Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File:                     TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier:          xIu7WLJ3E2gng+Vtby/kGvcv23AkwSwhFeO5a1/sXvU=
Subject key identifier:   97:83:C0:BE:50:9B:FC:78:41:84:28:FB:F7:1B:B4:13:41:9A:62:32
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer:       /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial:       0198D58391B3BF94D62A299AA21BF6D09F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number:          0A39
Signing time:             Sat 23 Aug 2025 06:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:26 +0000
Files and hashes:         1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: pPhs2rSuTH3wq944QXkAhL09iXF7RluOY6djYYThpns=)
                          2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:91:b3:bf:94:d6:2a:29:9a:a2:1b:f6:d0:9f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
        Validity
            Not Before: Aug 23 06:00:26 2025 GMT
            Not After : Aug 24 06:00:26 2025 GMT
        Subject: CN=9783c0be509bfc78418428fbf71bb413419a6232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:83:19:13:23:56:80:fd:9f:cf:b8:2d:8e:92:
                    cc:e8:1c:31:5b:01:c6:63:d1:8c:ee:0a:d4:98:f0:
                    89:77:65:12:02:74:98:c8:97:61:56:83:fe:d7:59:
                    32:f1:c7:58:c1:ce:e5:09:1d:b7:f7:3b:3c:72:bc:
                    9f:59:dd:bd:1e:82:a7:00:f2:51:e4:d9:72:66:0a:
                    f2:c4:8f:35:04:36:ae:d2:ba:bb:21:b6:a4:8d:e4:
                    12:ae:d8:ae:45:e5:70:cc:e1:46:d5:57:53:69:fb:
                    59:56:eb:ed:02:b3:4c:db:63:03:45:e6:e2:0a:a2:
                    af:81:8d:09:4c:d8:81:8c:fd:44:7b:5e:c4:81:ed:
                    ce:b4:83:cf:c8:d9:02:45:c7:be:b7:f0:1f:3c:c2:
                    d9:d5:63:0f:d3:5e:8b:a6:25:31:27:9e:bf:d1:8f:
                    41:52:4a:24:84:ed:0b:50:b1:5e:f6:b1:43:ec:c5:
                    2b:32:13:ac:e9:04:e9:8e:be:12:50:e1:df:09:76:
                    80:c3:a0:a5:0c:c8:d2:16:2d:15:10:c2:10:fb:4d:
                    8c:f0:95:cb:7f:fb:0d:7c:95:d6:51:97:1c:ad:17:
                    e6:48:8f:f7:f2:c0:8d:32:8e:3e:6c:93:b3:af:fb:
                    1b:d2:85:25:7c:06:e8:b5:eb:ef:3d:04:9b:19:51:
                    47:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:83:C0:BE:50:9B:FC:78:41:84:28:FB:F7:1B:B4:13:41:9A:62:32
            X509v3 Authority Key Identifier:
                keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:68:0d:dc:22:15:80:da:0d:d6:b4:f8:3b:cb:8a:d3:67:ed:
         ec:47:37:af:d9:4e:e7:ff:27:0e:33:47:dc:71:f8:79:d0:00:
         f6:e5:99:2a:5c:cc:11:64:5c:ac:58:49:83:c8:70:e0:6c:5d:
         61:c2:43:4d:61:61:b9:9c:99:70:73:2f:64:a3:6e:fa:95:47:
         92:87:ea:19:0b:78:30:0d:56:40:eb:f2:6d:d7:df:a7:81:ea:
         17:be:0f:52:0a:05:d6:c5:58:52:79:c5:bb:2f:37:18:07:ee:
         8d:af:b4:74:09:90:0c:ec:4c:d4:7b:90:4b:ce:75:b9:87:be:
         c6:1a:d9:a4:dd:1f:96:35:b4:04:55:04:35:ad:25:a9:2d:e9:
         85:7a:9e:2e:e7:90:bd:0a:79:7f:8f:81:08:3f:8f:db:29:fc:
         63:98:f3:9b:c1:bf:07:fc:26:57:0e:20:4c:65:a0:be:2d:a7:
         44:cc:6a:e9:e0:a1:e8:78:60:06:20:ff:d5:bb:2a:a6:3d:e6:
         e6:29:ce:e1:78:67:5e:05:eb:67:22:4a:1b:b4:cf:54:82:45:
         6f:ce:df:ac:85:a2:35:51:1c:70:5d:e9:05:2e:0a:a7:85:1d:
         0e:81:8e:a2:88:2b:ca:07:68:1c:b5:4d:ae:16:61:59:34:b6:
         e0:0c:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:34 2025 by rpki-client