Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File:                     TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier:          m8F7O102ctXEQ5QfQo3rBvUET3MGhEwlVFBPwJNR5dU=
Subject key identifier:   CB:E9:ED:8B:1B:3B:AE:78:E0:A3:03:4E:30:97:D9:93:D8:28:F1:C8
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer:       /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial:       0198D5836D78000D05EDC694198A400D581B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 06:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:16 +0000
Files and hashes:         1: Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa (hash: evDadyMTuwtAOSC/b6PGvpRRvlRN1DP+6W56r0BhqXQ=)
                          2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: qmKL7Ba/YxhXLYA+9OZfw0faXHYWt/brmrW2VMEbns0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:6d:78:00:0d:05:ed:c6:94:19:8a:40:0d:58:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
        Validity
            Not Before: Aug 23 06:00:16 2025 GMT
            Not After : Aug 24 06:00:16 2025 GMT
        Subject: CN=cbe9ed8b1b3bae78e0a3034e3097d993d828f1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:1a:ea:1a:1c:1d:ea:43:32:51:66:5e:83:
                    e3:4f:56:29:07:ca:a8:6a:43:68:ec:53:23:3d:bb:
                    b4:e4:3b:18:56:2a:bc:7d:c3:eb:67:d4:14:9c:73:
                    da:67:7e:b9:7c:49:90:30:72:03:09:a2:0a:25:f3:
                    70:d1:5b:e7:1c:99:5e:ae:03:fb:ef:e0:3b:63:a4:
                    7f:1b:de:e2:04:fc:92:4e:20:db:76:99:d3:5e:1d:
                    ff:21:b3:f6:ce:8a:84:79:0f:f7:0a:80:c2:b1:68:
                    6d:91:a1:bd:41:0d:f7:d8:10:c7:2b:ac:35:28:d3:
                    ec:82:6b:ae:b1:66:25:97:49:4d:ca:bd:26:f2:45:
                    70:c3:d7:23:cb:90:fc:45:4b:86:2a:3a:72:de:0a:
                    d3:93:31:28:99:32:4d:cc:0c:39:5c:19:af:98:f4:
                    ff:a3:82:35:54:8a:65:50:91:6e:eb:9c:f9:60:e9:
                    44:b0:b7:56:e8:74:74:a7:fd:20:c0:75:9f:4c:ef:
                    6d:60:34:8f:e7:8a:6e:a0:e1:07:29:37:ab:34:d9:
                    27:04:f7:ad:98:f9:8d:5e:65:f8:82:f2:eb:03:c3:
                    d6:22:c6:d0:eb:a3:26:60:6a:1f:39:c7:4e:28:8c:
                    d1:1d:ae:6f:7d:6d:cd:37:af:5e:f8:61:fb:a4:09:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E9:ED:8B:1B:3B:AE:78:E0:A3:03:4E:30:97:D9:93:D8:28:F1:C8
            X509v3 Authority Key Identifier:
                keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d0:ca:9f:39:af:03:93:e6:43:fe:43:26:47:4f:80:bd:1f:
         b9:52:de:60:dc:43:fb:6e:53:c6:28:5b:0c:21:f6:3c:ce:54:
         cf:67:23:9a:23:ee:62:66:49:a4:4d:01:3f:2f:ee:b5:b4:c0:
         42:2b:4a:71:e1:ff:ed:85:29:01:64:e7:24:b9:9d:b9:43:a0:
         fa:74:52:8f:97:86:3c:1c:b2:e3:a2:1d:45:0c:c1:18:18:a0:
         51:dc:75:18:80:09:28:3a:42:e2:73:ac:c7:93:cd:3e:bf:d7:
         ac:08:00:8a:cf:d4:04:1b:71:7d:a6:44:89:90:4d:c7:9d:10:
         fa:95:33:84:d6:bd:1c:8c:11:8c:d8:99:ce:a9:e2:02:03:ea:
         31:89:c6:9f:25:e8:54:9d:c1:27:d9:5f:f9:e4:63:d0:14:ab:
         8a:f0:fc:fc:e7:c4:67:a9:1f:35:26:2c:8b:4a:12:0d:b7:28:
         5c:b9:e8:fe:ee:c5:61:df:18:ff:e7:90:3c:bb:05:bb:9e:29:
         64:78:33:d0:1c:6a:0f:4c:15:8f:f0:52:31:37:4c:fb:25:e2:
         68:a5:b9:f2:c9:74:7f:09:91:d2:d9:17:f9:c9:45:f0:98:be:
         e0:9a:b0:1c:b4:72:90:54:9a:a0:2c:0e:2b:bb:9d:47:c1:d9:
         5a:a7:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:36 2025 by rpki-client