Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
File:                     TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json)
Hash identifier:          o9AEEbTqo9kjvv91n0MTEwZ3dihefsgVrSrEKdr3Nto=
Subject key identifier:   DD:6C:F4:13:BC:9B:42:1A:7D:D2:18:2E:A1:E7:BC:8A:6B:27:3F:0A
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Certificate issuer:       /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial:       01983803AE1564693BAEA0836C3F809F9BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
Manifest number:          1613
Signing time:             Wed 23 Jul 2025 16:00:21 +0000
Manifest this update:     Wed 23 Jul 2025 16:00:21 +0000
Manifest next update:     Thu 24 Jul 2025 16:00:21 +0000
Files and hashes:         1: 5Tj38Bsn0hJUYrmVNSahq5IYxas.roa (hash: GZ7T7PHhO62jK4WQFKNvOrwYNZYOPPS6icOBzwnz7nI=)
                          2: 6p9AkcbnlE4Z8IbJhSYYYojDJrg.roa (hash: SKcAYEFRxxbeCI1HsQW06reRx+d5nEWDWPFTqTMItNM=)
                          3: Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa (hash: HSjxAg+X+QFqjbXeKMYZbr1j8n6ewv+Jo99Iqhyk6hE=)
                          4: IZrh2fKkBSEsZhHZW1V-vS3SOsU.roa (hash: Bu6uRwEYKgZWKKUFSCHxc6kWVnShkzj76gtymj7qNwg=)
                          5: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=)
                          6: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=)
                          7: RLeyW7lqx5hu9s9VIH-LZ4c9FSQ.roa (hash: 8qkFZX4fO9IGCK+/hjULowdb/hcL+0qKwz4xQec6iUE=)
                          8: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: fMslV7ny5Wry3CmftsSpvmLRefbVP/LkQwqRnPqlovE=)
                          9: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=)
                          10: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:03:ae:15:64:69:3b:ae:a0:83:6c:3f:80:9f:9b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
        Validity
            Not Before: Jul 23 16:00:21 2025 GMT
            Not After : Jul 24 16:00:21 2025 GMT
        Subject: CN=dd6cf413bc9b421a7dd2182ea1e7bc8a6b273f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:75:bf:39:24:0a:2d:d7:88:a5:31:d3:19:
                    3a:1a:66:b5:85:ff:b8:24:b3:46:72:36:d7:0d:6d:
                    ca:d8:4b:20:45:e8:41:40:8a:b1:5d:ec:7f:f5:2a:
                    9c:a6:fd:c3:70:ac:61:cb:9f:ea:23:3c:da:d2:c0:
                    ab:22:3e:2a:f6:fa:90:34:64:bb:1d:2e:86:e6:19:
                    ff:30:0a:c3:cb:cf:3a:76:40:dc:61:42:ae:9a:56:
                    80:43:cc:0c:73:4b:06:4d:0f:74:69:6c:ad:54:d9:
                    d6:7f:4a:9b:b1:ac:02:18:62:92:43:80:35:5d:b8:
                    e6:c2:f7:0f:73:36:64:cb:6f:ee:b4:3e:a3:ab:2a:
                    4a:40:af:ac:bf:d1:18:ac:6b:66:fe:c4:98:78:1b:
                    c7:0f:e0:3e:c3:b2:7a:db:96:48:3a:14:ec:3a:b9:
