Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File:                     Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier:          tZKc4rLVLyFvOsyNkpQLA+R7UZvGuQ5DnlbkDxQmwLw=
Subject key identifier:   A2:28:AB:49:2F:2C:73:0C:48:91:DC:BD:8E:A0:9E:F0:A2:BE:28:9D
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer:       /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial:       0198D4A7EDD2BDF14615D856E8C8A9636DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 02:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:31 +0000
Files and hashes:         1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: sM3UhtvJd6P5b6mocQBVgXPLj6cA6GktGn8eic6DtqY=)
                          2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:ed:d2:bd:f1:46:15:d8:56:e8:c8:a9:63:6d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
        Validity
            Not Before: Aug 23 02:00:31 2025 GMT
            Not After : Aug 24 02:00:31 2025 GMT
        Subject: CN=a228ab492f2c730c4891dcbd8ea09ef0a2be289d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:9b:a2:39:63:ce:76:71:52:90:7d:d3:1c:
                    25:5e:51:f0:2d:5d:86:46:30:24:cf:ad:da:52:dd:
                    cf:ab:f2:ef:fa:8f:16:89:01:df:cd:df:23:1c:de:
                    0d:12:f3:c5:9e:20:06:94:57:b3:49:6a:79:77:4f:
                    ed:e4:86:b6:e4:6d:d4:46:d1:e9:d4:8f:dd:e7:8b:
                    67:6c:9f:80:00:b9:c5:40:6a:b1:45:80:5c:2c:30:
                    9c:c4:43:30:0b:e9:95:09:43:8f:8d:5c:0e:ef:40:
                    21:21:ed:85:a7:a4:2e:7d:b1:2b:d4:bc:6b:53:94:
                    bd:51:38:a5:3e:31:b1:09:63:d6:a3:96:25:74:35:
                    17:6c:82:5b:be:11:61:88:6a:e8:52:f1:c8:81:23:
                    44:37:25:6c:46:4b:b0:06:81:59:d9:c4:b1:6d:e6:
                    26:95:00:9c:51:03:69:34:aa:31:0f:4b:11:7c:da:
                    00:74:a4:ad:5c:aa:d0:e6:7a:4f:43:73:b0:66:aa:
                    9b:0e:17:7c:57:e7:f6:70:7e:6a:27:eb:67:a1:4a:
                    31:2c:c2:82:25:e1:8c:80:a1:ba:b4:d5:0c:b3:77:
                    2e:c9:3e:09:0d:91:03:ee:0a:0f:d6:c3:8a:71:a1:
                    08:ee:20:5f:46:c2:00:46:77:49:da:85:b6:1a:f0:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:28:AB:49:2F:2C:73:0C:48:91:DC:BD:8E:A0:9E:F0:A2:BE:28:9D
            X509v3 Authority Key Identifier:
                keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e2:af:2e:ff:ab:02:f2:95:4c:07:81:8c:9f:13:09:de:d1:
         a7:e7:a9:2a:bf:dc:bf:bf:63:b3:a1:c0:51:07:d1:b9:9e:55:
         58:2b:1b:5b:42:33:4a:f0:18:af:8e:79:14:84:1e:4a:88:9c:
         37:84:0e:57:a3:d2:fb:01:1f:65:4c:1f:94:ca:e9:00:3b:a2:
         16:0d:29:1b:3e:f2:f0:b4:33:47:42:81:9b:01:4e:35:2c:c1:
         f9:f4:41:fd:81:35:e4:dd:8a:b0:12:4b:84:18:d7:7a:95:b3:
         fa:e3:ec:97:8f:03:94:01:3f:5b:b1:bb:2f:90:4c:d3:c6:8f:
         bf:f1:31:e5:c8:91:6c:ae:da:9a:07:52:9c:59:f4:d5:82:f4:
         91:ec:3c:a5:53:0c:37:7a:fe:2b:dd:29:c0:5f:0c:cd:1f:c5:
         16:6b:bb:3d:cb:68:22:e8:3f:01:0c:6b:7f:2e:9c:13:e4:e3:
         61:ea:11:22:51:61:62:c4:dc:4c:f6:84:ab:2d:e4:78:83:e0:
         7d:ab:65:f3:de:55:d0:cc:de:14:06:45:69:ed:f5:d0:4a:4c:
         50:1d:3f:ce:9a:a0:f6:56:d2:82:d8:d0:6b:29:44:c9:2b:45:
         af:28:33:3c:fb:63:67:90:89:65:c5:3a:43:e2:00:6a:60:33:
         a3:f9:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:44 2025 by rpki-client