Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
File:                     tkDbwv_PXWNFicBEAV1xdcuv8-0.mft (raw, json)
Hash identifier:          FQ9gVmQAcs4bzXVVS7mUqu7iNZ9D5/qwghoG2/hVKJQ=
Subject key identifier:   BD:73:49:BE:D2:02:71:86:F9:8D:0A:7C:A9:88:7C:E9:06:38:DD:16
Authority key identifier: B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED
Certificate issuer:       /CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed
Certificate serial:       0199FAA129E8DFF76ED517199130F580B714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
Manifest number:          1180
Signing time:             Sun 19 Oct 2025 04:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:29 +0000
Files and hashes:         1: tkDbwv_PXWNFicBEAV1xdcuv8-0.crl (hash: pn2eDMWH9gurxj3aSSDw4hpenPhDoSPYZXWf0nxV72E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:29:e8:df:f7:6e:d5:17:19:91:30:f5:80:b7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed
        Validity
            Not Before: Oct 19 04:01:29 2025 GMT
            Not After : Oct 20 04:01:29 2025 GMT
        Subject: CN=bd7349bed2027186f98d0a7ca9887ce90638dd16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:2b:c7:a8:97:47:4a:82:11:98:52:e6:19:
                    ce:40:ab:ff:58:32:6f:6f:46:ed:c0:de:54:af:46:
                    c6:b4:80:0b:82:0d:d7:f3:b6:2c:c5:19:29:e4:12:
                    75:03:47:ed:bd:13:ef:15:20:44:62:5a:07:ce:ad:
                    aa:f9:60:52:4a:e8:8b:67:f6:d0:a0:e6:53:7c:65:
                    f7:25:5f:4d:b1:3c:bf:76:6e:2c:08:02:05:44:fd:
                    f6:be:2f:aa:fd:d9:aa:93:fb:b7:ab:25:dd:00:c8:
                    65:20:fa:06:8d:75:43:28:34:cb:18:52:3f:c6:3e:
                    fc:4b:2c:e2:4f:62:c5:b3:84:49:50:ba:f4:3c:c4:
                    6c:3f:87:e1:07:ee:e2:69:0e:72:bc:bb:28:cf:79:
                    f4:5a:3d:bf:31:6c:66:fe:f4:61:11:b2:e3:9a:9f:
                    a6:db:f2:0a:de:66:91:90:21:67:79:9d:10:45:4e:
                    b5:35:68:1c:e5:8d:41:de:72:7e:3d:49:ef:1c:16:
                    5d:b0:d1:b7:84:00:22:aa:cc:fe:77:9b:ff:a1:81:
                    a3:6e:2f:3d:8d:1a:c4:85:27:42:9b:e8:33:7c:eb:
                    1d:de:cf:bb:cc:ec:82:db:7d:dd:05:2f:a1:3d:11:
                    ce:a6:7e:86:0b:01:d6:f8:b7:96:bd:9b:48:08:1e:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:73:49:BE:D2:02:71:86:F9:8D:0A:7C:A9:88:7C:E9:06:38:DD:16
            X509v3 Authority Key Identifier:
                keyid:B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:99:fd:96:0b:99:42:62:b5:9b:50:f9:b6:44:0c:11:bf:85:
