Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
File:                     TgyY_GY_7jZUpy9MCBRhxBYc84E.mft (raw, json)
Hash identifier:          FAutqNHlgp8kKuQcrJ2i1tT0voFpE3ECAwG8AwFc7X4=
Subject key identifier:   E9:F7:72:AF:8E:FC:62:86:0E:2E:38:AB:EE:D5:9A:AA:A2:22:44:AB
Authority key identifier: 4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81
Certificate issuer:       /CN=4e0c98fc663fee3654a72f4c081461c4161cf381
Certificate serial:       0198D5BC107D8FE0CA0ADA541E1D29EC2B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
Manifest number:          1407
Signing time:             Sat 23 Aug 2025 07:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:08 +0000
Files and hashes:         1: TgyY_GY_7jZUpy9MCBRhxBYc84E.crl (hash: 4Zua4SoLhex7Y0dUkImY/5JU3xU1AENgzMhF4Taj0F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:10:7d:8f:e0:ca:0a:da:54:1e:1d:29:ec:2b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0c98fc663fee3654a72f4c081461c4161cf381
        Validity
            Not Before: Aug 23 07:02:08 2025 GMT
            Not After : Aug 24 07:02:08 2025 GMT
        Subject: CN=e9f772af8efc62860e2e38abeed59aaaa22244ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:76:4f:99:f3:c3:f4:3b:eb:61:f2:64:3f:
                    05:1d:6f:34:50:e5:8e:11:08:1e:a7:c6:06:d9:bc:
                    55:22:7e:bd:ba:9e:e1:18:90:cb:c4:50:75:c9:0a:
                    01:fe:7e:ed:cd:cd:9e:8b:fa:ee:41:45:b6:de:7a:
                    d6:98:50:10:6f:37:7c:d7:ee:52:18:42:15:97:52:
                    2b:bd:e4:55:50:ed:69:a9:9d:48:20:d5:69:b2:f3:
                    83:19:80:73:b7:72:8d:04:65:df:92:70:4e:58:05:
                    1a:74:29:51:18:a6:e8:0e:5d:78:17:20:95:4a:c2:
                    20:85:88:6f:7a:8e:2f:1c:82:69:88:0a:61:28:a1:
                    bb:3d:a8:ac:c9:ec:6a:af:ed:f3:71:85:95:42:c1:
                    9e:bc:e0:c1:bb:5b:be:d9:38:1e:27:67:a0:90:c8:
                    3d:d2:e7:7d:68:42:24:ab:c5:cd:14:c6:c1:29:6f:
                    c8:63:53:8b:6b:cc:eb:dd:17:63:d8:90:66:c8:80:
                    8a:14:80:ba:e2:03:61:27:96:f8:29:53:d1:96:5a:
                    37:ac:e3:4d:4c:32:5b:6c:b0:4b:22:7c:f7:8f:fb:
                    16:2b:7a:54:7a:37:54:a5:f3:42:18:96:d2:ad:57:
                    d7:41:75:87:4a:5a:51:f6:76:b7:d6:68:80:d9:dd:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F7:72:AF:8E:FC:62:86:0E:2E:38:AB:EE:D5:9A:AA:A2:22:44:AB
            X509v3 Authority Key Identifier:
                keyid:4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:44:80:35:a6:fd:36:8f:b0:80:b5:6f:c8:ac:ae:50:aa:b6:
         0b:75:92:28:bb:c5:a2:d0:1c:73:b8:ea:b5:37:23:0b:b5:a8:
         43:65:cd:ae:33:c6:7f:53:1a:bd:71:cc:26:6d:6e:e2:65:db:
         c8:1b:d8:86:c8:1e:1c:c4:b0:b3:48:fd:d0:d9:53:2f:8b:4e:
         fd:24:2c:bf:df:6f:e8:b9:24:80:1d:63:6c:11:a3:5a:54:aa:
         2a:f5:52:de:32:3b:bb:dd:9f:79:9c:a7:20:ab:f4:02:38:6c:
         df:0e:ca:47:3d:b5:29:a2:d2:03:76:c8:dc:6c:2c:92:99:c5:
         15:62:63:d9:e2:ac:d3:7d:6a:9f:2e:cb:8b:95:a8:81:d8:f3:
         46:05:ac:a3:1d:75:cc:9c:7c:5c:6a:16:6c:19:f1:18:62:ba:
         a9:09:74:ed:7c:d1:23:39:e5:96:fa:9b:f7:65:4d:0e:b9:01:
         b2:48:6c:93:ce:31:5b:54:e7:fc:1c:ba:88:6d:3d:f3:fa:36:
         3b:3a:99:e4:3d:da:1c:54:bd:75:24:31:ff:bf:0e:7b:e1:5e:
         88:fa:a9:57:25:22:91:58:25:44:ab:32:29:31:0b:a8:f4:f0:
         d7:a2:96:0a:b5:a1:d2:8b:ca:fb:25:48:07:e2:f7:4f:e4:d6:
         0c:98:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:20 2025 by rpki-client