:69:70:ed:33:65:05:1f:4b:a9:c5:b2:84:39:20:f1:71:91:
         95:1a:39:94:54:80:da:07:1f:0f:99:d8:41:0d:73:71:69:87:
         1d:82:7e:00:1c:a4:bd:23:f6:a3:46:00:c1:c4:c3:89:61:2c:
         f6:10:d7:39:43:da:fc:28:ef:44:d0:6e:33:02:ca:22:8b:fe:
         6f:56:5d:e3:31:80:00:7b:12:e5:00:97:ca:c9:bc:8e:e1:d1:
         ca:2c:4b:a3:18:61:00:95:36:38:1f:2a:3b:db:31:c8:71:cf:
         fb:02:48:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNWvt0iH1Ci4pn809j9kmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2
OTY4MWIwHhcNMjUwODA5MTkwMTE2WhcNMjUwODEwMTkwMTE2WjAzMTEwLwYDVQQD
Eyg5YjVmZmQ1NjIwZTBiOTZlZjY4MTEzODY0MTVlNjNmNTQzOGVkNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28sCjnB63ioUZLXrJGubeEEwKfHh
mVxy/3rjB7c49o7sChtMoFpE639C5R4di9DBGsuVS4v2Ajl9kPCFbVc9jkmoVoP5
YnsbTipft296v1T1gtN6bk2u9FDlcnkNH5jm1ztR5uLg430rjmlougKf43trT1Im
f/fCHcCRlWnvRB85MleoASczgoiB1ekkFXE++y9cUiESUeBZvUCPUPt8aioiW/X2
novgo+dTb4MLL5Cwa9MpLVGqnd/hPxgG2OgkjHHZNaC6msZMcm2DKFHvakKXthSJ
G3ZPCQ8PVtfgrQET7YQImOxZjmzZ8+pq9GtQZ4IOx7+u3vJj7WXS6xDuMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtf/VYg4Llu9oEThkFeY/VDjtSpMB8GA1UdIwQY
MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct
NjNiNTJhYTdmOGRhLzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh
LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIj4VvY6O
66Hkv4CUvcZuKl7cY38xh41XucwXXRrOH+6MJAV30mCeyrshQrXMhuAvxjHVr7U3
quDRilIQWwacF0Yltp0GlR/QpxMT063JTzWQlZHuZelaKAhbLg8eUtyiTKRP2nha
+mcXotgeXIZobIBPqVcx5gFf4/CS8ibZmUd7I9hTqgC93p0yMTI1kZeZL2lw7TNl
BR9LqcWyhDkg8XGRlRo5lFSA2gcfD5nYQQ1zcWmHHYJ+ABykvSP2o0YAwcTDiWEs
9hDXOUPa/CjvRNBuMwLKIov+b1Zd4zGAAHsS5QCXysm8juHRyixLoxhhAJU2OB8q
O9sxyHHP+wJImw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:17 2025 by rpki-client