Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
File:                     TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json)
Hash identifier:          u31bjOkNBXyKnANnzIv+x4FHCKQZPkCzBWjE6lcQC6k=
Subject key identifier:   E5:81:BC:2E:0F:DE:43:91:E9:D3:69:82:16:50:89:8F:3F:3E:10:16
Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
Certificate issuer:       /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Certificate serial:       0199FC214AB22C913CA2893C09FBABC0AFB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
Manifest number:          0B53
Signing time:             Sun 19 Oct 2025 11:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:04 +0000
Files and hashes:         1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: RGsgwZB5d86EODnefXbp4Qa7ze5JQD4aOjL5o4LBAl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:4a:b2:2c:91:3c:a2:89:3c:09:fb:ab:c0:af:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
        Validity
            Not Before: Oct 19 11:01:04 2025 GMT
            Not After : Oct 20 11:01:04 2025 GMT
        Subject: CN=e581bc2e0fde4391e9d369821650898f3f3e1016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:d3:05:08:c4:66:e0:f2:46:48:d0:8d:ee:
                    e5:fa:52:75:69:c2:8a:33:e5:7a:c9:f7:07:8c:1b:
                    e1:fa:42:a2:c0:ee:3e:ca:5a:d5:40:4f:2c:e2:23:
                    95:7b:27:2c:3a:62:28:80:06:39:91:7d:55:ed:68:
                    7e:b7:c8:c0:a0:11:d5:e2:70:a1:69:c5:88:03:72:
                    a4:7a:14:85:cd:51:34:46:2d:ef:9d:d7:fb:32:58:
                    df:4d:18:05:ea:2d:7e:06:0e:6d:c7:97:b5:9f:9f:
                    86:d4:1e:51:93:29:7f:58:e3:af:eb:73:cb:cb:b5:
                    74:0b:be:f5:2d:f5:81:9e:d0:4e:9e:ae:6c:c7:93:
                    10:83:1b:f1:62:96:b4:61:79:d1:ec:17:2e:cf:e8:
                    ef:f8:93:c9:1d:7b:5b:c9:1b:be:5a:a6:5d:b4:ac:
                    ce:f5:b7:a5:77:6e:35:d5:0b:06:8b:ea:d4:6d:6a:
                    12:c0:18:19:53:52:c8:11:78:d0:d3:0e:a6:32:ec:
                    c0:81:4a:68:31:26:c6:ec:3e:24:d0:d9:f4:87:60:
                    eb:cf:ae:1e:86:e6:57:19:db:bd:92:e2:4d:fd:15:
                    52:29:95:98:46:46:ef:99:ca:0c:44:83:6b:71:9b:
                    b0:5e:29:88:a3:ad:df:ff:23:12:d5:bd:b8:7a:99:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:81:BC:2E:0F:DE:43:91:E9:D3:69:82:16:50:89:8F:3F:3E:10:16
            X509v3 Authority Key Identifier:
                keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:89:83:bc:eb:ab:b8:39:90:27:b6:e6:92:25:16:31:5b:95:
         a7:0e:d3:be:dc:23:37:48:56:b1:b8:cb:7c:06:67:a8:f7:4f:
         08:03:18:a4:83:35:47:0d:f2:20:ca:aa:b0:8d:05:70:57:dc:
         d7:d8:93:6f:11:13:b7:e1:c4:46:70:97:81:fc:4a:65:80:d0:
         e0:71:9d:05:ea:8f:25:28:17:aa:25:16:73:7c:da:8b:c9:0e:
         09:b4:7d:40:29:52:03:9b:5d:fe:92:49:e6:e1:f3:d1:92:da:
         c1:75:f6:0a:0f:5d:a1:c6:6b:de:10:fa:c2:a2:d5:5b:58:4a:
         17:86:7b:a1:fa:75:b8:6c:32:40:b5:e4:68:81:68:e8:bc:58:
         7f:4b:96:0f:c5:09:37:b7:c5:91:fc:61:53:f0:9f:81:04:a1:
         fd:53:d6:90:3c:23:15:09:f5:63:36:65:d9:0c:c2:3b:42:dd:
         29:69:67:46:c2:fb:28:a6:b1:b7:9f:0f:36:f1:14:87:c7:54:
         09:da:e3:ab:e6:3b:e1:eb:cd:e9:89:d0:25:d0:13:3f:7d:38:
         7a:e9:62:b6:0c:d4:d5:b7:99:e7:89:63:3d:a7:86:1b:c4:56:
         03:f9:e5:2f:10:26:a7:94:c8:60:2a:e6:26:5a:50:d8:43:07:
         e4:98:c7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:17 2025 by rpki-client