Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
File:                     TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft (raw, json)
Hash identifier:          NqxrB8XKchKETxIyK9c2fOQ2gCo69HRquVrZkYyALog=
Subject key identifier:   02:08:A0:EE:C4:97:7F:C8:8B:5F:5E:B5:96:50:98:7D:87:5E:60:01
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Certificate issuer:       /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial:       0199FBEBF6BE623F28E4FC7B00DAA902CF8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
Manifest number:          14EF
Signing time:             Sun 19 Oct 2025 10:02:49 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:49 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:49 +0000
Files and hashes:         1: DppKxT5ljLij19Y9kuFKbXPtInE.roa (hash: dBb9XFhPZs/yEDFIrNxXoE0ofTm7AGuxUXTTkIoqD0w=)
                          2: H9SO8EzcNBS2yNz1oqlQvF8nYaA.roa (hash: DHcHXu+DGDdMpd1sZPMiGOEXUFezuU4wJP51eqKaDv0=)
                          3: Ie5KawkP4b238jzWIkt7U1G1OH0.roa (hash: b/NOk3BaQteK7RVlxUiaRcKQ/ZGCaP84MpBuSn/nXxo=)
                          4: TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl (hash: 4GmDtoo5dU3cQxzfcbFxZJYVVNcs2Tbd2iwaQ1AGrkI=)
                          5: vHwCw7oMDPrClYvdX-A30AyKV5Q.roa (hash: rqndv/sj8Hh1XnVuBVWvDlA5Odz01ECXqpzsqO0GIsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f6:be:62:3f:28:e4:fc:7b:00:da:a9:02:cf:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
        Validity
            Not Before: Oct 19 10:02:49 2025 GMT
            Not After : Oct 20 10:02:49 2025 GMT
        Subject: CN=0208a0eec4977fc88b5f5eb59650987d875e6001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:6e:54:d4:87:91:68:6e:a5:f3:98:dd:95:
                    62:6a:af:27:eb:33:19:97:4f:14:e9:66:ae:1a:0b:
                    2f:9d:c4:4b:af:be:9b:87:a5:34:db:ec:88:fe:c5:
                    63:60:99:23:9f:18:82:b7:38:8a:2c:98:c8:86:91:
                    fd:27:5d:21:0a:b1:bc:f4:24:a4:58:4f:17:9e:74:
                    35:19:c8:9e:51:df:6b:c5:0e:d4:5e:fc:e2:d2:82:
                    2a:fa:80:68:50:a2:4b:ca:a6:1d:48:9b:2d:a6:48:
                    36:f0:02:76:04:d5:f3:d1:15:d1:d0:de:07:8b:51:
                    e1:f1:d0:85:b9:fa:22:f6:ae:3e:98:ed:3a:71:ff:
                    13:d6:2d:e2:91:b2:4b:11:be:71:35:ea:d2:b6:c1:
                    aa:a3:08:99:cc:21:1a:6d:47:b1:4f:8c:8a:38:80:
                    73:c0:9c:95:9a:4e:b7:c9:d1:1f:34:3a:0d:7b:aa:
                    e3:10:16:08:ed:7e:fc:5b:e5:3d:2d:60:a9:8b:2d:
                    7f:e7:db:d2:bd:80:8f:32:48:2f:f9:a2:d8:dd:64:
                    96:b8:c5:fa:2f:1a:e7:78:d0:57:56:ea:dd:b1:ef:
                    a5:68:b0:de:fc:2f:a1:f4:7f:ef:0e:8c:d0:b6:f8:
                    0b:69:9f:a8:2a:29:43:46:48:2a:56:d4:75:9a:03:
                    d7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:08:A0:EE:C4:97:7F:C8:8B:5F:5E:B5:96:50:98:7D:87:5E:60:01
            X509v3 Authority Key Identifier:
                keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:24:ea:1a:c7:46:72:81:3d:49:d8:2d:98:bc:1c:21:34:2c:
         6b:2a:ae:53:b5:c7:39:f7:e2:48:1a:15:cc:ec:39:df:12:37:
         b7:3e:23:70:3f:39:2e:5c:cd:3c:32:e2:a3:d4:5b:c0:51:32:
         e0:2c:6b:9d:7f:cf:3d:c9:91:eb:49:70:31:ad:a7:af:62:71:
         9b:a7:2c:a2:23:6e:89:51:eb:b6:da:00:be:4a:ff:dc:4c:49:
         ec:c7:3a:78:b1:b2:1f:d8:4d:c9:8b:72:40:5e:d5:dc:6a:6d:
         57:73:79:c6:8e:8a:59:31:88:26:e6:97:54:9c:ec:85:73:d9:
         71:55:94:b9:1d:63:f9:55:a3:fc:be:8d:d4:b5:2e:fa:fc:2f:
         cd:8d:f5:dc:66:80:24:3d:f1:56:d4:da:ab:8b:7e:21:d7:85:
         55:12:bf:86:d7:73:da:ad:8c:7b:20:89:17:2d:3f:e0:90:b5:
         3f:f9:34:b6:ee:31:77:dc:a2:61:54:5a:8c:b1:bd:e4:d7:b2:
         e3:ba:f0:1f:b6:9e:0b:cf:79:a9:7a:54:c9:0a:8b:93:28:a8:
         e8:dd:33:c8:e6:b2:ce:84:59:89:3a:7e:20:bb:b1:51:72:f5:
         5f:b7:c1:23:47:e3:5e:e7:ac:af:97:0b:08:bb:34:e3:80:39:
         07:f1:25:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:33 2025 by rpki-client