Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
File:                     TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json)
Hash identifier:          K/3e8V6G+KcqPrnni6CjxRcj+YS7UnjpXic6v501SCg=
Subject key identifier:   B5:A9:5A:BF:7F:B6:E8:75:02:10:F3:C5:95:E2:7D:24:F0:42:01:2F
Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
Certificate issuer:       /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Certificate serial:       019885452E53500F7D8F93512E13A98E3573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
Manifest number:          03BA
Signing time:             Thu 07 Aug 2025 16:02:40 +0000
Manifest this update:     Thu 07 Aug 2025 16:02:40 +0000
Manifest next update:     Fri 08 Aug 2025 16:02:40 +0000
Files and hashes:         1: M1M7HuPtGiosGSo4FBz1zc0zdo4.roa (hash: NcnqoCTtbPhCjxo06sSrzfv3k+hjFXX2MJeaGNHx2bI=)
                          2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: zFl3uBga8dmyeHHzodQOCKT33iJDuNl8Bw++5mISN60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:45:2e:53:50:0f:7d:8f:93:51:2e:13:a9:8e:35:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
        Validity
            Not Before: Aug  7 16:02:40 2025 GMT
            Not After : Aug  8 16:02:40 2025 GMT
        Subject: CN=b5a95abf7fb6e8750210f3c595e27d24f042012f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:64:a8:8c:8d:04:3d:2a:0f:71:de:d6:e5:
                    62:72:f2:8f:87:22:7e:e4:b9:29:69:41:a3:d0:a7:
                    95:6a:95:6f:40:57:f4:50:cc:3d:77:89:b9:7c:ae:
                    f4:a8:8f:e3:54:1e:16:9d:35:2e:71:88:21:e3:43:
                    52:b1:ee:02:ea:26:48:d9:2a:4b:91:52:2d:7d:43:
                    91:d8:99:f8:b1:1e:52:8c:1e:53:0b:49:4b:e4:cc:
                    47:44:06:f1:07:cb:4f:b9:4a:e3:3e:18:5e:92:01:
                    13:6d:51:7e:b0:c9:e4:2b:d4:87:c0:04:bc:56:f3:
                    39:57:32:63:88:9d:b9:3a:d1:26:2d:04:82:48:d3:
                    cc:86:28:f6:22:8f:f0:77:55:10:69:b0:47:b3:18:
                    54:cb:ba:14:1a:3f:ce:19:b7:26:2d:74:f1:75:67:
                    0a:25:1b:9a:29:4f:42:09:8b:24:32:20:ab:c2:f9:
                    be:c6:63:46:0c:de:e1:22:6d:53:9c:e7:2b:20:7a:
                    4d:8f:b3:37:aa:b0:59:78:90:36:5b:6c:7d:8b:c7:
                    72:01:b8:91:82:ef:55:9b:9c:04:4f:e0:b7:dc:c5:
                    7f:50:5f:c5:c1:14:85:a1:e5:e6:26:70:b7:68:4b:
                    29:95:1b:12:1b:98:47:22:c5:96:45:db:31:39:49:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A9:5A:BF:7F:B6:E8:75:02:10:F3:C5:95:E2:7D:24:F0:42:01:2F
            X509v3 Authority Key Identifier:
                keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1d:6c:9d:12:14:48:d7:7e:14:cc:c4:16:e9:28:35:86:60:
         08:65:9d:2c:18:f4:f0:75:cd:91:26:fc:e0:4b:6c:64:56:7f:
         ff:a5:e7:a5:fd:81:ba:07:a5:78:c8:ce:17:c9:3a:3d:59:4b:
         68:46:b5:ea:b6:28:13:4f:66:70:28:f4:52:d2:b1:a4:5f:40:
         3d:93:ba:5e:2d:0a:30:98:d3:9f:0d:33:f2:55:cf:01:2b:ec:
         c4:57:7c:a3:01:e8:f6:7a:09:fc:10:ac:7b:dd:21:91:a6:c4:
         58:8d:43:48:54:ea:f6:d5:de:31:23:54:4b:72:9c:c0:5b:71:
         95:e9:b2:07:85:08:df:82:14:c1:28:7d:e5:ae:2f:34:68:4d:
         47:23:cd:3d:90:17:c4:6f:e8:16:56:5d:ef:87:c8:8f:57:26:
         67:ea:85:6d:55:97:e7:45:7b:fc:34:85:12:fa:fc:2c:17:e1:
         37:88:df:b9:3f:e2:9e:a1:41:2a:0a:83:27:b4:73:f0:d2:57:
         ac:67:41:4d:fe:93:52:bb:03:62:a4:b4:9b:c7:8a:0d:11:05:
         9d:b1:ba:f7:7a:e3:7f:8f:cf:d0:25:5c:19:da:a4:f7:17:e2:
         b2:ff:cc:ba:f1:b5:4e:f2:64:d9:de:d4:b3:21:66:b4:24:56:
         80:7f:ae:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFRS5TUA99j5NRLhOpjjVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYjIyNGI1M2VjOWM4YjE3ZjMxODk1YjE2YThkNDU3MWYw
ZTY5NzAwHhcNMjUwODA3MTYwMjQwWhcNMjUwODA4MTYwMjQwWjAzMTEwLwYDVQQD
EyhiNWE5NWFiZjdmYjZlODc1MDIxMGYzYzU5NWUyN2QyNGYwNDIwMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL9kqIyNBD0qD3He1uVicvKPhyJ+
5LkpaUGj0KeVapVvQFf0UMw9d4m5fK70qI/jVB4WnTUucYgh40NSse4C6iZI2SpL
kVItfUOR2Jn4sR5SjB5TC0lL5MxHRAbxB8tPuUrjPhhekgETbVF+sMnkK9SHwAS8
VvM5VzJjiJ25OtEmLQSCSNPMhij2Io/wd1UQabBHsxhUy7oUGj/OGbcmLXTxdWcK
JRuaKU9CCYskMiCrwvm+xmNGDN7hIm1TnOcrIHpNj7M3qrBZeJA2W2x9i8dyAbiR
gu9Vm5wET+C33MV/UF/FwRSFoeXmJnC3aEsplRsSG5hHIsWWRdsxOUnFdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWpWr9/tuh1AhDzxZXifSTwQgEvMB8GA1UdIwQY
MBaAFEyyJLU+ycixfzGJWxao1FcfDmlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lMmFhYzUtYzA0ZC00YWUwLThiZjMt
OWUzZDg5ZDllNjE3LzEvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9lMmFhYzUtYzA0ZC00YWUwLThiZjMtOWUzZDg5ZDllNjE3
LzEvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAih1snRIU
SNd+FMzEFukoNYZgCGWdLBj08HXNkSb84EtsZFZ//6Xnpf2BugeleMjOF8k6PVlL
aEa16rYoE09mcCj0UtKxpF9APZO6Xi0KMJjTnw0z8lXPASvsxFd8owHo9noJ/BCs
e90hkabEWI1DSFTq9tXeMSNUS3KcwFtxlemyB4UI34IUwSh95a4vNGhNRyPNPZAX
xG/oFlZd74fIj1cmZ+qFbVWX50V7/DSFEvr8LBfhN4jfuT/inqFBKgqDJ7Rz8NJX
rGdBTf6TUrsDYqS0m8eKDREFnbG693rjf4/P0CVcGdqk9xfisv/MuvG1TvJk2d7U
syFmtCRWgH+uLA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:37:56 2025 by rpki-client