Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File:                     TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier:          HMEcCC23mWkaUvZVD6wcvqEdiNgHOa4yOrAs7qiUHFA=
Subject key identifier:   92:CC:FC:9D:57:AF:0F:FE:4B:5A:68:3B:71:33:3A:15:D5:F1:42:E5
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer:       /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial:       0198548D67DF4A72651D9E9575778275DF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number:          1606
Signing time:             Tue 29 Jul 2025 05:00:09 +0000
Manifest this update:     Tue 29 Jul 2025 05:00:09 +0000
Manifest next update:     Wed 30 Jul 2025 05:00:09 +0000
Files and hashes:         1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
                          2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: o3Ucc4iARv6KgqLsweVjf1TxCFtL2y5BVBq1cj1GoyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:8d:67:df:4a:72:65:1d:9e:95:75:77:82:75:df:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
        Validity
            Not Before: Jul 29 05:00:09 2025 GMT
            Not After : Jul 30 05:00:09 2025 GMT
        Subject: CN=92ccfc9d57af0ffe4b5a683b71333a15d5f142e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:40:6e:fa:9a:12:5c:1b:13:90:38:4f:62:
                    35:3c:ab:6c:67:2e:2d:3b:2f:4c:d2:b5:a0:8c:9a:
                    9c:d8:9c:7a:d0:74:3d:3c:f1:e6:64:8a:8a:b3:28:
                    b5:36:0b:c9:09:19:c7:ff:c9:84:6f:32:3e:dd:15:
                    4a:3d:7a:b9:c0:17:3c:70:1d:1b:fa:b4:0a:46:a7:
                    13:7c:0b:9c:17:90:01:ff:4c:aa:43:bd:6f:65:40:
                    8b:d1:7e:7b:61:27:e1:1e:17:7e:46:00:bb:6e:b4:
                    8c:b7:0d:77:cb:3b:e6:9e:50:65:db:6d:aa:43:60:
                    04:57:0f:55:84:42:b3:7b:be:b2:1d:4b:3d:7e:27:
                    6b:30:28:e7:f9:6c:a0:2c:a4:60:6f:49:ce:92:31:
                    f9:0f:6e:b9:a1:30:fe:b2:a7:94:9f:e1:00:22:4f:
                    25:ea:e1:e5:24:c4:37:01:7b:e6:3a:c4:d6:94:cb:
                    f2:89:19:c3:b5:1b:c1:d4:ba:ed:4c:6b:e0:0a:45:
                    7b:6a:ef:bb:1d:13:01:1b:d4:a0:72:a6:5d:95:f8:
                    49:ce:33:9f:28:07:75:6e:7f:39:78:6a:d4:9f:f4:
                    a0:d5:29:74:5a:29:d7:85:9f:ad:75:cc:e0:04:70:
                    32:37:89:3e:1e:ed:82:32:1f:3f:cd:49:15:ce:bf:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CC:FC:9D:57:AF:0F:FE:4B:5A:68:3B:71:33:3A:15:D5:F1:42:E5
            X509v3 Authority Key Identifier:
                keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:ee:ef:dd:4d:aa:95:c0:20:ac:f6:c2:3a:0c:2c:49:41:
         d1:82:cf:b4:ed:3b:e3:c3:06:ee:08:5b:eb:14:fe:6e:8c:b0:
         4e:5b:fb:46:fd:51:e5:83:82:ae:0f:40:d2:42:c1:db:47:35:
         28:0e:5d:e6:71:7c:44:13:a9:0b:35:f2:95:1c:64:f4:8a:1e:
         51:c8:2a:30:ce:76:99:e1:77:7d:40:9f:8b:88:f8:c7:85:32:
         da:00:da:aa:56:d1:a9:da:a2:14:8e:c8:04:09:de:47:ba:49:
         27:11:ef:b0:1b:4e:d3:1d:19:01:29:46:8d:a1:21:1d:5f:48:
         ac:b9:64:22:2a:62:a4:50:df:9d:6c:12:be:2e:16:df:02:0f:
         59:6d:89:a6:01:98:9b:48:0b:a0:b7:4f:1c:92:37:a9:dd:8c:
         c9:2d:6c:a1:62:12:ad:11:08:ad:5e:7b:6b:9d:d6:18:d1:7f:
         b8:96:33:b2:b2:a7:15:74:7b:55:b1:9c:20:c6:13:f0:4e:b8:
         8d:f8:4b:fc:79:6e:c9:38:01:3b:31:c2:c5:a3:3c:9e:ac:71:
         19:c1:c0:26:27:a1:f4:f7:c1:8d:ce:7c:fd:1a:40:2a:01:d9:
         bd:92:21:6d:1a:a4:f2:56:e7:64:98:bb:94:11:05:30:82:11:
         e6:31:7b:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUjWffSnJlHZ6VdXeCdd9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZTcwNDAzYzlkMmQ3OTYyY2YxMTNkOTNjNDYyZjk0OTNk
ODczNjIwHhcNMjUwNzI5MDUwMDA5WhcNMjUwNzMwMDUwMDA5WjAzMTEwLwYDVQQD
Eyg5MmNjZmM5ZDU3YWYwZmZlNGI1YTY4M2I3MTMzM2ExNWQ1ZjE0MmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFhAbvqaElwbE5A4T2I1PKtsZy4t
Oy9M0rWgjJqc2Jx60HQ9PPHmZIqKsyi1NgvJCRnH/8mEbzI+3RVKPXq5wBc8cB0b
+rQKRqcTfAucF5AB/0yqQ71vZUCL0X57YSfhHhd+RgC7brSMtw13yzvmnlBl222q
Q2AEVw9VhEKze76yHUs9fidrMCjn+WygLKRgb0nOkjH5D265oTD+sqeUn+EAIk8l
6uHlJMQ3AXvmOsTWlMvyiRnDtRvB1LrtTGvgCkV7au+7HRMBG9SgcqZdlfhJzjOf
KAd1bn85eGrUn/Sg1Sl0WinXhZ+tdczgBHAyN4k+Hu2CMh8/zUkVzr8XKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLM/J1Xrw/+S1poO3EzOhXV8ULlMB8GA1UdIwQY
MBaAFE3nBAPJ0teWLPET2TxGL5ST2HNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yNTAxMjctODVkNy00NmI0LTg4NjUt
YmYwZGE1ZThjZTdmLzEvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yNTAxMjctODVkNy00NmI0LTg4NjUtYmYwZGE1ZThjZTdm
LzEvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe3u791N
qpXAIKz2wjoMLElB0YLPtO0748MG7ghb6xT+boywTlv7Rv1R5YOCrg9A0kLB20c1
KA5d5nF8RBOpCzXylRxk9IoeUcgqMM52meF3fUCfi4j4x4Uy2gDaqlbRqdqiFI7I
BAneR7pJJxHvsBtO0x0ZASlGjaEhHV9IrLlkIipipFDfnWwSvi4W3wIPWW2JpgGY
m0gLoLdPHJI3qd2MyS1soWISrREIrV57a53WGNF/uJYzsrKnFXR7VbGcIMYT8E64
jfhL/HluyTgBOzHCxaM8nqxxGcHAJieh9PfBjc58/RpAKgHZvZIhbRqk8lbnZJi7
lBEFMIIR5jF7Kg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 08:35:28 2025 by rpki-client