Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File:                     TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier:          g3AYG96BkRt22lOSExDuYYpe54/r2GitJdcKU+oi6Uo=
Subject key identifier:   65:7A:8D:51:3A:53:D9:07:82:32:8C:69:F4:C3:6F:05:D8:D0:55:0E
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer:       /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial:       0199FC8FAF73D76FA4667A8674CDAA3CDFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number:          1674
Signing time:             Sun 19 Oct 2025 13:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:38 +0000
Files and hashes:         1: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: MyY4+HM23xk3sR/FG7MQDu6kf0QqsWxlPC5s58zRxYA=)
                          2: ilNe5KDmG0o6LZVjHMLtOGd-0DQ.roa (hash: JkEgQ36ayeHC4m0mo3MRV7E4gABrbKLeaaxVJdDM2eE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:af:73:d7:6f:a4:66:7a:86:74:cd:aa:3c:df:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
        Validity
            Not Before: Oct 19 13:01:38 2025 GMT
            Not After : Oct 20 13:01:38 2025 GMT
        Subject: CN=657a8d513a53d90782328c69f4c36f05d8d0550e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:0e:e3:37:a5:79:6e:63:66:57:99:2a:46:
                    4d:18:30:05:b7:cf:f3:f3:64:48:4b:3a:cf:20:f7:
                    91:44:ca:12:66:ed:0d:dc:1f:10:36:4c:86:04:d4:
                    f2:1f:d2:d8:ef:01:b5:1a:c5:1f:f5:2b:62:ef:ce:
                    74:de:51:9d:66:50:9e:71:f1:f7:7b:78:b4:e9:0a:
                    35:f3:04:45:9f:d7:bd:60:4d:ed:67:4f:c7:28:11:
                    6b:25:4c:01:cc:ab:59:e3:07:80:59:cc:96:c9:b6:
                    a4:3c:9c:67:99:3a:e1:ee:15:cf:8e:e4:59:79:5f:
                    dd:5d:1b:c3:71:eb:a7:18:17:43:23:4e:b1:59:50:
                    4e:21:20:0c:42:9f:6e:23:27:b0:63:13:ed:32:16:
                    a8:f9:f3:e1:60:74:32:4b:86:23:84:d0:29:c1:f2:
                    f0:b5:64:56:5c:59:70:0d:07:2c:18:af:a9:1f:c2:
                    b7:9a:45:29:1b:43:38:19:d2:be:7b:b7:43:0a:45:
                    07:e1:db:b1:b1:31:a0:11:2f:f1:bd:4d:02:98:b9:
                    0c:71:22:9d:e9:c3:64:a6:c3:18:1a:9e:1b:74:e0:
                    00:1f:8c:66:6f:ff:7b:96:34:a8:59:1c:52:01:d6:
                    ad:10:fe:85:67:6e:b5:e4:3d:23:c4:03:eb:88:0d:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7A:8D:51:3A:53:D9:07:82:32:8C:69:F4:C3:6F:05:D8:D0:55:0E
            X509v3 Authority Key Identifier:
                keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b7:3f:5a:c3:8d:1e:a9:48:fe:03:e1:f5:df:ab:54:13:bb:
         7f:83:35:ae:0b:60:f6:ce:ce:0c:3e:b8:26:f9:57:49:10:70:
         f0:f7:be:c5:f3:ec:2d:42:24:d7:38:45:7b:fa:a1:d9:00:a1:
         f0:22:22:2e:36:f3:15:fc:a1:b6:74:46:e4:c4:80:dc:82:6f:
         de:dc:ff:40:3a:aa:cc:36:02:38:54:ce:2a:bb:4f:be:ba:d2:
         5d:70:2d:5f:cf:9f:b0:e1:5d:44:d1:bb:89:34:e0:80:17:5a:
         9d:8d:60:b4:83:55:b0:8e:5d:62:57:5d:9a:e5:1b:cf:9c:3d:
         ad:35:4f:76:0e:78:b2:b1:2e:c0:53:ca:33:63:58:b7:9f:7b:
         59:65:df:b0:7a:0a:d0:18:9f:12:f5:4e:29:18:54:22:63:a9:
         4d:af:b5:36:02:9f:2a:59:80:1e:f7:4d:e9:b6:a7:43:30:1c:
         22:9e:b5:5b:21:dd:4e:f1:a1:85:df:76:14:d7:1e:2d:27:98:
         aa:b5:0b:0a:84:ba:c6:8b:4f:4c:6f:b1:b4:4b:23:4d:19:b8:
         77:e7:4e:7a:5a:6f:cb:d3:a9:14:f0:f3:47:d8:61:99:c8:f0:
         4f:07:a8:58:0a:2a:a2:da:4d:8f:bb:da:e0:66:44:b7:11:6b:
         d2:5f:36:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:37 2025 by rpki-client