Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
File:                     TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json)
Hash identifier:          hbHmD9DFFJkk6O2IyXMUnU7xNwalPQEgAq0ojDMtyZc=
Subject key identifier:   21:34:94:7C:46:30:82:89:D8:3F:EC:DD:37:40:C7:D1:80:79:75:C1
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Certificate issuer:       /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial:       0198D583CC90C46EB4BADE11705054B6C6F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
Manifest number:          158C
Signing time:             Sat 23 Aug 2025 06:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:41 +0000
Files and hashes:         1: 04QV-ve6N6q1z5keiSip22HWq-U.roa (hash: oA0QfyCg1GT0LK/v+pk71hC3hYPHoYN/Zjd1n/b4oLE=)
                          2: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: TEHItY+iafevAYbWX7p3e2lglBriPVKJWDUIsi2MUE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:cc:90:c4:6e:b4:ba:de:11:70:50:54:b6:c6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
        Validity
            Not Before: Aug 23 06:00:41 2025 GMT
            Not After : Aug 24 06:00:41 2025 GMT
        Subject: CN=2134947c46308289d83fecdd3740c7d1807975c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:fe:71:c3:7e:b7:a8:8c:e7:03:b0:f0:c9:
                    06:fb:31:18:b9:ce:4d:41:64:ed:04:b4:02:08:a1:
                    2e:61:91:77:f5:2f:e7:58:6f:92:c4:a5:dc:13:ce:
                    6f:a6:c8:3a:05:cb:f1:75:8b:fc:e7:a1:89:73:08:
                    6b:38:8b:3e:41:a4:b0:ff:98:09:fb:eb:1c:ff:f1:
                    bd:38:80:45:69:76:ed:25:dd:9d:99:99:a6:28:71:
                    55:a8:01:95:9a:09:37:66:c6:a5:2b:90:b0:12:bc:
                    9f:f6:0e:73:87:6c:85:b3:30:32:7e:f0:fc:01:11:
                    15:49:cd:ad:d8:14:c3:2a:98:0e:db:93:9e:67:53:
                    6e:1a:57:86:00:59:66:d6:fa:81:05:64:66:61:50:
                    0a:5b:d8:2d:da:ce:4f:b1:cd:3d:a9:ad:ee:cd:0e:
                    5f:6c:76:ff:dc:0d:4c:fb:59:3d:c3:2e:37:3a:b0:
                    8f:4d:bd:52:74:60:2d:37:9e:bd:c0:a6:1c:78:0c:
                    f2:49:a0:1e:46:94:7f:3b:61:46:18:23:9d:20:00:
                    69:e7:60:0b:f2:7a:88:cc:d7:b4:b0:95:f1:bd:9b:
                    d2:38:06:0a:a9:ad:18:60:af:cb:ea:73:80:51:c9:
                    56:d5:da:78:56:d3:5e:65:94:21:ed:30:6a:9f:87:
                    01:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:34:94:7C:46:30:82:89:D8:3F:EC:DD:37:40:C7:D1:80:79:75:C1
            X509v3 Authority Key Identifier:
                keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5b:4c:ec:d1:c7:78:0d:f9:d2:02:92:10:16:b1:f1:8f:c0:
         c6:eb:35:51:c4:6c:11:d8:7b:19:ae:07:f0:38:a0:4c:4b:ca:
         c4:74:68:ca:31:d4:94:7c:5f:0c:d6:0b:c0:a7:02:6a:a9:01:
         e3:83:09:76:c2:f2:b4:79:19:20:46:1f:09:41:1a:01:3b:53:
         69:5c:82:e0:b0:d1:15:98:19:0a:cf:c4:45:67:c2:ac:80:0e:
         f6:73:ef:cc:73:91:1c:03:f3:20:38:2b:3a:c1:01:bc:16:9e:
         0e:e4:b9:45:25:2a:d6:4f:d0:81:4c:52:a4:6a:c5:c6:a6:00:
         36:c4:06:05:5a:19:db:7f:15:de:de:e0:e5:30:84:86:72:d7:
         bc:06:fb:f2:5b:15:87:14:6f:72:01:90:38:a5:17:19:6f:75:
         0e:9f:6a:02:3e:ca:f4:0e:b5:fe:cf:d6:8c:56:78:82:ee:04:
         68:63:da:d7:bb:17:38:e8:e5:36:68:f2:0f:fb:ee:67:c3:45:
         4c:a0:b1:53:14:15:51:a0:5b:60:6f:c5:d7:1f:55:1e:fa:e0:
         15:2f:3f:5a:86:7f:bb:56:40:dc:af:a9:4b:57:f8:7f:9c:1a:
         c3:67:36:59:8a:fb:96:0b:59:e6:3e:89:0b:ca:18:e6:da:05:
         fc:a7:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:04 2025 by rpki-client