Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File:                     TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier:          m3YdWyJnOQiZ8v8d5CITnV9YpcpiJcTlP8QlUnYGINw=
Subject key identifier:   01:E8:DA:C7:E0:56:55:E7:2E:5A:AE:D4:03:E0:F5:57:B4:D2:76:A9
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer:       /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial:       0198D54EA79684F3F76131D08FA9319AB6F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number:          1394
Signing time:             Sat 23 Aug 2025 05:02:38 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:38 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:38 +0000
Files and hashes:         1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: pTZczRyHdMwvHrJKlePGQwswlm38iUc4W+s49kdrGEw=)
                          2: j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa (hash: mypsPRsnwnV3Yo/ZoSy7EsoVz4ps6Bh9fIm4sESstXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:a7:96:84:f3:f7:61:31:d0:8f:a9:31:9a:b6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
        Validity
            Not Before: Aug 23 05:02:38 2025 GMT
            Not After : Aug 24 05:02:38 2025 GMT
        Subject: CN=01e8dac7e05655e72e5aaed403e0f557b4d276a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:80:07:6d:26:53:00:1c:8b:f0:b8:6d:12:
                    b6:ee:7e:92:36:c4:7a:5b:47:bd:a1:e4:be:37:05:
                    06:f7:53:f1:97:c9:81:26:06:e9:61:d4:63:51:39:
                    ab:c9:13:ae:fb:06:4f:2b:47:da:e8:5c:ab:89:9f:
                    9d:24:6a:71:4a:59:bd:39:0f:4f:bd:17:f6:7b:6c:
                    65:7a:24:59:98:47:0c:d1:1e:78:14:6e:1c:45:46:
                    80:62:97:00:e8:89:38:5b:ef:99:d6:c6:e9:6c:99:
                    4f:4a:3c:85:a9:49:65:fe:77:6c:4d:68:c2:8c:46:
                    c6:67:77:f7:30:03:81:36:cb:71:fa:e1:58:98:f0:
                    27:a9:b2:2f:65:34:8d:ce:e4:ae:75:03:8a:ad:2d:
                    24:a6:21:41:6a:d1:af:19:0d:99:f9:59:26:e4:88:
                    c8:01:8d:1a:74:55:47:56:8d:fc:f3:e4:8f:e0:15:
                    48:6c:17:e6:9e:6e:cc:e4:de:d4:09:0f:2b:47:e4:
                    88:27:c2:42:69:43:b3:a5:66:d5:01:cc:d9:ce:1e:
                    db:28:4a:cb:ac:8c:16:d0:0e:dd:e9:b5:d5:e3:79:
                    ea:23:98:82:b8:2f:51:eb:b6:1b:5f:85:eb:de:25:
                    c2:e9:2a:03:57:6b:cb:7c:80:ff:12:70:40:44:90:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E8:DA:C7:E0:56:55:E7:2E:5A:AE:D4:03:E0:F5:57:B4:D2:76:A9
            X509v3 Authority Key Identifier:
                keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e0:4d:00:3a:1a:3f:66:11:9b:05:69:8f:5a:c6:8d:07:76:
         7c:90:16:2c:28:c1:15:de:06:42:6d:83:65:c7:29:3e:86:24:
         84:fa:38:3d:57:7e:be:93:e8:ce:75:dc:95:9f:b0:b3:a9:7a:
         39:f0:8b:87:4f:30:89:b7:d0:cc:83:e7:10:76:61:d2:3e:b7:
         f1:a1:7a:61:16:6c:a2:d4:d1:7b:94:c7:71:ce:db:0d:50:cf:
         e0:f4:24:b4:c6:40:49:53:6f:8a:cd:b5:8e:63:0a:72:c8:1d:
         13:d9:24:57:00:e0:c4:97:69:3b:39:1e:8a:e7:a6:0b:e0:13:
         47:7f:e0:a8:3d:54:98:cd:df:eb:ae:d0:da:89:cc:b8:60:58:
         83:7b:8a:a0:4c:93:9b:c5:4c:4d:09:d5:96:cf:a0:fc:f6:5d:
         61:22:34:57:f3:93:48:75:40:b5:eb:4d:21:6d:1b:10:5d:d4:
         4a:fa:9f:da:5e:f2:1c:87:c1:28:a4:3a:66:23:39:b7:9b:ae:
         55:0a:da:ed:f8:5d:03:68:13:66:e3:3b:5e:68:83:f5:1a:f6:
         5c:cb:f2:ab:53:c5:2a:d6:7d:c5:9d:3e:e0:32:69:3a:bb:d9:
         34:bc:f4:34:61:7f:72:f4:0e:ec:23:9d:6c:18:9d:ac:26:c3:
         4d:44:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:46 2025 by rpki-client