Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
File:                     tmlTqin4JZqgLBImpGzgnt1Fzp0.mft (raw, json)
Hash identifier:          xTeC8xeB1M4GpxaJ/ypzbDXJ1RrVt9CGBfF0MEA4AIs=
Subject key identifier:   26:F4:C5:58:50:43:9C:20:B5:37:92:55:8A:0F:01:FC:57:96:E4:3B
Authority key identifier: B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
Certificate issuer:       /CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Certificate serial:       019770E33A9C750952F749C1BBB1A97A7CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
Manifest number:          46
Signing time:             Sun 15 Jun 2025 00:00:29 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:29 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:29 +0000
Files and hashes:         1: pqvRnrkHquypsw02knASEmaM8CA.roa (hash: iRr4/5L2X3HFedqB9qSGokTGPgu0NihU0rX3BfoQgdM=)
                          2: tmlTqin4JZqgLBImpGzgnt1Fzp0.crl (hash: e/iQU5iiSZI8LRGfe+VCL0Xneq60tPGnkabz1kHAvL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:3a:9c:75:09:52:f7:49:c1:bb:b1:a9:7a:7c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
        Validity
            Not Before: Jun 15 00:00:29 2025 GMT
            Not After : Jun 16 00:00:29 2025 GMT
        Subject: CN=26f4c55850439c20b53792558a0f01fc5796e43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:48:e8:17:cf:a9:8f:af:70:5a:5c:51:15:
                    5f:af:d4:9e:44:b5:4e:58:54:58:d3:96:a5:d0:0e:
                    63:56:d3:65:89:6b:88:cc:8e:68:58:0e:ca:b2:d3:
                    3f:59:ee:cc:73:80:37:1b:77:d8:26:c7:91:bc:97:
                    74:e0:82:04:65:12:c7:74:51:65:1b:f0:6a:c6:2a:
                    20:d8:4d:34:97:3d:a7:8e:7e:21:96:75:e0:a9:05:
                    25:f4:ec:81:23:0e:00:2b:ef:0b:44:b8:32:e0:53:
                    ea:ac:93:ad:6e:91:b3:ff:26:87:14:b2:af:75:74:
                    ad:94:c4:af:ba:bf:20:00:7f:47:11:d9:ad:c1:d2:
                    d9:f1:cb:8b:3f:cd:7e:eb:23:b7:93:83:7d:38:0e:
                    a7:08:96:17:30:75:f4:12:0b:9f:6e:be:e0:66:ff:
                    bd:f6:59:78:47:50:ff:d7:bb:a3:52:16:03:90:f5:
                    32:f7:38:02:1e:b0:30:4b:db:f1:44:67:a9:52:29:
                    30:2c:8d:6c:67:04:fd:09:7b:05:cb:0b:bb:ba:86:
                    76:98:22:70:93:17:eb:50:81:51:1b:17:e1:a1:e3:
                    ee:b3:7e:17:82:07:1f:29:9a:71:c4:a9:7d:3a:58:
                    e1:41:80:3f:54:2a:f1:e8:44:ef:0a:db:7a:e2:89:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F4:C5:58:50:43:9C:20:B5:37:92:55:8A:0F:01:FC:57:96:E4:3B
            X509v3 Authority Key Identifier:
