Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File:                     Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier:          7qRRLD/sskBooLGoy50azRwMec9Rrr/Dr+DU1oYbYXA=
Subject key identifier:   B0:46:A1:B0:92:52:C0:82:E5:9F:54:22:2F:92:30:81:D7:51:A0:74
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer:       /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial:       0198D4E0BF3064761F5BDE429177ABE53713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 03:02:35 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:35 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:35 +0000
Files and hashes:         1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: PmfoKcY+ROVQz+YEQbjSMbFpkxXm2xDmSHAFKqCp7jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:bf:30:64:76:1f:5b:de:42:91:77:ab:e5:37:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
        Validity
            Not Before: Aug 23 03:02:35 2025 GMT
            Not After : Aug 24 03:02:35 2025 GMT
        Subject: CN=b046a1b09252c082e59f54222f923081d751a074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:87:e2:39:ad:4d:75:5f:03:a3:33:ef:ba:
                    c8:9a:0a:aa:c9:87:16:86:a6:00:4b:44:18:46:7d:
                    52:26:46:5c:24:3f:e5:b8:0d:43:11:c1:60:27:63:
                    96:c7:ce:ac:ea:47:31:d4:64:f9:5c:46:ad:dc:32:
                    7e:a1:83:27:0c:4e:02:37:b1:88:ca:fb:c1:cd:f1:
                    46:ce:f6:15:64:08:41:44:a4:13:71:f4:fb:ed:55:
                    54:c5:3a:66:a2:17:b0:19:66:84:51:b4:de:ce:37:
                    0b:74:5c:3f:e9:97:cd:c9:b1:b7:11:22:63:18:e6:
                    1c:0d:93:00:65:3b:c7:f4:4e:9d:e9:df:83:ae:51:
                    63:70:f0:9e:ab:8a:32:b7:7a:aa:8a:a2:0e:59:47:
                    5c:84:a8:d6:83:ff:17:d5:85:bb:61:1a:d7:92:1f:
                    32:cd:65:be:b2:7e:b1:72:5d:37:ff:cf:b9:8f:3c:
                    a9:ea:85:02:7b:a2:f5:be:92:ba:9b:67:e7:2e:87:
                    84:f7:89:31:0f:2f:c9:1d:df:76:1e:0b:3c:9b:15:
                    23:9d:5f:6f:bc:d7:6f:22:5c:6b:57:33:e3:ff:38:
                    b5:01:e2:6c:b9:eb:80:e4:a6:7a:e2:dd:f8:4d:ac:
                    6f:40:0c:c6:e3:58:a4:4f:20:23:32:ca:03:8a:87:
                    07:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:46:A1:B0:92:52:C0:82:E5:9F:54:22:2F:92:30:81:D7:51:A0:74
            X509v3 Authority Key Identifier:
                keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:0a:31:c7:6a:ca:0f:fa:a6:bb:e7:9e:25:e0:3a:4f:80:
         74:cc:43:07:77:f1:e2:09:bd:b1:e6:cd:f8:98:41:46:55:ea:
         ab:99:ca:e5:da:b2:f6:5d:62:0a:32:e5:3d:8e:94:94:49:14:
         b6:57:20:be:50:54:d4:ad:68:fe:c6:7b:dc:a4:84:19:76:6a:
         32:04:a0:4c:64:d3:e7:8a:a9:53:de:d9:9d:3e:45:35:5d:d5:
         7b:05:dd:70:ce:3a:57:cc:02:82:4b:ce:c0:9a:bc:5a:6f:5d:
         28:1d:95:9a:e9:36:52:8a:6c:01:e6:cd:59:4b:bc:cb:4a:a6:
         c7:bb:64:59:e4:c0:2e:fc:11:34:ea:eb:7b:48:b5:a8:f8:1b:
         c3:e2:7b:2a:7a:f9:99:84:fa:82:ca:5e:03:2c:ef:6e:26:c9:
         f1:1a:f8:ff:61:f8:8d:e9:09:47:2e:8f:b4:09:50:27:7e:bf:
         e3:73:d4:41:07:c3:af:46:0f:9d:e1:a4:56:bb:73:86:43:b1:
         f1:9b:94:64:ca:84:05:2a:10:3a:df:da:2e:37:d5:4a:61:b9:
         60:86:1a:05:d6:50:5b:e7:ac:f2:87:0a:97:72:6e:37:b9:37:
         28:e6:c5:d1:0b:d7:a4:e9:bd:45:dd:81:9a:07:57:f8:57:e3:
         d6:35:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:07 2025 by rpki-client