Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
File:                     tvvGPvVhSn75WhBhiOPXh1XGh7k.mft (raw, json)
Hash identifier:          cpdlYDYIlWpj93cRiFiWNGcWq+Fu3ymsQW/nKrHB6L8=
Subject key identifier:   E3:09:A5:6A:A5:EC:7C:1E:86:37:1A:4F:EB:4B:85:0B:CA:64:68:A7
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Certificate issuer:       /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial:       01984889B4AB69AA3397B219D2221EF1277C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 21:00:40 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:40 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:40 +0000
Files and hashes:         1: YUVqQdQIyjArliTwomJUYJEwCGQ.roa (hash: 4idaosIzVzGBgf2LXtYCKacvmrm3Vvf4Nk86J3M+nPs=)
                          2: buQG-wtVNpUrPJ_2t7dekqYzUho.roa (hash: AC4DBN7YxMjhR0VzHY+/cw0VJl+DFBoERdFnKk3z5Ac=)
                          3: tvvGPvVhSn75WhBhiOPXh1XGh7k.crl (hash: FfPASCE58Glf+vI3F44AdoYOpmkcmY9VFtcg0dYsTCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:b4:ab:69:aa:33:97:b2:19:d2:22:1e:f1:27:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
        Validity
            Not Before: Jul 26 21:00:40 2025 GMT
            Not After : Jul 27 21:00:40 2025 GMT
        Subject: CN=e309a56aa5ec7c1e86371a4feb4b850bca6468a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:0f:0c:6d:5d:3e:19:d1:da:84:af:4c:a5:
                    59:bb:a5:b6:96:6c:c8:d0:11:08:b1:40:4b:96:67:
                    46:ff:7f:e1:0a:97:a6:24:4d:21:33:3e:f0:67:2d:
                    22:46:a6:38:fa:c2:fe:f0:28:93:05:91:2d:c4:3e:
                    9a:37:67:4e:36:9e:fd:3d:88:ff:0d:93:17:47:18:
                    f9:0a:96:3d:b4:5f:69:04:d9:17:08:93:7f:c9:c5:
                    4d:ff:51:c7:8c:4e:30:db:24:18:74:18:c6:a3:e4:
                    b1:23:f5:e3:f5:90:cd:20:ff:5a:c3:fe:c0:04:b3:
                    52:89:db:a8:4f:77:32:27:03:bc:5e:eb:66:de:af:
                    e2:c5:01:c2:4a:49:75:2e:fb:40:d0:0d:3c:56:21:
                    26:4c:3c:41:96:de:69:73:08:6c:81:42:6e:fa:fa:
                    a0:03:58:8d:94:9f:4d:a3:12:cf:61:42:aa:5b:1a:
                    12:31:01:9c:68:10:a5:a4:a9:99:66:07:49:32:b2:
                    dd:97:54:c9:33:1d:1a:46:b8:c8:1f:f1:8e:3a:8a:
                    04:4f:5e:e9:52:ef:7f:c5:0d:66:e4:d9:cf:f7:57:
                    02:f5:7c:fb:30:19:6b:e4:ca:e5:19:a0:bf:09:86:
                    cf:75:5f:a3:36:51:d8:cb:c8:26:ab:0e:04:d1:62:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:09:A5:6A:A5:EC:7C:1E:86:37:1A:4F:EB:4B:85:0B:CA:64:68:A7
            X509v3 Authority Key Identifier:
                keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b0:cc:47:48:2d:de:40:a8:a1:75:c2:56:82:01:db:15:57:
         7b:0e:37:5c:e1:cb:0a:bf:11:48:dc:6a:71:09:e4:08:9d:11:
         04:c8:f2:1d:3f:2b:7f:1a:a4:1b:1d:af:1f:24:a0:0c:d5:79:
         40:0d:1e:b8:ea:40:97:41:68:c8:4b:2e:60:c4:01:8a:de:ba:
         9a:8b:dd:cf:c6:55:30:6f:2b:bb:da:52:45:14:15:0f:fe:ec:
         57:2a:9d:27:b0:25:4f:e1:4f:06:7a:54:23:21:78:95:1a:23:
         2d:0f:fa:e0:7b:00:a4:a5:d5:ff:ca:41:37:1e:e5:cd:56:fc:
         44:1e:10:19:95:7c:06:6b:7b:b5:a0:c8:3d:87:39:94:ce:1b:
         7b:66:ba:c4:06:1a:d9:1e:7d:e2:8a:9c:88:44:13:27:c4:3e:
         c3:b4:32:af:42:b3:e3:60:13:ab:4f:3c:a3:ae:87:ca:de:af:
         e5:c2:68:98:59:9f:9c:b8:ae:44:f7:3c:3d:c3:23:db:1d:bf:
         3f:3d:95:01:aa:f2:26:28:98:57:e5:e5:b6:83:95:c5:6a:22:
         a1:bd:a9:c1:f1:58:91:f7:ef:4c:0b:18:59:e4:ff:cf:ef:a7:
         d4:12:98:40:4a:c6:44:03:01:46:fd:54:df:9c:54:8d:bc:db:
         b2:ee:0f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:43:42 2025 by rpki-client