Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File:                     TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier:          Pn8v8H9H02XSwkJN5AnXnsrklWYdgOu/1N1oWrn4D6s=
Subject key identifier:   13:CB:4B:3F:54:FC:7B:85:B2:60:CB:9B:29:5D:18:40:64:47:F7:5F
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer:       /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial:       0198D70628CC1CABCEF34CFE10667F88428F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number:          05E8
Signing time:             Sat 23 Aug 2025 13:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:41 +0000
Files and hashes:         1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: yjj/9dc4nezJtmO7zYxr34IKpOHNhZ+IUsuUbZOT7Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:28:cc:1c:ab:ce:f3:4c:fe:10:66:7f:88:42:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
        Validity
            Not Before: Aug 23 13:02:41 2025 GMT
            Not After : Aug 24 13:02:41 2025 GMT
        Subject: CN=13cb4b3f54fc7b85b260cb9b295d18406447f75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:5d:55:7b:65:d7:b7:3a:d4:23:47:af:c9:
                    bb:22:c1:4c:5d:e7:06:67:b1:b6:f2:d2:2e:dd:c9:
                    b0:ab:30:a6:74:5c:49:2e:43:21:71:4d:94:ce:74:
                    cc:38:51:7b:52:8e:0e:7a:2e:7e:db:96:ab:28:4a:
                    e7:6c:68:c0:51:6c:68:01:45:11:ef:38:66:9c:24:
                    6b:27:90:b5:7e:f5:b2:df:31:01:f8:34:71:46:6d:
                    84:6b:90:1e:92:2c:9a:bc:da:8f:e8:14:cb:5a:a2:
                    9e:cf:e0:67:e4:20:2a:6f:cf:a3:ad:9d:fe:6f:ac:
                    7b:ee:af:00:4d:70:40:31:85:94:c2:e0:23:a7:7e:
                    0c:a7:3c:b0:58:8b:51:52:ae:01:ea:ec:f8:74:df:
                    57:0e:42:24:b1:87:5e:bc:2f:bc:a3:39:92:e5:cb:
                    ce:ce:12:3f:1b:c1:0d:e4:14:ae:df:cf:a3:35:98:
                    e4:4f:fc:22:3b:8d:a0:b4:1f:91:29:c5:a2:68:b1:
                    b5:ba:cd:44:e7:a6:ec:15:6c:6a:c0:39:ec:89:e9:
                    8c:29:c7:1d:a5:2d:ce:13:e6:b3:72:18:2c:5e:c0:
                    d4:72:41:fc:0e:52:3b:16:68:27:70:12:42:12:31:
                    89:8e:81:b3:a1:46:a0:05:f3:05:6c:4b:6e:ec:be:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CB:4B:3F:54:FC:7B:85:B2:60:CB:9B:29:5D:18:40:64:47:F7:5F
            X509v3 Authority Key Identifier:
                keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:45:57:62:8c:60:e9:89:9c:e0:00:bb:fd:3f:05:97:7c:9d:
         b6:e9:a7:f1:ad:bb:cc:a3:ff:04:79:87:4f:6d:c7:da:c8:99:
         59:70:83:6f:46:62:4f:2a:e6:0e:23:7e:4e:3c:7c:ed:d3:09:
         c8:3d:b5:9e:6d:fe:db:5c:36:d2:4a:a3:d7:49:1b:b8:9d:e2:
         23:fd:6b:1c:d7:7b:54:14:68:03:1e:83:cc:b4:a6:fa:59:e0:
         2e:7d:38:e0:0b:76:b6:a3:00:7d:8d:b8:a7:d6:89:b2:b4:0e:
         64:29:10:0c:79:a3:4f:3d:46:a5:a1:47:ff:67:1b:3d:93:14:
         8e:5c:a9:c7:9f:6a:2b:e3:24:12:fc:41:77:ab:35:77:8a:e3:
         89:12:44:47:ab:d7:b9:47:45:b3:1c:d3:af:db:60:be:2a:6a:
         01:82:6a:a1:18:94:30:fe:ac:aa:5c:e3:1d:6a:cc:c0:a7:72:
         53:42:84:86:c3:a7:14:04:c1:2d:a9:c2:e3:ca:ba:16:8c:25:
         47:9f:ef:04:e5:2b:ce:97:2c:34:d3:6d:a7:1e:99:e4:7f:57:
         f0:b0:41:05:c7:70:d0:27:72:7b:94:24:5e:20:bf:e2:4b:b9:
         de:36:64:84:09:c6:3e:c3:68:db:52:08:d3:4e:e7:3c:94:b4:
         58:73:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:03:35 2025 by rpki-client