Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
File:                     TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json)
Hash identifier:          QCHW0wIGZhx9MaNlAkPlX7UKVs/jS4W254rq+7aBhmc=
Subject key identifier:   A6:27:D5:6B:EA:99:E6:3A:E1:AF:78:13:66:37:72:6E:E9:CA:3E:3F
Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
Certificate issuer:       /CN=4d21374da731314f0a05175d25b0d89a76f6e081
Certificate serial:       019A5187E4C2C86B6C38AD0EE1E4E8FCD80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
Manifest number:          067D
Signing time:             Wed 05 Nov 2025 01:00:51 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:51 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:51 +0000
Files and hashes:         1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: OJCjHf2Ppz1C3UoolJydXZQvhhp2P9ByeHIn0/oCQp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:e4:c2:c8:6b:6c:38:ad:0e:e1:e4:e8:fc:d8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081
        Validity
            Not Before: Nov  5 01:00:51 2025 GMT
            Not After : Nov  6 01:00:51 2025 GMT
        Subject: CN=a627d56bea99e63ae1af78136637726ee9ca3e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:1a:f4:11:12:38:3c:c4:bd:5d:99:a1:92:
                    a1:f8:eb:a3:97:9e:0e:b3:09:31:ff:d6:4d:31:b2:
                    3e:d3:d5:2e:33:98:bb:40:cf:ec:09:18:6f:33:63:
                    d4:a7:c5:dd:11:f2:09:ea:be:78:1b:b6:94:dc:81:
                    84:28:9b:78:64:c8:40:7c:d1:ba:24:b3:ee:80:90:
                    a2:55:bb:06:38:f1:09:f3:6f:26:9b:23:a7:2b:f9:
                    be:ab:35:61:b5:31:64:d3:2f:cb:a5:89:36:86:70:
                    42:9f:1b:48:fa:bc:d7:8a:62:95:35:a1:b5:a9:bd:
                    e6:a5:cb:dd:bc:f5:ea:bd:27:c2:1b:a6:dc:91:66:
                    b4:f7:3b:3a:60:91:45:a7:0c:57:6b:9d:b8:61:29:
                    b2:20:fe:13:52:bd:76:45:51:e0:bd:9a:be:4b:1e:
                    e4:40:31:64:08:7b:65:e0:1e:3d:02:d0:1b:ab:31:
                    4b:41:f4:f6:dc:4a:ed:13:3d:a4:ef:c3:91:d0:e7:
                    36:8c:95:cc:1b:fa:4e:f9:ee:e3:0c:2d:13:9b:b8:
                    4b:78:b0:86:51:48:78:c5:8b:0e:ec:eb:22:ab:99:
                    84:c3:47:f6:7f:2b:20:54:73:84:95:05:16:ba:d1:
                    45:4f:19:e7:6f:75:e4:b0:41:32:b8:9a:1a:e1:7c:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:27:D5:6B:EA:99:E6:3A:E1:AF:78:13:66:37:72:6E:E9:CA:3E:3F
            X509v3 Authority Key Identifier:
                keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:d8:97:5c:ab:c6:69:82:3a:ee:8e:b8:43:5c:78:92:2a:
         d8:4b:e5:06:7b:7c:1b:3c:b4:f2:7b:92:fa:a3:1f:e9:88:67:
         43:57:be:cd:8e:3b:43:c8:a7:63:2c:4d:e0:2b:55:fe:bd:5b:
         43:60:9e:bd:29:d7:ae:04:98:85:05:7c:ae:d4:31:c3:e7:2c:
         58:a4:65:c4:72:c9:24:ca:ff:09:50:eb:1a:38:cd:5b:6e:ad:
         b5:67:61:d0:09:44:13:de:27:3c:24:88:50:a2:df:64:a0:3f:
         93:82:92:ed:14:54:60:6e:a9:10:0e:01:8c:50:17:1e:9d:f9:
         86:32:20:b7:08:63:4b:0b:08:2d:09:45:cf:4f:4a:71:4b:af:
         a1:1d:91:60:6b:47:c2:cf:9e:be:1b:06:82:de:10:65:be:e8:
         94:98:ca:91:97:c9:0d:a5:47:23:b7:e6:02:e8:ac:de:60:f5:
         87:29:9c:54:fc:de:00:a3:e2:64:44:90:75:31:31:f6:ac:d5:
         a7:7f:83:b0:5b:b8:2e:e6:c1:b3:18:4f:4d:6a:b1:c6:63:c3:
         e1:f9:5c:03:f2:0a:c6:3e:f6:f0:25:28:51:c1:02:ab:7c:81:
         75:04:78:fa:73:4e:59:bc:5a:61:14:7b:fa:11:e2:2c:4a:28:
         a8:fe:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:17 2025 by rpki-client