Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
File:                     TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json)
Hash identifier:          Fya7YLtFsE4Srkn5usnFGmT/6WV28gIQLlBjKVp2z5E=
Subject key identifier:   B1:98:0D:C4:56:D9:4D:9B:C8:AB:2B:2C:1A:4C:12:E2:84:94:C0:2E
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Certificate issuer:       /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial:       0199239F8A4EE19281C102E10BAB8FC21757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
Manifest number:          106C
Signing time:             Sun 07 Sep 2025 10:01:22 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:22 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:22 +0000
Files and hashes:         1: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: XAEcDctuUJy4omH6HmXM6I/4l6OrPsSePuPEtcQNJwc=)
                          2: ebErOTcxF8x0HRmokQpD8A9P798.roa (hash: hgALEdNUDsS4deffBsaMplhK9QNYL4vbKGcbf+NsbgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:8a:4e:e1:92:81:c1:02:e1:0b:ab:8f:c2:17:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
        Validity
            Not Before: Sep  7 10:01:22 2025 GMT
            Not After : Sep  8 10:01:22 2025 GMT
        Subject: CN=b1980dc456d94d9bc8ab2b2c1a4c12e28494c02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:06:64:fd:23:8f:09:98:e1:1c:35:26:31:da:
                    9e:ee:b3:ef:6a:6f:68:94:89:f9:61:7e:d6:2f:15:
                    30:5e:41:d7:a8:14:80:38:70:0b:68:fb:60:d4:8b:
                    09:93:16:45:9c:2a:8e:59:6e:44:5d:bc:90:d6:a8:
                    d9:1f:d9:3f:44:d7:24:1a:75:97:82:cb:b6:51:ab:
                    e9:82:8f:94:7b:c6:cf:e8:43:cf:c5:32:c5:e1:fb:
                    95:62:e7:cd:c1:a8:64:8e:ad:b1:38:d5:7a:0b:a1:
                    7f:61:7d:4a:60:c6:28:05:3c:e1:17:21:ac:7f:a8:
                    6a:b0:35:9d:4f:d2:4e:fa:52:4b:7e:b9:98:18:23:
                    8e:2c:d2:10:17:a7:93:bc:24:42:61:25:e5:a5:56:
                    bf:d7:a1:ba:4a:86:86:9e:33:e5:19:27:d9:83:2a:
                    bb:79:d7:82:de:e7:eb:a1:28:ad:f5:dd:bd:24:06:
                    11:b0:1a:8e:ea:da:ba:16:28:69:73:0b:8e:6c:c1:
                    5b:71:6b:4c:a0:c2:4d:19:78:98:c7:5a:58:2b:0e:
                    08:53:30:33:68:b1:57:89:cf:c7:b1:97:4b:7a:7b:
                    ef:d3:89:79:16:41:9d:3a:7a:47:69:40:71:76:d5:
                    37:ed:56:a9:ee:d3:fa:53:ad:3b:e8:60:9f:ed:ef:
                    fb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:98:0D:C4:56:D9:4D:9B:C8:AB:2B:2C:1A:4C:12:E2:84:94:C0:2E
            X509v3 Authority Key Identifier:
                keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:33:ff:37:10:30:55:10:67:22:c5:68:50:f2:86:ef:97:a2:
         9f:f2:f4:17:5c:21:cb:73:92:4f:79:a1:f1:71:3d:55:90:8e:
         d3:7a:31:39:f9:43:fd:fa:de:9f:66:5b:d3:89:74:9e:5b:7e:
         37:6d:07:83:ba:1d:90:30:e2:18:9f:c6:6b:7f:9d:a6:0a:f8:
         cd:67:9e:bc:38:95:f4:42:95:7b:11:16:a2:e4:a0:df:06:78:
         89:7e:1a:fe:d2:a6:63:2e:e4:9c:3f:54:c2:19:25:0d:a7:0f:
         45:7a:5b:79:af:aa:4a:c9:9c:70:a2:03:c7:e7:16:ac:fc:d2:
         ff:b4:80:50:40:d5:12:97:c8:5e:27:10:f4:47:ba:67:45:d0:
         06:41:bb:af:d1:38:d8:b3:1b:65:3c:89:90:8c:33:77:20:ee:
         85:da:4b:aa:f1:72:bf:4e:be:9a:88:39:3a:f4:b0:01:3d:32:
         ee:12:61:51:61:57:d6:e6:e5:3e:b5:0e:52:05:75:50:78:91:
         69:83:df:84:a4:4a:4b:b8:ce:f5:e7:4c:f6:af:ff:69:2d:6e:
         69:90:28:4d:29:4c:bd:84:ad:5d:a0:66:00:fb:64:bf:02:63:
         07:80:dd:8c:e3:f7:ca:8c:ab:4c:03:95:92:5c:f3:23:cf:f9:
         7a:a0:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:11 2025 by rpki-client