Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
File:                     tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft (raw, json)
Hash identifier:          Mbu2949ZxsQnn3oJOsq7XEXEkHYfm+tdpyFBZHtpKRM=
Subject key identifier:   FB:02:52:E9:2C:7A:74:4A:FF:F7:2D:B7:C8:50:FC:87:05:88:7B:82
Authority key identifier: B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
Certificate issuer:       /CN=b605d1901c571100b89a5c48c3a7065784157196
Certificate serial:       0198D4E0A28911BCC34322D4901D1BED2906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
Manifest number:          08AE
Signing time:             Sat 23 Aug 2025 03:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:28 +0000
Files and hashes:         1: tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl (hash: HNuTT3784hmVoRRxH7Vz/cTq//MaeMTA8E+9Zmvcemk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:a2:89:11:bc:c3:43:22:d4:90:1d:1b:ed:29:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b605d1901c571100b89a5c48c3a7065784157196
        Validity
            Not Before: Aug 23 03:02:28 2025 GMT
            Not After : Aug 24 03:02:28 2025 GMT
        Subject: CN=fb0252e92c7a744afff72db7c850fc8705887b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:7d:28:37:ab:e3:62:8e:75:1d:1e:4d:a6:
                    9d:ac:74:72:7d:4d:29:84:e5:6c:ea:04:4c:07:14:
                    17:33:30:9f:f2:19:e1:b1:47:32:65:da:14:8e:c8:
                    c1:d0:8c:32:b8:f6:1c:eb:d1:1b:35:60:18:12:94:
                    63:43:4a:79:96:56:b8:28:72:b8:00:6d:94:1f:51:
                    d8:f3:77:c9:57:38:e3:46:ed:5c:c9:40:5c:20:ab:
                    5f:d2:94:b7:6f:ad:b5:ca:6d:02:6e:28:f8:22:55:
                    a2:6d:59:bc:4c:d4:2d:b8:6d:da:57:83:79:48:d2:
                    b4:c2:be:ca:71:16:e1:1e:d3:c0:e5:b1:db:8b:5e:
                    13:24:60:de:15:f0:40:7d:1b:a5:d0:f6:3f:dd:1d:
                    5d:04:d9:9e:4e:5a:39:72:8d:5b:b1:b1:0d:c8:00:
                    42:c8:cb:e4:5d:50:6c:00:e5:d8:76:6f:30:4f:59:
                    59:40:3a:fc:22:51:15:f0:b3:2c:a6:4b:55:90:f1:
                    ee:e1:aa:2b:89:fd:b5:87:6f:a5:78:ca:f7:96:2f:
                    fb:2a:82:60:f6:09:19:f3:b2:f3:a1:b7:1a:67:62:
                    59:2d:6e:f7:3d:15:cd:25:b3:11:59:28:84:a5:0c:
                    ca:fa:e1:c9:e0:f9:52:68:89:f7:f6:24:6a:bb:bd:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:02:52:E9:2C:7A:74:4A:FF:F7:2D:B7:C8:50:FC:87:05:88:7B:82
            X509v3 Authority Key Identifier:
                keyid:B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7e:70:c2:89:49:fd:96:04:15:86:8d:66:89:b8:2b:ed:1d:
         13:be:d9:db:fb:68:43:9a:7f:45:e6:6e:30:4a:cb:d7:7e:f1:
         f0:38:96:ac:2c:8a:22:49:be:f4:e4:00:fd:9b:08:90:ac:1d:
         b0:07:65:67:22:74:5a:9f:f0:ab:87:c6:f2:2d:c8:ce:97:44:
         d2:ca:4c:e4:aa:b7:e3:0c:9c:1f:14:f7:41:43:40:20:90:b2:
         80:7c:32:5e:89:c7:61:9d:45:31:02:8c:f0:72:19:67:75:4b:
         2e:46:4d:45:56:6a:04:fd:dc:c2:af:19:95:5c:f5:ac:05:92:
         ae:79:38:8a:d2:bd:d1:54:5f:d6:d4:41:f5:c6:a7:1d:8d:88:
         44:b5:66:88:d7:cc:f2:ec:b6:72:29:9e:a2:41:75:f2:60:3c:
         d5:57:5d:2e:cd:bb:5a:7d:5b:ad:bc:98:0b:42:40:05:c9:7f:
         02:42:a0:d9:73:65:a3:26:dd:78:cc:dd:81:f6:ef:65:4f:20:
         5c:76:c5:fa:c9:64:c7:7d:8c:32:92:02:cf:c9:4c:89:e0:65:
         91:2d:46:d5:cc:3e:fa:18:00:de:7c:32:93:db:8c:55:1d:c0:
         de:24:a2:20:8e:8a:0c:df:fc:aa:d2:b6:7e:e8:36:74:c0:98:
         ba:ab:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:09 2025 by rpki-client