Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File:                     tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier:          HOhcZ42eyeZ62mmOI20qCsnfjxbrNLNm6EJ/h6DwE5k=
Subject key identifier:   5D:39:AF:49:D6:56:32:DB:78:56:14:23:49:AE:95:D1:EF:84:82:B6
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer:       /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial:       0198D47338BE80F11B4C0C946105E320A823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number:          1208
Signing time:             Sat 23 Aug 2025 01:02:57 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:57 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:57 +0000
Files and hashes:         1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: zBRyRWPfaGZxJwBsCbDb5T8x9Q1bgL0AuWMsT2uhhJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:38:be:80:f1:1b:4c:0c:94:61:05:e3:20:a8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
        Validity
            Not Before: Aug 23 01:02:57 2025 GMT
            Not After : Aug 24 01:02:57 2025 GMT
        Subject: CN=5d39af49d65632db7856142349ae95d1ef8482b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4b:d7:4c:b0:b1:a9:dd:e9:34:bc:5f:a5:0b:
                    5b:e3:12:c3:35:7b:98:c8:3a:fa:4e:be:08:e4:32:
                    03:85:d9:24:d7:d3:4e:d8:be:97:b1:87:23:a9:24:
                    0c:da:9b:9c:28:be:e5:4c:90:4a:c8:74:a0:58:07:
                    60:f7:89:d4:f3:a5:5d:6d:28:fd:20:27:e9:3a:b4:
                    d1:dc:94:be:9c:c7:82:dd:ef:15:be:fe:e5:cb:b0:
                    a0:90:03:f7:3a:f8:90:a0:e2:0a:9b:b0:a2:f6:af:
                    b5:eb:30:ed:db:df:66:be:4a:6e:fe:44:0b:6b:ac:
                    f3:76:c9:10:bb:29:d8:50:23:8a:bc:2a:ec:50:a8:
                    b8:89:46:44:9b:7c:7c:95:6d:17:b9:c7:17:8c:a9:
                    f7:9e:c8:b1:11:ed:3a:92:54:5f:f0:c4:9e:17:80:
                    c7:aa:55:8f:32:92:b5:37:2b:58:ba:ec:c5:7e:ed:
                    07:b5:26:f3:37:f0:bb:a4:b1:94:03:53:4e:0f:6e:
                    ed:6a:83:20:78:e5:b8:6a:a7:dd:93:43:9e:82:6d:
                    3c:07:46:be:72:4c:ad:c6:bf:50:a0:dc:e7:d0:31:
                    8e:57:64:05:8b:de:db:37:84:47:7c:55:b0:d4:f5:
                    51:78:91:58:d8:e4:36:51:c8:90:2c:ba:70:36:6f:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:39:AF:49:D6:56:32:DB:78:56:14:23:49:AE:95:D1:EF:84:82:B6
            X509v3 Authority Key Identifier:
                keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2c:9e:21:70:38:51:22:51:46:cc:64:8a:f5:e5:a1:de:30:
         e4:a4:f1:a3:33:47:ae:5a:03:1a:dc:13:b3:09:18:f5:76:9d:
         4f:de:2a:d8:b7:96:82:5e:d3:20:b1:99:2a:ec:ea:11:6c:7d:
         4a:58:34:5e:3c:6e:52:ee:1a:e3:d6:db:f1:61:c5:74:d5:64:
         29:97:2b:7b:8d:8e:fb:1f:11:92:b3:28:ff:05:d5:41:60:fd:
         74:77:31:e0:6c:a2:b6:91:85:db:9e:20:dc:14:45:d9:bd:60:
         84:08:67:fb:ce:84:c3:98:d2:35:12:66:10:e4:99:4a:98:b3:
         da:d9:26:ee:1c:db:78:55:05:eb:67:d9:12:6b:a8:b9:10:e5:
         93:f4:cd:5c:b0:19:06:53:3a:ad:5b:59:99:70:dd:5a:ea:56:
         f4:f3:59:97:bf:8d:9d:70:87:14:70:23:f7:9b:ed:9c:ea:c2:
         1d:9a:68:bd:d3:55:cf:d0:fd:04:6f:e9:cd:4d:f0:b0:f2:a4:
         ad:41:27:c7:ea:d3:0f:e3:9f:eb:5c:91:4d:f5:44:f0:2f:71:
         17:0e:c0:fd:8d:32:94:dc:87:5d:99:75:8d:b8:8e:5f:36:01:
         f0:98:78:43:eb:5d:b3:1d:41:43:d8:de:5a:db:fe:d5:2e:35:
         23:5f:04:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:42 2025 by rpki-client