Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File:                     CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier:          FMOnClN56HZBQG0c/frC7RpyReS9A0vDjQyZjNhNgjA=
Subject key identifier:   A2:52:CD:65:C5:0A:62:7F:4B:72:FD:85:58:C4:0E:C2:70:85:73:16
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer:       /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial:       0198D5F1DC4AEB3C8BAAEE600166C6E21E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number:          1044
Signing time:             Sat 23 Aug 2025 08:00:54 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:54 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:54 +0000
Files and hashes:         1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: v+sd7fFfwwdINZObsK7NGIZxC9TtkxM/aj0+9TetOfM=)
                          2: p9dm9G2iCzsw8k2RDOLA-aoAnro.roa (hash: RaSFGXIJc/dpz2m+EsrfJ2ccZ5vMg1R8ZkPmnS2txJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:dc:4a:eb:3c:8b:aa:ee:60:01:66:c6:e2:1e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
        Validity
            Not Before: Aug 23 08:00:54 2025 GMT
            Not After : Aug 24 08:00:54 2025 GMT
        Subject: CN=a252cd65c50a627f4b72fd8558c40ec270857316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:e8:d7:4c:b6:03:52:f2:f3:46:6d:07:68:
                    18:86:61:d5:1f:c8:4a:b6:c7:4f:99:9f:45:a6:d9:
                    7a:d3:fb:fe:39:bf:c0:0b:ae:ca:8d:b1:27:5c:91:
                    fb:6f:75:d3:a2:d8:91:a7:b6:7c:dd:36:1d:29:d0:
                    cb:c5:7d:2a:27:64:4e:91:99:6d:29:ac:ba:e1:6e:
                    97:c4:3c:a3:d3:50:c1:18:45:6f:03:16:b0:24:43:
                    ae:60:f4:b2:06:59:5d:34:ad:97:4e:d3:dc:53:62:
                    9e:09:54:e7:d5:b4:23:be:af:0a:4f:1e:c3:71:44:
                    c2:19:45:ac:5b:f2:ac:e3:e2:36:7c:d3:04:0b:8f:
                    b5:3d:a4:a2:2a:50:6b:4a:bc:76:69:96:09:db:b1:
                    8f:d0:6a:e2:f2:2d:96:3e:0e:0a:eb:80:a2:fd:d5:
                    81:94:c8:0b:a0:d4:41:c7:c1:84:ce:3f:47:e6:fd:
                    98:b5:a7:9e:3c:8a:66:20:1c:13:43:e4:fa:99:05:
                    a8:c3:04:b7:ed:e3:77:66:48:84:a9:d1:4b:15:2a:
                    95:41:4c:da:a3:fe:f1:69:bd:5f:e0:10:7c:3b:32:
                    d5:42:68:84:5d:71:34:3c:54:ac:45:3a:b3:21:c0:
                    e7:ab:05:c9:27:de:35:5c:b9:3b:93:b8:5b:2b:17:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:CD:65:C5:0A:62:7F:4B:72:FD:85:58:C4:0E:C2:70:85:73:16
            X509v3 Authority Key Identifier:
                keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:59:72:d5:cc:52:c4:f3:45:e3:11:98:0e:8a:2e:70:37:f8:
         42:2c:50:39:2a:2e:e5:8b:ae:d2:ac:d0:61:67:cb:d4:2f:0d:
         73:87:0b:7c:2d:10:51:8f:ee:07:e3:91:c3:8b:60:3b:05:45:
         a7:41:e8:e8:10:41:91:22:87:ff:7c:1c:2e:7f:68:7d:e5:81:
         d6:3c:3a:84:92:4d:b8:ff:e5:e7:5a:3b:ec:16:91:a7:bb:4e:
         73:9f:6a:c4:3f:21:b1:12:0c:6c:5b:42:4d:86:07:83:12:a0:
         b3:89:27:40:ea:1e:ec:5c:e9:bf:ae:b0:dc:3f:f4:66:d3:36:
         6e:8b:2b:aa:77:8c:15:9d:92:f1:0c:7c:fc:2e:4b:a6:65:5b:
         50:a3:6a:52:8a:ad:b2:47:1a:c2:0e:04:c0:dd:7c:44:ed:6d:
         6d:70:ba:7c:83:e1:a5:93:91:fe:11:d5:c5:c7:39:67:6c:93:
         90:27:b0:12:ec:2d:51:4c:7d:c5:37:db:36:31:f8:1f:74:0c:
         7f:c3:4b:5d:0c:3a:e4:b3:20:8a:5b:a7:38:d2:c6:3d:8e:af:
         d8:cf:09:b2:c3:1e:04:54:04:15:13:26:a8:d2:90:1d:96:8d:
         86:04:38:14:4d:93:06:eb:9c:a5:db:d7:20:db:17:88:61:c5:
         f5:04:75:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:19 2025 by rpki-client