Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
File:                     TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json)
Hash identifier:          r7vIr4A5lJlE9VeG1hf+z8oG9DitGxbEgVSn1uf6dJE=
Subject key identifier:   F4:FA:5D:0F:7B:CE:92:FA:C1:0C:94:64:CF:E6:19:28:48:3E:4C:61
Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Certificate issuer:       /CN=4ce08200492278484d6c88f5386ba7b39696cb96
Certificate serial:       01988B7CD63F1F1A9F1493C540C8109F124A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
Manifest number:          0CF6
Signing time:             Fri 08 Aug 2025 21:01:10 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:10 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:10 +0000
Files and hashes:         1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: F+BJyk9JCQwYxMRCYOSGMyjhj0htPZfEehiFlM8E0vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:d6:3f:1f:1a:9f:14:93:c5:40:c8:10:9f:12:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96
        Validity
            Not Before: Aug  8 21:01:10 2025 GMT
            Not After : Aug  9 21:01:10 2025 GMT
        Subject: CN=f4fa5d0f7bce92fac10c9464cfe61928483e4c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:b0:25:4a:e1:63:45:ba:d9:e3:48:ff:23:
                    bb:2a:c8:1e:41:0e:f9:0b:ff:3f:4f:5d:89:82:ab:
                    d3:35:91:35:5f:ed:c7:45:5e:5e:da:39:c7:8e:5e:
                    c2:af:8c:d9:bd:e9:e3:f3:dd:c9:d0:4d:c6:94:00:
                    c2:0d:37:fc:09:30:c3:d0:ea:b4:2c:6e:22:8c:8a:
                    14:f0:2e:1e:77:fa:42:7c:6c:e2:a1:eb:7e:cd:0a:
                    a3:1e:fa:02:c8:cb:e8:cd:63:7b:dd:6c:af:27:7e:
                    38:77:07:0e:e7:cb:bb:4c:52:ac:66:65:5c:f5:29:
                    de:77:93:a1:23:0d:9c:07:f3:b2:25:51:69:7e:bd:
                    4c:74:07:3d:11:5a:d1:d8:9a:9a:b5:3e:d9:1e:89:
                    d0:df:7f:21:e0:6c:07:0a:6d:53:57:a4:5f:4f:fb:
                    d0:fc:68:71:dd:18:8a:c8:00:7d:e2:50:40:50:7f:
                    63:b4:62:3c:1a:73:62:b6:55:2a:66:be:af:e3:3e:
                    c2:51:a7:f5:15:1b:c7:f4:44:bf:c5:25:48:31:d2:
                    43:50:33:f8:25:42:cc:1f:06:9c:90:99:e2:70:ea:
                    8f:72:dc:1f:15:3c:2e:36:79:e5:27:14:64:6e:ed:
                    d6:67:37:3f:a2:b0:57:04:8f:86:62:b2:90:bb:67:
                    f4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FA:5D:0F:7B:CE:92:FA:C1:0C:94:64:CF:E6:19:28:48:3E:4C:61
            X509v3 Authority Key Identifier:
                keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:64:8f:27:db:93:60:e4:28:07:6c:83:f7:47:f8:bf:3f:42:
         05:2d:50:5e:2f:02:29:43:14:37:74:62:68:a0:10:99:27:63:
         f6:7e:6e:05:e7:16:5b:8e:4e:14:f1:38:2a:1f:a9:13:aa:56:
         a6:b9:b2:10:3d:21:37:c5:7d:85:3d:c2:f2:3c:e0:9f:71:df:
         82:38:12:8c:96:a8:ae:e1:2e:11:85:9b:a2:da:ce:ed:90:db:
         7e:38:5b:06:a2:91:ec:5a:e0:06:cb:b1:eb:87:55:b7:c2:de:
         4a:b9:05:a6:4f:fb:b4:9b:09:f9:ad:e1:d8:92:40:1e:31:75:
         17:35:68:c3:3b:52:6f:2c:ee:96:ac:1e:78:7c:2b:f9:aa:5f:
         7a:4e:2a:78:d0:f3:44:a0:08:7c:9d:b6:b0:8b:c1:84:13:50:
         ff:c9:0c:1d:83:03:40:f9:6f:0d:df:34:b3:df:e7:50:c9:b5:
         aa:f6:05:9e:8f:aa:f3:5d:73:28:9d:fc:87:99:bc:0b:62:03:
         83:2f:56:d7:2a:0e:b4:ac:db:f7:67:3d:f2:3f:60:40:42:6a:
         8c:2b:55:d1:f5:5c:f5:43:1d:98:fd:6f:fd:4e:dc:3a:d3:8d:
         af:fc:fc:df:ba:ed:e5:ed:ee:7d:bb:4c:64:b6:e0:d4:1d:c2:
         1e:65:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:42:17 2025 by rpki-client