Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File:                     tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier:          LFGB83/2/6ahJmjMqwDTploam2Yz+8BGFxlXsZumUac=
Subject key identifier:   28:A6:87:27:66:A7:85:7A:9A:F8:B5:93:5C:88:88:25:FF:32:83:AD
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer:       /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial:       0198D65FAFBBB80A18012EC1D6B2F8BC48CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 10:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:51 +0000
Files and hashes:         1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: pSqACJQb1pzkNZoKxbBeGgf3wClpzZKWAriF+L8eM7k=)
                          2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:af:bb:b8:0a:18:01:2e:c1:d6:b2:f8:bc:48:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
        Validity
            Not Before: Aug 23 10:00:51 2025 GMT
            Not After : Aug 24 10:00:51 2025 GMT
        Subject: CN=28a6872766a7857a9af8b5935c888825ff3283ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:e4:f3:44:59:83:ec:0b:73:2b:bf:b7:e1:
                    a7:57:38:e5:45:01:0d:52:52:57:c6:f3:32:3c:19:
                    1d:97:18:5e:01:28:fe:92:b6:b3:b6:68:a2:42:26:
                    a4:fb:48:f1:8b:5e:76:98:34:6f:e1:48:87:32:1c:
                    b1:bb:84:22:12:75:5c:1e:56:42:6c:36:2e:d5:b8:
                    20:83:8d:ce:dd:b2:17:3a:0a:79:3f:09:74:81:10:
                    a3:3a:18:b1:a6:09:8f:b6:70:08:50:c3:1d:c1:c5:
                    ee:eb:3f:27:3f:78:39:4d:98:2f:df:5b:8a:8d:d6:
                    1e:53:7e:3f:0e:58:73:3a:1c:51:1b:e7:3b:64:f0:
                    38:bb:55:f0:e5:ec:7d:0c:4f:b6:ba:4b:03:40:88:
                    aa:9e:e4:9f:74:fd:25:de:d8:cd:f2:92:8b:60:43:
                    66:b3:10:aa:7d:72:fd:16:15:ee:f5:38:16:ec:20:
                    3e:da:21:aa:f2:05:ce:cf:ed:2d:9c:95:b8:04:a6:
                    bf:56:4d:c8:d2:f1:5a:f2:53:60:c9:bb:cb:c1:12:
                    c5:fb:6c:43:d6:d6:91:05:aa:b3:1a:a9:59:07:a2:
                    c4:2c:35:9c:6f:f6:df:88:30:f0:22:01:84:da:0d:
                    8e:51:3e:29:b7:99:83:ac:ef:15:e1:a5:fa:c2:ce:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A6:87:27:66:A7:85:7A:9A:F8:B5:93:5C:88:88:25:FF:32:83:AD
            X509v3 Authority Key Identifier:
                keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:45:d1:2a:55:91:d0:0c:d6:5b:dd:a1:ec:7e:5e:a4:aa:56:
         1b:18:ae:43:d0:2c:b8:a3:a3:44:f6:8a:55:26:c9:9b:26:de:
         84:e3:10:da:b7:8a:1d:62:c3:8e:15:07:6d:c2:ea:42:0a:6c:
         8b:49:5e:89:93:23:d4:5d:89:c2:62:ba:e3:d4:94:53:87:57:
         26:e5:e7:fb:4d:d7:66:a5:95:b2:27:7b:e5:6f:c3:45:bb:c9:
         9d:e5:11:2c:36:53:da:90:69:2e:cd:a6:ad:50:da:2f:62:c3:
         07:ce:11:55:17:a4:5a:ba:43:57:fc:b6:1b:c9:be:bb:1d:0b:
         5a:db:c4:89:1a:61:4a:5f:6a:f1:1b:99:b6:56:94:fd:55:35:
         ce:06:a6:b5:88:48:d0:4a:ed:0f:32:20:9a:cc:81:f7:9f:92:
         6a:65:99:31:20:4e:68:b0:c9:71:4b:1b:b3:9c:8c:f8:bd:06:
         e1:15:85:72:10:8d:25:f6:0e:b2:cd:a2:7a:09:f8:88:ad:ce:
         9b:1e:48:c3:1e:9a:ac:2a:92:f6:73:4e:40:89:c7:5f:31:9b:
         a4:f9:4b:d1:ba:cb:06:1b:1b:85:58:72:ae:64:53:9e:f6:64:
         4f:bf:1e:3a:3b:08:72:60:e1:d7:60:fd:b1:47:f4:5f:17:24:
         80:6f:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:59 2025 by rpki-client