Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
File:                     TTz66pjQdmF8HqrOk0fi1Kc81E8.mft (raw, json)
Hash identifier:          3BwDeZZAGBgUOzjeiu677bjffBIPbGr7+6E+E8I6GSQ=
Subject key identifier:   FE:03:4E:89:42:B2:EA:01:A1:40:C5:25:2C:EF:7D:70:26:24:98:E9
Authority key identifier: 4D:3C:FA:EA:98:D0:76:61:7C:1E:AA:CE:93:47:E2:D4:A7:3C:D4:4F
Certificate issuer:       /CN=4d3cfaea98d076617c1eaace9347e2d4a73cd44f
Certificate serial:       0198A04D948CDB649F7D5C3FFD0A842EF13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
Manifest number:          0167
Signing time:             Tue 12 Aug 2025 22:01:35 +0000
Manifest this update:     Tue 12 Aug 2025 22:01:35 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:35 +0000
Files and hashes:         1: TTz66pjQdmF8HqrOk0fi1Kc81E8.crl (hash: PEdDR0Rzq8drojB9Z2GrGiyv/1ykKZhbB4Bj6J3VCPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4d:94:8c:db:64:9f:7d:5c:3f:fd:0a:84:2e:f1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3cfaea98d076617c1eaace9347e2d4a73cd44f
        Validity
            Not Before: Aug 12 22:01:35 2025 GMT
            Not After : Aug 13 22:01:35 2025 GMT
        Subject: CN=fe034e8942b2ea01a140c5252cef7d70262498e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:a4:d7:9c:4a:1f:68:27:5f:05:93:87:8d:
                    9c:68:05:b4:21:9c:0b:fd:20:41:8a:f1:f2:c6:5e:
                    d9:34:5c:7d:a1:2e:5a:af:d3:74:ca:69:51:b9:5a:
                    f8:31:d1:f1:1b:d4:89:cc:b3:dd:1b:f5:80:0a:08:
                    14:ff:ff:97:c9:d3:5d:da:52:7b:b5:b7:b2:83:c3:
                    ad:4b:32:e1:10:f8:20:fc:f4:4c:4c:e1:4f:83:4c:
                    e1:1c:e9:67:f1:f1:e1:48:fa:25:47:4c:cd:17:8d:
                    01:9a:31:89:bf:ed:f7:a5:77:57:ea:b2:03:5c:fb:
                    ba:8f:b0:6e:68:5c:de:d7:eb:0a:53:bb:61:20:58:
                    ff:2e:a4:86:33:48:52:2d:5c:37:db:ea:7f:c6:59:
                    ac:b0:69:00:0f:df:a1:62:3e:9e:b5:c2:49:c2:9e:
                    68:c0:ce:9a:bd:72:7e:13:e1:cc:78:eb:17:45:1f:
                    af:10:58:a5:c6:3a:8d:05:7c:e2:b2:7e:4b:9c:af:
                    3b:da:15:15:02:bd:63:04:3c:31:4c:d4:56:c4:a4:
                    de:42:b8:ad:ac:3f:20:f4:55:2f:b9:81:d4:59:e6:
                    8c:47:cd:2c:e4:29:c7:56:4c:16:e8:e2:e5:6b:b9:
                    ad:90:50:72:01:63:61:2a:66:03:ff:47:da:bd:73:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:4E:89:42:B2:EA:01:A1:40:C5:25:2C:EF:7D:70:26:24:98:E9
            X509v3 Authority Key Identifier:
                keyid:4D:3C:FA:EA:98:D0:76:61:7C:1E:AA:CE:93:47:E2:D4:A7:3C:D4:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3a:17:e7:d3:7f:80:2b:2b:c1:14:8d:df:c3:9c:0c:41:a6:
         8d:c1:ea:d6:20:24:9d:d6:e6:ca:cb:49:11:d0:52:6f:e4:fe:
         4a:dc:67:b2:43:ca:15:28:a8:13:b2:c0:67:1a:ff:69:45:b9:
         9a:cd:18:4c:c7:85:6d:d6:e1:0d:ed:a8:41:ce:21:19:9e:24:
         84:fc:e3:c7:5d:de:35:1a:5e:29:4b:71:3f:73:fc:2f:cf:96:
         59:fb:a4:78:7d:00:bf:71:7f:ef:ce:91:f1:17:8b:78:be:61:
         1c:bb:dc:3b:1e:af:2b:62:26:c0:43:aa:25:ac:b4:f2:3a:0c:
         01:6e:40:07:96:f8:25:3c:11:a8:5b:f3:ce:c0:22:25:1e:7d:
         02:85:e4:df:fb:48:db:3f:2f:a0:37:50:f3:de:8d:4d:85:50:
         95:dd:b9:6d:31:6f:ed:68:54:3b:27:e9:45:ff:a4:e8:b5:3d:
         bd:08:ca:3b:79:e1:67:84:8c:b1:5a:e2:1a:e0:f2:b1:51:b5:
         d5:27:76:f8:57:30:25:91:bc:4e:8b:c0:b1:d2:c7:a4:97:00:
         03:7c:b5:d1:b5:30:67:2e:b9:ff:c0:06:91:cf:8f:d5:eb:c3:
         d9:6d:b3:fb:d0:6a:eb:36:7f:90:f6:3d:24:93:d3:f3:45:f4:
         1d:13:74:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:25 2025 by rpki-client