Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
File:                     TkMMADsADTVe0WnlXYzPOTg34go.mft (raw, json)
Hash identifier:          HWrZC74k3H/qAxee08dZdyW2kBbmlzjwCMHxUBhWyDo=
Subject key identifier:   4A:F6:7B:A0:82:D4:2D:BD:BC:F7:9B:19:47:5E:CB:22:97:B8:3A:2A
Authority key identifier: 4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A
Certificate issuer:       /CN=4e430c003b000d355ed169e55d8ccf393837e20a
Certificate serial:       01987DF86098A87878FB338561C42B4583BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
Manifest number:          0DA0
Signing time:             Wed 06 Aug 2025 06:01:26 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:26 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:26 +0000
Files and hashes:         1: TkMMADsADTVe0WnlXYzPOTg34go.crl (hash: G+3iabD13Jgd9IhgR8/pFyB2rglQziGag5XSzxyy1+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:60:98:a8:78:78:fb:33:85:61:c4:2b:45:83:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e430c003b000d355ed169e55d8ccf393837e20a
        Validity
            Not Before: Aug  6 06:01:26 2025 GMT
            Not After : Aug  7 06:01:26 2025 GMT
        Subject: CN=4af67ba082d42dbdbcf79b19475ecb2297b83a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:9e:11:c9:3a:ce:1c:a1:28:4c:6c:ee:ea:
                    b7:99:1a:4b:f6:0b:93:ec:45:64:8a:7b:0e:35:ec:
                    e0:74:e4:a0:9f:0e:4b:7c:17:b9:9f:75:90:45:5c:
                    3c:a6:7c:2f:53:1c:0a:6a:0c:dd:f0:0f:ee:a1:e7:
                    c5:d8:87:2f:8c:4e:f4:aa:b3:80:50:f5:b9:3b:16:
                    a3:f6:47:a7:b1:94:cf:e8:d8:6a:29:03:23:df:65:
                    40:64:98:49:45:b8:28:b0:49:96:43:89:99:cf:9f:
                    95:ee:a9:66:be:6b:c3:de:76:11:5a:b8:99:62:08:
                    f5:55:7c:04:b7:5b:87:ba:d8:4d:ca:95:13:f0:c9:
                    78:3e:e4:f4:63:3e:ce:e9:92:8c:b2:cc:1c:1d:c7:
                    57:63:e9:d3:bf:a4:26:e7:f4:5f:d4:6c:e6:87:c5:
                    f0:c1:cf:2c:b7:31:4f:39:61:1f:71:ec:af:82:e3:
                    85:1d:ad:34:1d:c1:de:10:bf:17:21:70:c2:3d:ae:
                    4a:32:a1:2d:9e:a7:de:02:67:c9:ba:b6:ce:1f:a5:
                    bb:62:46:c6:1f:6e:90:e6:63:f0:6d:f5:21:96:9f:
                    de:16:9a:ff:43:ba:1d:1d:42:fe:1c:67:10:ea:58:
                    86:a0:c3:f8:d0:79:79:ae:c7:c9:00:f1:b0:33:ce:
                    48:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F6:7B:A0:82:D4:2D:BD:BC:F7:9B:19:47:5E:CB:22:97:B8:3A:2A
            X509v3 Authority Key Identifier:
                keyid:4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:30:fc:11:49:e1:8a:ea:8d:33:65:e6:36:96:3e:ce:1d:99:
         3a:49:c1:72:45:bd:ea:ee:17:6c:79:2a:0e:36:95:21:46:6a:
         4d:c9:67:bb:45:e9:60:53:89:5b:70:68:7e:30:35:b9:97:1a:
         ca:9c:4f:cf:5c:88:1b:6d:17:20:5c:34:af:78:09:ab:92:ad:
         c7:4a:cd:86:f9:79:82:ab:d0:b1:09:a6:73:68:16:fc:f4:41:
         fa:60:6e:cc:43:e1:ac:83:19:b3:3a:6f:cc:21:82:50:eb:e7:
         f0:16:34:a6:f9:56:f9:4b:a3:91:b3:8c:16:5a:0b:b9:ae:34:
         e1:c6:ae:c9:59:90:19:ea:36:d6:b3:4d:36:90:b0:a3:bf:b8:
         57:02:43:b7:91:45:20:db:39:1b:c7:02:ac:2b:ff:d2:9e:b4:
         11:55:63:8a:11:23:49:9b:f3:40:0b:ce:08:46:31:88:92:21:
         28:7a:92:c1:bc:6a:f6:ee:19:bb:c3:ba:a7:be:be:c2:9f:8c:
         43:85:cc:18:cb:e8:b9:5f:a5:b5:73:27:45:be:f9:10:25:b2:
         5d:fc:ad:d0:8d:d9:22:e8:df:83:53:8b:c5:f6:5d:47:be:b1:
         8a:ad:ac:05:9e:da:e0:95:88:20:cb:f5:0c:94:60:37:d9:f2:
         1e:ff:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:32 2025 by rpki-client