Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
File:                     tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json)
Hash identifier:          V0BmvK0beyt8QPPxcPz6NJJBkImOWbR65K2k1aJ16vw=
Subject key identifier:   71:14:C2:AB:98:3B:ED:C6:EA:BE:8A:4F:F8:C4:D0:8D:F4:3F:A9:78
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Certificate issuer:       /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial:       0198808B980CA6121991F016F245F2004E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
Manifest number:          13D9
Signing time:             Wed 06 Aug 2025 18:01:28 +0000
Manifest this update:     Wed 06 Aug 2025 18:01:28 +0000
Manifest next update:     Thu 07 Aug 2025 18:01:28 +0000
Files and hashes:         1: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: K4NDm/FKyBmxFZnPdJNCJd7n+YOVFlqNu3P5YLxivyo=)
                          2: vBSjooCv1VbYtFGvr_WsQil5zco.roa (hash: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:98:0c:a6:12:19:91:f0:16:f2:45:f2:00:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
        Validity
            Not Before: Aug  6 18:01:28 2025 GMT
            Not After : Aug  7 18:01:28 2025 GMT
        Subject: CN=7114c2ab983bedc6eabe8a4ff8c4d08df43fa978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:3f:63:e0:12:6a:0c:59:eb:f4:53:41:15:
                    50:ef:68:68:a7:c4:8b:a7:29:c0:81:4f:ed:80:8f:
                    1c:00:75:18:db:73:be:4d:97:96:b4:1b:b4:86:61:
                    9f:ae:28:c7:8c:71:63:c0:52:4f:14:4d:1c:b8:6e:
                    8d:83:12:14:4e:a7:61:8e:60:32:f6:2f:d1:c2:b0:
                    1b:e0:0f:bf:44:f9:b7:69:dc:2b:b8:e5:d0:b1:c8:
                    dc:71:87:a9:c7:17:82:20:40:b5:44:2a:bd:3a:72:
                    1c:fe:59:c7:fa:24:af:42:17:78:37:47:eb:3c:ab:
                    32:be:02:6f:fb:2e:d9:fd:f2:6c:e3:8e:07:b3:13:
                    bf:54:24:46:c3:62:02:4d:27:61:1a:a3:a8:0a:c2:
                    0c:48:13:46:d8:ed:d3:70:95:79:d2:51:d9:36:62:
                    53:28:45:9c:e2:ed:32:19:ae:4a:b1:6d:ae:1e:7b:
                    cf:43:10:67:89:c3:26:67:1a:18:d5:40:0e:92:47:
                    6b:a5:2b:45:33:6e:62:97:33:60:36:66:51:f6:46:
                    42:6b:02:aa:8e:eb:da:b7:b8:e6:45:b1:5c:17:0d:
                    7a:30:58:67:4d:c2:bf:2c:5b:c6:aa:a7:75:23:40:
                    20:17:a6:8e:fd:2a:95:af:3c:da:1a:f6:1a:ad:13:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:14:C2:AB:98:3B:ED:C6:EA:BE:8A:4F:F8:C4:D0:8D:F4:3F:A9:78
            X509v3 Authority Key Identifier:
                keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d1:a8:a3:2d:03:f6:1c:40:08:53:9a:91:58:0f:24:ca:84:
         37:7c:da:62:f8:fe:28:a2:b7:2d:8a:84:ad:b1:5d:3d:b8:20:
         f3:b3:22:e6:16:64:bf:85:51:b6:20:ad:e3:5d:cd:f4:6b:c5:
         85:de:d5:9a:5d:5f:4e:a9:6b:25:98:09:20:a2:33:de:5a:2a:
         69:73:0d:84:6d:0c:05:86:09:80:b8:3b:c7:a2:60:e1:67:9a:
         cf:13:c8:71:03:e3:4a:a2:4f:7c:77:17:37:fc:1b:1d:9e:87:
         3b:66:42:98:dd:53:b6:f8:ab:d1:c2:d6:3b:ac:35:43:74:85:
         7c:f9:e5:f9:f7:e4:75:66:37:e7:db:0f:8a:4c:71:84:38:52:
         fe:97:69:bb:64:87:88:44:27:2c:a5:49:71:d7:13:5a:db:77:
         cd:e7:b0:2a:cc:ac:89:61:69:cc:40:b8:9b:a1:fc:db:cf:42:
         82:3a:91:e9:dd:d2:dd:3c:59:30:55:ed:bd:84:ad:8c:5a:c1:
         ac:f4:f5:37:cf:a6:95:3d:ec:53:14:91:bf:8a:57:c2:8b:5e:
         2c:66:72:3b:90:26:f2:31:7a:fb:a2:6c:16:e1:b8:00:9f:15:
         c2:96:15:95:79:c5:29:ef:f4:52:cf:52:c2:d1:eb:10:35:99:
         13:7a:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:32:00 2025 by rpki-client