Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
File:                     TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft (raw, json)
Hash identifier:          zuEq/n6JcSxKt6OmU9bFPlBlO6CwmKWOCSroF6giVzA=
Subject key identifier:   4C:D3:D5:D8:1D:33:9E:1B:B4:84:50:C9:28:BE:FD:90:3F:02:65:DA
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Certificate issuer:       /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial:       0198D472B9DBD31EA8CD1CC416F7647A5384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
Manifest number:          1456
Signing time:             Sat 23 Aug 2025 01:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:25 +0000
Files and hashes:         1: DppKxT5ljLij19Y9kuFKbXPtInE.roa (hash: dBb9XFhPZs/yEDFIrNxXoE0ofTm7AGuxUXTTkIoqD0w=)
                          2: H9SO8EzcNBS2yNz1oqlQvF8nYaA.roa (hash: DHcHXu+DGDdMpd1sZPMiGOEXUFezuU4wJP51eqKaDv0=)
                          3: Ie5KawkP4b238jzWIkt7U1G1OH0.roa (hash: b/NOk3BaQteK7RVlxUiaRcKQ/ZGCaP84MpBuSn/nXxo=)
                          4: TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl (hash: HY2axTUVeTL559jgR+HdHlK/0oZlOcUPj8LpYb0cXtA=)
                          5: vHwCw7oMDPrClYvdX-A30AyKV5Q.roa (hash: rqndv/sj8Hh1XnVuBVWvDlA5Odz01ECXqpzsqO0GIsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:b9:db:d3:1e:a8:cd:1c:c4:16:f7:64:7a:53:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
        Validity
            Not Before: Aug 23 01:02:25 2025 GMT
            Not After : Aug 24 01:02:25 2025 GMT
        Subject: CN=4cd3d5d81d339e1bb48450c928befd903f0265da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:f8:85:77:06:60:3e:91:d8:34:42:e8:2f:
                    8e:72:c7:18:60:ce:65:dd:b0:e9:d1:87:a1:a7:9b:
                    3f:e1:5a:88:0b:d6:f8:d6:4e:bc:bc:49:c4:44:18:
                    d9:85:d1:e9:8b:c4:4c:c2:8c:63:a7:bb:f3:df:94:
                    ed:8d:fb:04:94:9a:fe:d6:4a:15:a4:32:c0:9d:d9:
                    f8:b9:dd:49:4a:df:dc:9d:18:3f:f1:2c:79:a7:f0:
                    05:17:f6:ca:30:e4:89:06:a0:e1:d4:32:b8:81:1f:
                    f7:a9:22:ce:ea:ec:c8:b6:4a:5d:67:92:ef:6f:ca:
                    aa:b0:94:06:43:ed:8e:0c:bd:ed:fe:a4:93:a9:31:
                    1c:d0:e1:0d:84:64:88:2e:f0:55:a0:52:58:a0:bd:
                    8a:d7:74:7f:c1:14:42:fe:79:6b:40:76:fb:0a:8a:
                    d2:65:a2:e8:1d:3e:64:8e:25:bc:f5:41:9c:7b:db:
                    e5:7b:1e:cc:1a:3a:28:27:79:80:55:e0:16:e2:f1:
                    a5:49:ae:b9:dd:3a:a4:ef:eb:16:45:03:bb:50:35:
                    a3:05:ba:e2:76:ec:18:f9:82:9f:c5:73:e0:1f:9f:
                    71:c4:23:7e:4d:5e:ad:5d:b5:4c:cd:ab:8e:dd:d5:
                    a8:fa:00:48:12:27:2b:33:55:bc:ce:60:94:f9:d9:
                    77:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D3:D5:D8:1D:33:9E:1B:B4:84:50:C9:28:BE:FD:90:3F:02:65:DA
            X509v3 Authority Key Identifier:
                keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:41:05:b6:c9:7b:89:db:6a:e5:05:0c:53:a4:51:7d:99:6c:
         be:91:5d:ee:65:2a:65:27:8b:e7:a8:52:00:45:d5:9d:8a:fc:
         94:c6:09:3c:56:6d:ea:58:27:d7:eb:a4:1e:87:52:fb:94:a8:
         23:b3:07:63:e3:f7:88:bd:ea:0f:1a:24:ea:5b:ce:d2:25:50:
         cd:45:33:98:47:5b:05:8f:b4:6c:b1:c5:47:27:ff:7f:4c:07:
         02:be:37:e6:19:c1:78:f2:61:b9:e6:d9:4e:1b:ec:eb:87:d6:
         d8:10:a0:3b:7a:d4:4f:11:bd:13:1a:c9:15:98:8b:9e:ff:0b:
         26:f6:c8:1c:d9:7a:b6:60:db:05:d4:63:c9:6b:47:1e:c2:c0:
         d5:67:50:9a:fa:38:f8:0b:9f:e7:d9:7f:a9:d2:d2:79:ca:db:
         6c:ec:f3:d8:9b:a0:db:58:cf:3e:6e:6d:7d:32:56:39:b5:76:
         51:0e:58:a8:27:e1:dd:1c:27:0a:8b:f2:4d:af:18:b1:20:7a:
         c9:c1:21:c8:cb:18:79:52:4c:fd:84:3d:c6:85:f3:63:bb:c1:
         38:75:05:fb:09:2b:bb:df:0a:94:1c:fb:a3:a8:f7:48:d6:55:
         f3:e5:f4:52:9d:f7:5d:94:0b:24:34:d4:8f:e4:f4:51:da:59:
         7b:4f:78:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:57 2025 by rpki-client