Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File:                     Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier:          Pc2XauaB+Vk02lObZ61ol9EqJEivxJz7XbdsJ9f7ZXM=
Subject key identifier:   10:08:E5:05:91:EB:05:58:4F:8E:8E:28:67:86:BC:50:14:6E:FF:27
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer:       /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial:       019891B57EE3A65EC7ADAA071836D20BBDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number:          04D9
Signing time:             Sun 10 Aug 2025 02:00:47 +0000
Manifest this update:     Sun 10 Aug 2025 02:00:47 +0000
Manifest next update:     Mon 11 Aug 2025 02:00:47 +0000
Files and hashes:         1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: EggfoMqqcAjGB5WMOsa0lCXnnAx69YgJIHTgIhXpiio=)
                          2: Zx7o0NJ7lPcPWusoEu-hir0u3sI.roa (hash: RaHzV4CwJ05D0LodvMcl63WAfLK7uU2RzT47rVSSlwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:b5:7e:e3:a6:5e:c7:ad:aa:07:18:36:d2:0b:bd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
        Validity
            Not Before: Aug 10 02:00:47 2025 GMT
            Not After : Aug 11 02:00:47 2025 GMT
        Subject: CN=1008e50591eb05584f8e8e286786bc50146eff27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:64:06:a6:49:d6:e9:20:76:2a:35:d3:46:f4:
                    27:06:89:de:54:e3:00:07:07:7a:01:7d:2a:ae:3c:
                    37:0e:7b:22:a5:aa:27:52:99:b8:a3:f8:79:db:ee:
                    3f:47:b5:cf:04:71:1b:92:31:77:42:2d:83:72:e7:
                    0d:4e:f9:ac:4c:1d:1a:33:69:63:c5:31:8f:db:c5:
                    3f:79:4a:ed:f5:3b:a7:2d:f8:cd:38:48:1d:2a:66:
                    09:97:e8:dc:f1:c1:21:5b:1e:24:1e:37:07:52:d4:
                    b5:ca:ab:5a:58:3b:01:64:b6:c0:23:e9:f9:b1:fc:
                    02:a6:b3:83:db:7a:94:d9:e0:7d:8e:ec:e5:87:6d:
                    92:ad:36:4f:3b:97:2c:6a:fc:96:74:79:87:bf:6d:
                    31:02:b8:6f:18:90:29:0c:0c:14:52:38:4c:30:36:
                    91:6b:5b:a9:f6:52:78:7c:10:29:6b:84:c6:11:d2:
                    44:d9:68:b0:d3:91:49:aa:6d:85:5b:9b:47:2b:9b:
                    ac:21:66:e4:81:34:54:eb:33:02:7b:48:c9:6d:d0:
                    f9:d8:d9:c4:aa:ab:0b:4b:a0:df:5d:23:4a:fe:ce:
                    47:4e:1d:cf:7e:c8:14:94:a4:e4:21:6d:77:4e:38:
                    70:17:c5:e0:26:c1:00:fd:e0:30:81:cd:61:89:59:
                    0f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:08:E5:05:91:EB:05:58:4F:8E:8E:28:67:86:BC:50:14:6E:FF:27
            X509v3 Authority Key Identifier:
                keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ed:f7:38:5f:fe:54:08:c2:b1:ee:77:82:ab:c6:06:8e:24:
         f9:84:1e:6c:f4:c7:3f:0d:43:4c:6a:a7:97:6b:78:0f:6c:af:
         de:9f:74:06:89:db:24:22:81:3c:c5:6e:b4:cf:bb:6d:3b:15:
         8c:39:d1:ef:fc:29:1a:5f:19:4c:dd:0c:0b:7e:b3:0d:e3:9b:
         1e:b1:a3:e6:2e:01:93:5d:83:b8:14:55:3c:ea:89:b3:dd:da:
         d3:de:9a:48:50:50:68:51:a8:37:90:a8:39:6a:84:f6:0a:ef:
         3d:ac:60:6d:dc:b5:4d:37:19:e4:b7:d4:59:51:20:6f:b6:e6:
         29:24:b2:65:30:43:30:88:ff:35:36:7a:22:3f:87:77:19:60:
         c5:05:24:e7:c2:a2:a8:4b:43:24:0e:10:b6:e5:c0:88:66:c0:
         d9:c3:7e:10:9e:41:a3:eb:d2:15:f4:e9:3d:70:eb:8b:de:17:
         94:7e:ef:14:cc:82:d0:06:3f:2c:55:62:4c:26:46:b7:89:2d:
         f8:16:4f:4a:d5:53:9c:37:b8:e5:10:55:33:45:93:0e:ff:37:
         03:c6:7f:63:64:7d:f2:d9:9e:45:b7:e7:65:9d:c8:88:c4:e2:
         63:e7:be:2f:42:e6:03:34:c6:7c:08:ee:b5:22:c0:ee:94:e5:
         8e:dd:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:11 2025 by rpki-client