Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File:                     tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier:          fR0Ug39m0inymsvazjUxVWQ+UMTQvIEOf3jlv9qsGC4=
Subject key identifier:   A6:23:65:04:8D:35:39:CA:80:FC:12:BA:84:B9:53:17:E6:E5:8C:C5
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer:       /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial:       019894B730A7EA5A9CCA4AB1FD940AD279CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number:          014D
Signing time:             Sun 10 Aug 2025 16:01:30 +0000
Manifest this update:     Sun 10 Aug 2025 16:01:30 +0000
Manifest next update:     Mon 11 Aug 2025 16:01:30 +0000
Files and hashes:         1: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: ul998AmVpmtVMYPIIiMjWkZoiPcBVM6MZxFBkggoQHY=)
                          2: zAVl6KN24j-HKETuiZlV3hao63U.roa (hash: djF473q/t5BuBhPbvFB06yhsIPQKmfmJ61GIeE/TTOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b7:30:a7:ea:5a:9c:ca:4a:b1:fd:94:0a:d2:79:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
        Validity
            Not Before: Aug 10 16:01:30 2025 GMT
            Not After : Aug 11 16:01:30 2025 GMT
        Subject: CN=a62365048d3539ca80fc12ba84b95317e6e58cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:12:5f:08:b5:d6:c8:94:7c:05:8e:17:c1:
                    bf:0b:4c:3e:9a:1b:d6:18:41:49:5d:9f:0d:d3:90:
                    cd:26:32:d1:73:6a:39:87:33:1f:fc:91:51:98:9a:
                    ff:36:9d:8a:5d:96:c8:95:89:e9:6b:21:b1:37:53:
                    24:41:f3:76:7f:fc:c1:56:75:c8:99:1b:bc:86:96:
                    98:55:32:b6:6c:47:17:86:7e:54:a3:b7:ae:f9:70:
                    af:6d:62:fd:60:10:b9:f5:9d:69:c5:a3:d9:f0:47:
                    de:f2:81:67:f8:03:be:3d:c2:06:93:a5:3a:68:a5:
                    31:a8:fd:af:5e:61:62:d7:3b:7e:15:54:38:ad:fb:
                    76:8d:4f:59:da:0a:ca:a0:3a:90:8d:e0:d6:cf:4a:
                    c7:dc:1a:e4:17:29:27:1a:a7:8c:b6:7c:47:37:18:
                    1a:84:65:42:a3:bf:97:ce:bf:4e:2b:7b:d2:9b:5b:
                    e8:6a:c8:f5:d7:19:73:db:0c:fb:76:30:25:c9:a9:
                    50:7f:05:02:c1:e4:27:7b:6b:ec:4e:bd:9e:2d:df:
                    a1:85:a2:23:c0:f2:8f:a0:55:a7:90:f9:23:4a:68:
                    59:76:33:52:ac:83:b0:73:0a:5c:ee:3c:f2:64:dc:
                    34:fa:15:dc:ad:95:ba:7d:35:c3:88:24:ab:b7:d9:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:23:65:04:8D:35:39:CA:80:FC:12:BA:84:B9:53:17:E6:E5:8C:C5
            X509v3 Authority Key Identifier:
                keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:39:8b:39:65:1a:87:3a:97:a6:f5:4b:1a:3b:fb:96:3b:c2:
         ef:69:ca:a3:44:8d:ad:b6:50:32:98:c0:b8:ee:56:5d:15:d2:
         92:95:0f:f1:42:83:74:36:02:7c:b3:57:63:da:7c:d1:ce:e5:
         96:b1:8c:14:66:8d:10:c5:ff:ac:ee:28:e0:9a:00:fc:d0:64:
         71:3c:89:ef:e9:2f:26:e2:7d:ab:3a:86:2a:16:88:26:bc:07:
         33:dd:fc:cb:a9:aa:46:40:d8:d9:bb:a2:e9:d0:1c:52:bf:9d:
         2b:5a:52:37:18:10:8f:ff:a1:c6:49:fa:80:18:cd:5d:4c:d0:
         84:be:23:00:b0:95:d1:9e:8e:ff:2f:c2:69:8e:ee:a2:d1:65:
         9a:0a:09:84:6d:9a:98:d3:28:ee:f2:dd:6a:bd:07:fd:5c:a9:
         2a:43:53:ff:aa:b3:d8:eb:76:77:dc:db:30:3e:a1:75:0d:f7:
         97:96:b6:a8:9c:3c:25:95:90:c5:e1:51:b5:a4:46:fc:4d:41:
         f7:8f:c2:eb:8f:87:dc:e5:ef:68:eb:d4:e0:21:26:56:04:2b:
         5b:b1:ff:02:8b:86:0f:de:c3:a7:de:13:fc:d1:40:52:30:36:
         f8:37:82:59:6a:98:b4:5c:f0:16:be:b2:39:d0:43:e9:af:73:
         4b:33:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:00 2025 by rpki-client