Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
File:                     TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json)
Hash identifier:          Dnqs6++R8DXXYaLRT6EQPWfFOo5az4zy7Yb14vYq8mw=
Subject key identifier:   BE:31:89:AA:B9:A7:14:3D:A6:82:DE:1F:A1:FD:42:95:E3:DE:B7:BA
Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
Certificate issuer:       /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Certificate serial:       0199FDD8F12F82EF142A2C0FD7FC42CF7160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
Manifest number:          07C5
Signing time:             Sun 19 Oct 2025 19:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:16 +0000
Files and hashes:         1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: /ErAu3bddtyVaOsK0U9YpUQAz9r3X5seOadgh7E/N5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:f1:2f:82:ef:14:2a:2c:0f:d7:fc:42:cf:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
        Validity
            Not Before: Oct 19 19:01:16 2025 GMT
            Not After : Oct 20 19:01:16 2025 GMT
        Subject: CN=be3189aab9a7143da682de1fa1fd4295e3deb7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:16:dc:1f:2f:58:b1:39:da:ad:62:7d:0a:
                    2a:cd:a9:4a:29:19:2d:02:4f:a5:77:6b:b4:41:77:
                    62:72:86:e7:5a:b1:fe:56:62:9f:dd:6c:e4:4f:ca:
                    ee:73:9f:c1:86:86:6e:16:13:31:f4:6f:9a:0f:30:
                    bb:11:94:13:65:60:93:6b:95:2e:c4:70:25:3d:f4:
                    5d:1f:28:8b:3c:f3:1c:7b:3b:93:49:48:63:e0:4f:
                    e4:e3:d0:e5:60:25:46:18:44:24:56:d8:9f:c3:6f:
                    4e:3a:44:23:18:06:ad:3d:ba:52:51:43:e0:72:9b:
                    82:55:62:8b:07:b7:20:51:d9:0f:fc:41:19:8d:31:
                    ed:dd:59:ba:ea:5a:f2:a4:b0:0b:51:1e:3f:8b:e2:
                    a7:33:a4:e4:9f:fa:f2:d8:3d:62:6f:67:55:3d:13:
                    a6:88:d5:21:45:30:93:9d:a1:32:db:fb:4e:32:9f:
                    e4:f4:8c:e2:35:33:b3:d9:0a:d4:20:2f:e3:2e:f2:
                    09:89:58:95:77:df:65:c4:08:9c:c9:e1:50:af:f2:
                    e5:21:72:17:c4:2f:0e:ad:11:47:9e:3e:40:ef:73:
                    a7:1b:24:cb:03:fe:dd:aa:0a:55:4f:15:f6:15:d9:
                    a9:83:55:2c:ec:26:be:b4:94:11:e9:9f:5e:63:a9:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:31:89:AA:B9:A7:14:3D:A6:82:DE:1F:A1:FD:42:95:E3:DE:B7:BA
            X509v3 Authority Key Identifier:
                keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:7d:63:b9:c1:70:c6:0e:d7:1c:03:d4:54:a9:d7:ce:51:
         75:32:8f:0e:47:68:56:cd:42:49:76:76:85:c2:e0:26:1c:16:
         a4:d4:b2:d3:48:52:77:63:da:9c:2a:0b:b4:98:8a:7e:0a:2f:
         f0:3a:66:66:29:fc:2e:4d:d6:65:d4:0d:ab:71:51:2e:2c:ac:
         de:e8:62:ce:2e:91:07:e4:c4:75:9e:ea:fa:79:6d:a6:6b:d0:
         65:2d:e2:55:57:68:a3:19:1a:2a:59:37:63:6d:28:2b:aa:cd:
         28:ae:3d:40:f4:99:84:3e:2b:d5:5c:99:11:43:4c:f5:17:b9:
         16:d6:7c:c5:84:16:f3:5d:aa:7a:72:2d:5c:80:bf:bc:d0:06:
         74:92:17:3e:c9:7b:30:1b:ea:9d:c8:c1:68:5d:1d:da:72:99:
         7e:2d:67:6b:07:d7:a9:f3:37:c4:54:05:13:cb:05:ff:d2:d3:
         b6:a9:90:83:84:b9:d7:2e:5f:fe:2d:e7:e7:f2:d6:c9:e6:d0:
         05:3d:54:e6:5c:4c:6b:d1:c9:ce:86:69:9d:f5:ed:eb:cb:6a:
         af:89:81:6e:3e:01:5d:cf:87:e7:06:f3:2a:c2:92:ff:f1:2e:
         6c:73:a7:19:7a:e2:6c:1a:95:04:a3:ad:34:bb:cf:2e:96:44:
         c5:25:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:13 2025 by rpki-client