                keyid:B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c8:c3:f8:36:39:51:2a:68:d0:f4:a6:b7:44:2b:da:2f:23:
         92:2f:62:2b:ec:ad:6b:2e:04:30:dd:ed:f5:b4:d3:24:78:a9:
         79:cd:0e:41:61:0b:0b:c4:38:02:66:b7:a8:33:4d:e1:40:fb:
         11:f6:e9:a2:21:1d:a6:e4:98:d3:3d:8c:f0:7c:6f:f0:f0:9b:
         3d:41:fe:a0:0c:b9:ba:4f:6c:cd:43:35:0e:0e:7c:42:95:6e:
         7a:e5:d8:99:ca:91:d5:85:45:17:a0:07:4a:46:7b:da:5f:85:
         0b:f2:3d:52:ba:58:ca:d6:0e:32:f1:c3:2a:5e:f9:72:69:bd:
         2e:1a:29:b0:47:7d:21:cb:06:a8:db:b4:f7:65:e8:45:ff:e9:
         27:ee:95:10:ff:60:0f:12:6b:8f:26:7b:af:46:84:7c:ec:42:
         8a:78:a9:b4:b0:39:9a:72:7d:33:b7:41:db:1f:c8:ef:5d:e4:
         89:50:9b:2c:08:4c:64:f7:6d:ee:36:53:66:bd:34:41:96:4d:
         a0:97:15:29:c7:f7:69:87:66:32:89:d8:ed:4f:d0:45:4b:0b:
         05:ae:dc:bb:98:63:84:28:21:fe:5d:e8:ed:65:91:5d:f9:8a:
         71:4e:c3:4b:a8:1d:99:51:87:1d:8c:33:b1:c2:c8:a1:eb:a4:
         67:5b:0e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw4zqcdQlS90nBu7GpenziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Njk1M2FhMjlmODI1OWFhMDJjMTIyNmE0NmNlMDllZGQ0
NWNlOWQwHhcNMjUwNjE1MDAwMDI5WhcNMjUwNjE2MDAwMDI5WjAzMTEwLwYDVQQD
EygyNmY0YzU1ODUwNDM5YzIwYjUzNzkyNTU4YTBmMDFmYzU3OTZlNDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYBI6BfPqY+vcFpcURVfr9SeRLVO
WFRY05al0A5jVtNliWuIzI5oWA7KstM/We7Mc4A3G3fYJseRvJd04IIEZRLHdFFl
G/Bqxiog2E00lz2njn4hlnXgqQUl9OyBIw4AK+8LRLgy4FPqrJOtbpGz/yaHFLKv
dXStlMSvur8gAH9HEdmtwdLZ8cuLP81+6yO3k4N9OA6nCJYXMHX0Egufbr7gZv+9
9ll4R1D/17ujUhYDkPUy9zgCHrAwS9vxRGepUikwLI1sZwT9CXsFywu7uoZ2mCJw
kxfrUIFRGxfhoePus34XggcfKZpxxKl9OljhQYA/VCrx6ETvCtt64om2JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCb0xVhQQ5wgtTeSVYoPAfxXluQ7MB8GA1UdIwQY
MBaAFLZpU6op+CWaoCwSJqRs4J7dRc6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG1sVHFpbjRKWnFnTEJJbXBHemdudDFGenAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yNTk0MTgtNWU3NC00ZGYwLTgyYTAt
ZjllNzUzMDg3NTRmLzEvdG1sVHFpbjRKWnFnTEJJbXBHemdudDFGenAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8yNTk0MTgtNWU3NC00ZGYwLTgyYTAtZjllNzUzMDg3NTRm
LzEvdG1sVHFpbjRKWnFnTEJJbXBHemdudDFGenAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMjD+DY5
USpo0PSmt0Qr2i8jki9iK+ytay4EMN3t9bTTJHipec0OQWELC8Q4Ama3qDNN4UD7
EfbpoiEdpuSY0z2M8Hxv8PCbPUH+oAy5uk9szUM1Dg58QpVueuXYmcqR1YVFF6AH
SkZ72l+FC/I9UrpYytYOMvHDKl75cmm9LhopsEd9IcsGqNu092XoRf/pJ+6VEP9g
DxJrjyZ7r0aEfOxCiniptLA5mnJ9M7dB2x/I713kiVCbLAhMZPdt7jZTZr00QZZN
oJcVKcf3aYdmMonY7U/QRUsLBa7cu5hjhCgh/l3o7WWRXfmKcU7DS6gdmVGHHYwz
scLIoeukZ1sO4w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:27 2025 by rpki-client