         13:0c:6b:84:2d:d1:d0:62:85:6b:13:45:fb:5c:5b:7c:fa:74:
         d1:44:f3:7f:7e:5f:f2:3e:c4:e5:f5:86:8d:69:f1:7e:75:e0:
         c0:8d:63:11:9d:f7:b7:29:e1:84:2b:27:87:9c:0f:d9:dc:95:
         a9:8f:af:54:ca:7e:ff:8d:f8:75:84:fe:0a:fc:74:f4:b9:0d:
         09:3e:9f:65:15:5c:c9:4f:05:24:43:8c:fd:04:a3:8c:ec:61:
         5e:a5:99:8d:19:e2:6b:b4:49:1d:1b:ab:bc:52:9e:b6:6d:92:
         be:b1:d6:5d:bc:be:51:f7:56:9f:1d:4a:7b:ed:13:8d:08:4a:
         94:af:19:51:d0:66:fa:f8:df:53:a8:7e:6c:7d:64:7d:73:b3:
         cb:60:9d:95:10:a3:85:5d:16:ca:d8:5c:97:2e:cf:d4:b2:b4:
         cf:12:e6:50:80:0b:06:08:69:2e:c9:64:f6:03:6b:14:5f:d7:
         f2:b6:f2:35:67:a1:db:7e:59:3c:5c:45:53:7c:ee:78:ec:ff:
         2f:dd:5e:01:ec:2d:e0:7e:05:44:8b:18:d5:e2:5a:b5:d8:ea:
         6b:a3:d5:0f:84:83:b8:2d:d9:74:91:15:0f:51:99:6e:d6:54:
         41:0b:70:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oSno3/du1RcZkTD1gLcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NDBkYmMyZmZjZjVkNjM0NTg5YzA0NDAxNWQ3MTc1Y2Jh
ZmYzZWQwHhcNMjUxMDE5MDQwMTI5WhcNMjUxMDIwMDQwMTI5WjAzMTEwLwYDVQQD
EyhiZDczNDliZWQyMDI3MTg2Zjk4ZDBhN2NhOTg4N2NlOTA2MzhkZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnErx6iXR0qCEZhS5hnOQKv/WDJv
b0btwN5Ur0bGtIALgg3X87YsxRkp5BJ1A0ftvRPvFSBEYloHzq2q+WBSSuiLZ/bQ
oOZTfGX3JV9NsTy/dm4sCAIFRP32vi+q/dmqk/u3qyXdAMhlIPoGjXVDKDTLGFI/
xj78SyziT2LFs4RJULr0PMRsP4fhB+7iaQ5yvLsoz3n0Wj2/MWxm/vRhEbLjmp+m
2/IK3maRkCFneZ0QRU61NWgc5Y1B3nJ+PUnvHBZdsNG3hAAiqsz+d5v/oYGjbi89
jRrEhSdCm+gzfOsd3s+7zOyC233dBS+hPRHOpn6GCwHW+LeWvZtICB6L1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1zSb7SAnGG+Y0KfKmIfOkGON0WMB8GA1UdIwQY
MBaAFLZA28L/z11jRYnARAFdcXXLr/PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGtEYnd2X1BYV05GaWNCRUFWMXhkY3V2OC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi83Njc2OGMtY2Q3NS00NmE5LThkNjUt
NmNiYjc3YmFhMDJkLzEvdGtEYnd2X1BYV05GaWNCRUFWMXhkY3V2OC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi83Njc2OGMtY2Q3NS00NmE5LThkNjUtNmNiYjc3YmFhMDJk
LzEvdGtEYnd2X1BYV05GaWNCRUFWMXhkY3V2OC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZn9lguZ
QmK1m1D5tkQMEb+FEwxrhC3R0GKFaxNF+1xbfPp00UTzf35f8j7E5fWGjWnxfnXg
wI1jEZ33tynhhCsnh5wP2dyVqY+vVMp+/434dYT+Cvx09LkNCT6fZRVcyU8FJEOM
/QSjjOxhXqWZjRnia7RJHRurvFKetm2SvrHWXby+UfdWnx1Ke+0TjQhKlK8ZUdBm
+vjfU6h+bH1kfXOzy2CdlRCjhV0Wythcly7P1LK0zxLmUIALBghpLslk9gNrFF/X
8rbyNWeh235ZPFxFU3zueOz/L91eAewt4H4FRIsY1eJatdjqa6PVD4SDuC3ZdJEV
D1GZbtZUQQtwAw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:45 2025 by rpki-client