Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
File:                     TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json)
Hash identifier:          8DUopDBIk/t5siFLUssrpkiz4dWzPfx/PxFr4F4XEJs=
Subject key identifier:   27:E1:E2:E2:BF:BF:86:B5:0B:F4:52:B2:16:67:C2:B0:0F:2E:14:1A
Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
Certificate issuer:       /CN=4c461f837868cbeaca17aef486784f61f49243ed
Certificate serial:       0197B70EB5C0495E55FB4709969147487BAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
Manifest number:          1544
Signing time:             Sat 28 Jun 2025 15:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:23 +0000
Files and hashes:         1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: fEOoBEdzZzj+UtNZuehvdU8Wqe1eDn2T/MfSP4yL5n4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:b5:c0:49:5e:55:fb:47:09:96:91:47:48:7b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed
        Validity
            Not Before: Jun 28 15:01:23 2025 GMT
            Not After : Jun 29 15:01:23 2025 GMT
        Subject: CN=27e1e2e2bfbf86b50bf452b21667c2b00f2e141a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cd:98:ab:d2:ad:aa:32:77:c5:73:04:c6:05:
                    be:21:0d:57:ab:a6:a4:7b:00:41:31:1f:a0:7a:e2:
                    bd:35:fe:77:94:e4:13:64:9c:90:ce:2d:1e:ab:18:
                    73:2b:b7:b7:97:8a:9b:3f:d9:eb:01:fb:29:f6:4c:
                    dc:ee:57:8a:d0:23:3b:56:74:c4:aa:b4:3a:a1:d8:
                    cd:5e:4b:fe:bf:ca:67:cb:5a:bc:49:38:6b:42:bf:
                    7c:40:f4:c5:6a:75:c4:fe:9c:40:91:84:ff:e6:31:
                    a3:c1:3a:48:0f:8b:0c:35:07:45:9e:62:fb:d2:23:
                    e2:e0:6a:c8:bb:92:38:93:30:be:94:6b:10:79:62:
                    e2:39:08:0d:dd:26:3d:e6:b7:f4:1a:6a:fc:78:30:
                    a7:b5:6c:01:ed:cd:b5:90:23:b7:b9:e0:c8:d0:b1:
                    23:25:03:01:56:6b:48:31:91:04:b6:bf:93:41:c4:
                    a7:55:ea:e3:43:93:b2:ef:3a:fd:6a:d1:2b:09:3c:
                    0b:10:ae:a0:23:bc:12:e3:bb:aa:2a:4a:0e:30:75:
                    6c:2f:83:d0:d9:3d:6c:91:7a:ed:76:01:f0:7d:4c:
                    c2:ef:f6:c0:ba:9e:82:36:64:d7:ed:af:96:4b:73:
                    80:ca:cc:5c:2c:06:8c:3a:92:72:50:50:58:2c:74:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E1:E2:E2:BF:BF:86:B5:0B:F4:52:B2:16:67:C2:B0:0F:2E:14:1A
            X509v3 Authority Key Identifier:
                keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8a:5c:49:ce:82:ca:1f:25:5c:5f:69:dc:e9:0e:03:62:8c:
         f9:eb:ab:0f:4b:f1:a6:97:d4:99:84:1f:1c:bf:b2:08:cc:62:
         ee:97:1f:48:8d:f4:bf:bf:92:b0:8a:f1:8f:77:8c:3a:6f:27:
         15:76:a2:3a:50:52:aa:55:f4:91:5e:3f:6c:e7:67:cc:25:6f:
         6d:35:e9:e2:d6:85:9e:be:f0:d0:b7:9f:3e:99:2e:eb:56:8a:
         f8:52:7c:12:50:ae:90:e8:19:fe:5b:a5:69:5b:c4:e8:1c:f9:
         5d:0b:bd:f1:1d:f5:55:3c:ed:b5:9d:3f:16:a9:fb:ee:3f:9a:
         ee:18:39:00:6f:cb:0a:8d:7d:c8:06:81:83:06:89:9b:52:24:
         57:40:48:ff:0d:c1:d8:d4:43:8e:f8:e4:e9:89:0b:af:c2:d7:
         43:5c:77:7f:6b:d5:f3:f3:35:29:00:77:47:fe:1c:10:87:fb:
         47:42:a1:03:17:d0:18:1a:f0:28:ea:5d:e2:2d:e5:17:8c:86:
         bb:1e:67:a7:d7:4b:60:92:25:a7:0d:96:28:cc:39:b0:c9:b5:
         83:69:fd:97:04:69:a6:c3:4f:d8:65:2b:69:c4:18:dd:3b:3d:
         ef:4b:9a:12:9e:e3:e2:c3:b1:b2:e7:4c:4b:c1:ca:2c:6c:52:
         97:1f:19:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:35 2025 by rpki-client