Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
File:                     tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json)
Hash identifier:          nLGZzgWU2vyUxXZz3hPXc7lzL3vSwth8DiQNT06IQXI=
Subject key identifier:   B3:C9:7A:22:5A:BD:0A:5C:82:3D:0E:A3:F4:1D:3F:F5:67:B8:C8:3D
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Certificate issuer:       /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial:       019847E4E339FB3DF7421B9A021DA879FEF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
Manifest number:          1416
Signing time:             Sat 26 Jul 2025 18:00:39 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:39 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:39 +0000
Files and hashes:         1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=)
                          2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: ZnKtFf8oawVUjuHlYcR2PtD2GKJZKCg7QqyeLphpzDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:e3:39:fb:3d:f7:42:1b:9a:02:1d:a8:79:fe:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
        Validity
            Not Before: Jul 26 18:00:39 2025 GMT
            Not After : Jul 27 18:00:39 2025 GMT
        Subject: CN=b3c97a225abd0a5c823d0ea3f41d3ff567b8c83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:28:be:79:d2:0d:14:59:80:40:70:fc:b6:2d:
                    e6:53:5a:8e:55:8d:b7:ee:f1:8c:31:89:27:d1:4b:
                    2d:dd:bc:cf:3d:0a:a3:2d:1e:54:0e:f6:c7:72:f0:
                    fd:95:9c:6d:b6:1c:9d:99:3c:db:a7:38:32:ff:c3:
                    07:2b:2a:6a:90:e1:c9:6e:fb:b4:3d:0a:5b:75:c1:
                    91:bc:f8:3a:fa:12:5e:ae:d3:c6:19:6f:88:7a:5a:
                    c4:aa:9c:3e:e6:42:c8:46:12:19:48:bd:96:bc:62:
                    84:ec:67:99:8a:e4:b4:0f:bd:6f:18:f2:04:51:9b:
                    5d:64:9d:bf:ec:c9:c8:00:b5:09:d9:e2:fb:50:a0:
                    87:8e:fd:a8:7a:8f:a5:f0:91:c7:87:c1:4f:95:f0:
                    48:3f:7e:9f:3a:7c:da:40:48:9f:43:16:b8:e0:9f:
                    52:0d:89:4c:c3:be:cb:9d:e0:46:65:40:ea:46:67:
                    71:e1:69:d1:2e:27:cb:56:a7:f3:b6:a3:4a:93:cd:
                    1d:da:1b:df:a1:19:0c:b9:84:73:0d:e4:80:98:ac:
                    50:56:1f:0c:4d:81:33:30:8b:02:78:39:dc:0c:95:
                    02:c3:8b:e8:d5:1a:7b:df:4e:cf:17:63:9e:76:82:
                    2a:f7:99:53:45:6c:d2:f8:05:57:d2:94:54:46:7f:
                    4d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C9:7A:22:5A:BD:0A:5C:82:3D:0E:A3:F4:1D:3F:F5:67:B8:C8:3D
            X509v3 Authority Key Identifier:
                keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:99:97:47:f2:02:50:6b:2b:24:df:08:1d:1e:4c:48:8b:
         bb:a5:bc:23:4f:8f:47:77:d1:98:62:08:9c:39:96:ee:5c:0f:
         be:01:7c:51:16:a9:da:5f:14:d0:0d:ba:5e:72:ef:fc:1d:40:
         87:5b:2f:f3:a6:36:48:d4:cc:ee:4d:a6:38:ec:40:6f:0d:85:
         a3:2b:8a:7a:01:ca:b1:6e:60:cb:e5:e8:cd:7b:dc:5c:5c:fb:
         62:e2:77:92:65:07:71:8f:05:54:f6:2c:3a:8f:26:2e:d0:82:
         f7:c6:32:6e:3a:bd:a8:1c:94:dd:76:ea:ba:fb:66:34:8e:b7:
         46:84:bc:df:73:e0:e5:7c:aa:01:51:f9:f4:58:67:f5:69:6b:
         31:8a:1c:d5:7f:a3:f8:b0:f2:0e:86:ff:03:d9:c6:00:15:5c:
         0d:03:f8:be:4e:63:91:d5:a1:71:d9:0f:55:f3:8d:be:ad:f7:
         a3:de:ff:2c:4f:b5:2d:d7:7c:36:ad:52:df:f2:b6:d8:08:74:
         9e:38:1f:d7:4f:f7:61:0b:a1:4e:17:02:cc:95:0b:36:5e:be:
         0d:77:0f:79:9c:2f:3d:9d:1a:c4:9c:0b:97:e8:c1:f3:52:0d:
         6d:c9:1d:12:82:08:7d:d1:fa:74:0e:1a:5f:ce:ef:ab:c5:ed:
         ff:b1:81:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5OM5+z33QhuaAh2oef7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OTU3Y2E0ODNhZjBiNjdmOTczYjA4NTk3MmNjYzVjNWVk
MDNmN2MwHhcNMjUwNzI2MTgwMDM5WhcNMjUwNzI3MTgwMDM5WjAzMTEwLwYDVQQD
EyhiM2M5N2EyMjVhYmQwYTVjODIzZDBlYTNmNDFkM2ZmNTY3YjhjODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCi+edINFFmAQHD8ti3mU1qOVY23
7vGMMYkn0Ust3bzPPQqjLR5UDvbHcvD9lZxtthydmTzbpzgy/8MHKypqkOHJbvu0
PQpbdcGRvPg6+hJertPGGW+IelrEqpw+5kLIRhIZSL2WvGKE7GeZiuS0D71vGPIE
UZtdZJ2/7MnIALUJ2eL7UKCHjv2oeo+l8JHHh8FPlfBIP36fOnzaQEifQxa44J9S
DYlMw77LneBGZUDqRmdx4WnRLifLVqfztqNKk80d2hvfoRkMuYRzDeSAmKxQVh8M
TYEzMIsCeDncDJUCw4vo1Rp7307PF2OedoIq95lTRWzS+AVX0pRURn9NWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPJeiJavQpcgj0Oo/QdP/VnuMg9MB8GA1UdIwQY
MBaAFLaVfKSDrwtn+XOwhZcszFxe0D98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQt
ODRiNzI1MTU4MzQ3LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQtODRiNzI1MTU4MzQ3
LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8mZl0fy
AlBrKyTfCB0eTEiLu6W8I0+PR3fRmGIInDmW7lwPvgF8URap2l8U0A26XnLv/B1A
h1sv86Y2SNTM7k2mOOxAbw2FoyuKegHKsW5gy+XozXvcXFz7YuJ3kmUHcY8FVPYs
Oo8mLtCC98Yybjq9qByU3XbquvtmNI63RoS833Pg5XyqAVH59Fhn9WlrMYoc1X+j
+LDyDob/A9nGABVcDQP4vk5jkdWhcdkPVfONvq33o97/LE+1Ldd8Nq1S3/K22Ah0
njgf10/3YQuhThcCzJULNl6+DXcPeZwvPZ0axJwLl+jB81INbckdEoIIfdH6dA4a
X87vq8Xt/7GBrw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:27 2025 by rpki-client