                    28:3a:62:9c:a3:4f:5d:b2:d5:d2:b3:fe:09:00:ea:
                    00:c8:4c:23:26:78:05:13:f8:37:db:1c:11:4c:3a:
                    2e:2b:ad:ad:60:72:92:f1:bf:f0:87:36:94:4d:c5:
                    17:92:4d:09:d0:fb:ac:f1:20:f3:4c:17:aa:b0:77:
                    46:63:30:02:98:7a:79:31:b2:5c:e8:52:5e:14:f0:
                    0e:db:66:af:6b:45:3a:5e:16:ea:11:ef:64:40:6d:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6C:F4:13:BC:9B:42:1A:7D:D2:18:2E:A1:E7:BC:8A:6B:27:3F:0A
            X509v3 Authority Key Identifier:
                keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:04:21:96:c1:d4:55:80:ea:88:ae:49:44:60:7f:43:a6:b6:
         0c:dc:dd:2e:8e:61:40:05:a5:7f:d8:d9:70:37:e6:b6:52:c4:
         55:77:f9:b0:7a:32:c1:49:1c:67:8a:5f:02:ef:c1:e6:7d:41:
         08:a0:8c:d1:d2:27:88:91:77:22:bd:18:f7:bf:74:b5:ba:5c:
         22:18:ce:a6:79:02:1c:89:c7:76:3e:c7:59:87:88:5f:79:00:
         fb:5a:14:ec:26:45:72:35:9a:0e:3b:ab:ec:b4:8d:b3:f4:c9:
         b1:0e:a1:39:ca:70:e8:7b:70:86:58:83:88:75:76:cf:12:dd:
         32:3a:aa:1d:61:fc:64:2b:65:0e:c7:43:72:98:78:c1:92:bd:
         40:c0:31:d9:79:85:96:0d:3f:a8:be:54:69:07:53:58:cb:fa:
         0c:8c:73:1b:88:d3:5d:a0:e7:f5:72:2e:b2:a0:46:25:be:9e:
         9b:d2:4c:9a:9d:f8:2a:a8:1e:e1:85:8a:d5:32:a4:7f:76:ab:
         94:2b:78:24:c4:3a:18:0c:b2:14:68:5d:9f:da:c1:95:8a:3e:
         9c:62:1e:cb:de:59:84:87:7a:c0:e8:a6:5c:da:bf:e9:5a:8e:
         97:f6:6d:59:9a:1f:0e:64:ae:15:de:d9:68:bd:ed:cd:4e:55:
         e1:4c:0b:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4A64VZGk7rqCDbD+An5vEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2
NzdiY2QwHhcNMjUwNzIzMTYwMDIxWhcNMjUwNzI0MTYwMDIxWjAzMTEwLwYDVQQD
EyhkZDZjZjQxM2JjOWI0MjFhN2RkMjE4MmVhMWU3YmM4YTZiMjczZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJt1vzkkCi3XiKUx0xk6Gma1hf+4
JLNGcjbXDW3K2EsgRehBQIqxXex/9Sqcpv3DcKxhy5/qIzza0sCrIj4q9vqQNGS7
HS6G5hn/MArDy886dkDcYUKumlaAQ8wMc0sGTQ90aWytVNnWf0qbsawCGGKSQ4A1
XbjmwvcPczZky2/utD6jqypKQK+sv9EYrGtm/sSYeBvHD+A+w7J625ZIOhTsOrko
OmKco09dstXSs/4JAOoAyEwjJngFE/g32xwRTDouK62tYHKS8b/whzaUTcUXkk0J
0Pus8SDzTBeqsHdGYzACmHp5MbJc6FJeFPAO22ava0U6XhbqEe9kQG2nnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1s9BO8m0IafdIYLqHnvIprJz8KMB8GA1UdIwQY
MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt
NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk
LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwQhlsHU
VYDqiK5JRGB/Q6a2DNzdLo5hQAWlf9jZcDfmtlLEVXf5sHoywUkcZ4pfAu/B5n1B
CKCM0dIniJF3Ir0Y9790tbpcIhjOpnkCHInHdj7HWYeIX3kA+1oU7CZFcjWaDjur
7LSNs/TJsQ6hOcpw6HtwhliDiHV2zxLdMjqqHWH8ZCtlDsdDcph4wZK9QMAx2XmF
lg0/qL5UaQdTWMv6DIxzG4jTXaDn9XIusqBGJb6em9JMmp34Kqge4YWK1TKkf3ar
lCt4JMQ6GAyyFGhdn9rBlYo+nGIey95ZhId6wOimXNq/6VqOl/ZtWZofDmSuFd7Z
aL3tzU5V4UwLbw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:42:50 2025 by rpki-client