Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
File:                     txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json)
Hash identifier:          Mhl8LrVupXeHOse5y/34nhMBPYFVA2ZYBXMADkFC01E=
Subject key identifier:   FA:E8:88:6D:73:3E:72:A1:50:3B:1E:6B:8C:E2:08:B1:F7:3E:AF:92
Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B
Certificate issuer:       /CN=b718859d412f9b5872a58977320d2d083bd7a04b
Certificate serial:       019921B0E8D290863FCEE9EFBEC18B779D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
Manifest number:          105A
Signing time:             Sun 07 Sep 2025 01:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:06 +0000
Files and hashes:         1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: 9OuT8BcP9zwxtfLLsOmEUnVyVuOX//UxMvG8K/nX8Mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:e8:d2:90:86:3f:ce:e9:ef:be:c1:8b:77:9d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b
        Validity
            Not Before: Sep  7 01:01:06 2025 GMT
            Not After : Sep  8 01:01:06 2025 GMT
        Subject: CN=fae8886d733e72a1503b1e6b8ce208b1f73eaf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:a8:72:9a:c5:39:05:5e:88:32:70:e2:a7:
                    87:d5:1e:8a:29:dc:54:e5:ed:2c:9a:ce:13:16:c5:
                    6e:f7:35:0a:37:b8:42:ea:f6:fb:66:96:64:15:3a:
                    67:6b:78:02:2d:8f:8d:1a:42:f0:bd:42:c1:f4:b0:
                    b2:6c:29:0f:84:97:07:82:be:41:82:e8:f8:ae:cd:
                    b4:75:70:1a:e1:7d:a7:ab:d5:cb:33:23:ad:a0:9f:
                    e1:a9:61:49:82:f0:a7:28:d2:60:4b:9c:30:4d:fb:
                    85:99:bb:d2:01:f9:b3:3d:72:09:36:04:12:94:4f:
                    40:d5:7e:34:eb:40:38:94:be:44:69:e7:3f:a1:46:
                    3b:98:62:1e:20:1b:f5:96:9a:7d:24:77:a2:f2:1c:
                    3e:cc:47:83:ab:b4:72:89:2e:73:84:17:fb:56:11:
                    61:36:c9:73:74:98:00:91:01:3d:71:67:bc:cb:ea:
                    2b:92:c6:ef:e3:68:51:f2:d8:49:38:44:2e:8d:20:
                    e4:51:e6:74:1e:af:4e:6d:eb:62:63:97:30:f3:90:
                    4a:5f:f0:6a:94:2a:94:d8:3e:4c:d3:9c:1e:f7:ee:
                    ee:33:41:87:9e:8e:60:5e:ff:86:67:e0:56:04:30:
                    a6:c8:0d:5f:4e:3e:00:fa:89:ac:2a:c0:d0:32:47:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E8:88:6D:73:3E:72:A1:50:3B:1E:6B:8C:E2:08:B1:F7:3E:AF:92
            X509v3 Authority Key Identifier:
                keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:18:8c:1c:c9:21:1e:27:b6:5b:a3:0b:57:ed:d8:39:73:28:
         ed:16:39:01:ef:4b:eb:20:60:12:43:8e:12:1e:41:81:c1:2f:
         4e:36:60:cd:5c:ff:16:3e:b2:d5:33:9b:49:14:19:6b:1d:70:
         56:b1:fc:78:23:1d:f5:d6:aa:f8:09:6d:18:ed:22:0b:a5:72:
         5d:25:ca:bf:e7:c1:6b:2c:d2:58:b0:71:3d:4d:8c:1b:38:89:
         f5:42:03:5e:97:10:b3:e6:1c:a5:32:d9:40:54:e2:28:f5:a9:
         bb:e2:4c:70:ca:e4:b6:84:95:1e:33:73:37:12:e6:4b:ed:87:
         3a:bf:38:f1:30:c5:19:d8:d4:ec:64:88:80:11:6d:19:a0:22:
         ca:a7:2c:58:49:5d:98:53:db:07:b5:2c:d4:7e:61:a1:93:17:
         ad:8f:a9:25:08:e5:09:d1:b1:b1:97:31:d4:d1:9f:70:a5:09:
         95:53:1f:be:21:e6:4d:47:2f:d3:e2:62:97:35:5e:b8:9e:5a:
         9a:7f:61:aa:57:65:96:02:62:8a:fa:56:46:7e:5b:3e:81:46:
         15:41:a5:5d:c3:ed:f3:a6:ac:45:62:83:eb:c8:b6:27:19:5b:
         a4:42:ea:e2:f1:88:df:76:d9:37:32:ba:46:11:76:be:a0:a7:
         c8:12:74:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsOjSkIY/zunvvsGLd51bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTg4NTlkNDEyZjliNTg3MmE1ODk3NzMyMGQyZDA4M2Jk
N2EwNGIwHhcNMjUwOTA3MDEwMTA2WhcNMjUwOTA4MDEwMTA2WjAzMTEwLwYDVQQD
EyhmYWU4ODg2ZDczM2U3MmExNTAzYjFlNmI4Y2UyMDhiMWY3M2VhZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswqocprFOQVeiDJw4qeH1R6KKdxU
5e0sms4TFsVu9zUKN7hC6vb7ZpZkFTpna3gCLY+NGkLwvULB9LCybCkPhJcHgr5B
guj4rs20dXAa4X2nq9XLMyOtoJ/hqWFJgvCnKNJgS5wwTfuFmbvSAfmzPXIJNgQS
lE9A1X4060A4lL5Eaec/oUY7mGIeIBv1lpp9JHei8hw+zEeDq7RyiS5zhBf7VhFh
NslzdJgAkQE9cWe8y+orksbv42hR8thJOEQujSDkUeZ0Hq9ObetiY5cw85BKX/Bq
lCqU2D5M05we9+7uM0GHno5gXv+GZ+BWBDCmyA1fTj4A+omsKsDQMkcSIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFProiG1zPnKhUDsea4ziCLH3Pq+SMB8GA1UdIwQY
MBaAFLcYhZ1BL5tYcqWJdzINLQg716BLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82ZWYxNGEtOTkxNC00MzE4LTlhNTEt
ZDdiY2VkYzYwNTc5LzEvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82ZWYxNGEtOTkxNC00MzE4LTlhNTEtZDdiY2VkYzYwNTc5
LzEvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhiMHMkh
Hie2W6MLV+3YOXMo7RY5Ae9L6yBgEkOOEh5BgcEvTjZgzVz/Fj6y1TObSRQZax1w
VrH8eCMd9daq+AltGO0iC6VyXSXKv+fBayzSWLBxPU2MGziJ9UIDXpcQs+YcpTLZ
QFTiKPWpu+JMcMrktoSVHjNzNxLmS+2HOr848TDFGdjU7GSIgBFtGaAiyqcsWEld
mFPbB7Us1H5hoZMXrY+pJQjlCdGxsZcx1NGfcKUJlVMfviHmTUcv0+JilzVeuJ5a
mn9hqldllgJiivpWRn5bPoFGFUGlXcPt86asRWKD68i2JxlbpELq4vGI33bZNzK6
RhF2vqCnyBJ0JA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:18 2025 by rpki-client