Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File:                     tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier:          q7J8rbSq/sBpMKC2dY2K7lemnmW3h09zCkSuP5ivG2k=
Subject key identifier:   B1:F1:F2:05:41:C2:1C:AE:69:24:3D:B6:94:47:34:AF:E7:24:2B:CD
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer:       /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial:       01987F7AA0840A7F07E54F3AD6511F871EE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number:          11C6
Signing time:             Wed 06 Aug 2025 13:03:19 +0000
Manifest this update:     Wed 06 Aug 2025 13:03:19 +0000
Manifest next update:     Thu 07 Aug 2025 13:03:19 +0000
Files and hashes:         1: M5OG91JsCAL60eSIC9Ad8J1tKCQ.roa (hash: 1YIYjfLNUonn/y5DvRwWqNtN3UGauHay3fPvlHRKB78=)
                          2: NLZJeEG7B459T5HRjzbaryRo4U4.roa (hash: D+Zc3p+KtPQCrkhD8NK/RsRz3Ozk8j3l3fx+in8YU8k=)
                          3: SX0Et8xCJ-oQPSZhA1vLwpgECss.roa (hash: GtBoUqmPl7+e01rEjLRBIu11uahmgFfyYOp4+G1ts2k=)
                          4: g3mWLx3QHER7jvUWO9_K86XjFvg.roa (hash: CQjC54kUHdxygPOZtU3D7Ni2Q4FQ2f8Z6SwCWy0D9f0=)
                          5: hvqfOijr6dDuZ5bH5DmTLJBSNC0.roa (hash: wnrweN82zW3L/i2kjShP1DGJ6lX6f745nj23KDLcERg=)
                          6: pkTSWC0kyyJmikpwefrKy0hYNBc.roa (hash: uJAe5aUPI71DUshehwa1+fSKLZdP9CODCdcESePQJgY=)
                          7: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: +eL0jgzUENSj+xGLqg61UUOu64utABqfLT3bHEOf+qA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:7a:a0:84:0a:7f:07:e5:4f:3a:d6:51:1f:87:1e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
        Validity
            Not Before: Aug  6 13:03:19 2025 GMT
            Not After : Aug  7 13:03:19 2025 GMT
        Subject: CN=b1f1f20541c21cae69243db6944734afe7242bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:c9:d1:1e:00:ba:20:e1:c1:45:b1:95:6b:
                    19:ea:94:6d:e6:4d:f8:7e:52:08:1a:66:dd:45:d9:
                    32:74:2a:6d:0f:cf:3a:f2:b9:ce:50:f2:09:3a:96:
                    83:1d:1c:07:a4:54:ee:fd:52:ff:aa:2d:69:ff:99:
                    c1:e5:f6:b8:27:df:c0:09:ab:d5:fc:85:98:ed:10:
                    b7:35:f0:5c:fd:0d:fd:b0:1e:44:2f:e5:92:3b:aa:
                    6d:36:c6:f7:5b:19:eb:de:ad:73:a1:6d:6d:39:2d:
                    33:04:ba:2e:cf:bb:b6:61:42:08:27:20:43:77:eb:
                    17:39:0c:ef:5b:7f:0c:e2:0c:c2:ce:3c:03:7b:cf:
                    92:49:53:da:17:be:7e:7a:db:30:11:40:c1:7c:95:
                    61:e5:a1:49:78:d2:c2:b2:a0:7a:3c:ae:28:b3:d0:
                    7a:75:99:a6:da:9c:16:c4:24:ba:b6:b1:ce:ee:57:
                    fd:69:6f:a6:38:aa:9c:5f:1d:43:4c:19:d4:70:02:
                    b3:77:61:ba:98:08:b9:ca:2a:6b:0a:de:32:2d:21:
                    e0:55:3d:13:0c:06:bc:74:de:82:a6:49:a9:eb:6d:
                    1b:5a:0f:7f:71:85:8c:2c:b3:bf:77:63:8b:43:5f:
                    d0:b1:c9:73:52:8f:ef:52:15:0c:d2:98:19:ca:9f:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F1:F2:05:41:C2:1C:AE:69:24:3D:B6:94:47:34:AF:E7:24:2B:CD
            X509v3 Authority Key Identifier:
                keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:db:77:17:92:16:82:0e:52:0b:3e:f9:37:46:96:42:bc:26:
         53:f4:36:23:9b:ff:65:ca:06:ab:fd:e5:34:27:91:06:48:95:
         fe:f0:4b:9d:9f:eb:4f:5f:e9:27:85:35:ad:0e:32:c6:33:1c:
         ae:91:6c:ca:b8:a8:d1:f9:84:f9:02:dd:21:74:02:0d:b4:89:
         b7:00:1b:c4:21:b3:89:6d:e2:c2:30:c7:d8:ce:7e:76:6a:7c:
         a4:6a:7b:b6:9a:fb:65:fa:2a:14:c3:40:2b:3a:dd:cd:14:e8:
         39:c0:4f:0a:71:ad:c9:b9:4b:15:43:35:49:de:94:c2:92:16:
         3e:d5:d5:10:a6:82:b0:8e:89:f7:ce:fb:a7:d1:be:e7:af:13:
         f7:43:aa:fc:a1:fc:10:21:bb:ff:de:99:3a:b0:68:e2:ae:92:
         44:a8:d4:e0:e6:94:4c:7b:b7:83:e3:a6:a2:1a:cd:15:d7:d2:
         c0:b0:02:f2:3e:cb:c1:e4:6b:73:68:19:e2:48:e2:b7:92:41:
         cf:be:45:76:1d:8a:f8:fd:f9:8e:ea:22:86:80:64:07:c9:d4:
         0b:cf:99:f5:19:13:a4:c1:51:28:c1:b1:89:a5:d6:62:f4:d4:
         5e:e4:fd:e3:8e:68:cf:78:8c:7f:1f:e9:cb:ef:47:dc:98:65:
         c4:04:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:53 2025 by rpki-client