Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
File:                     TEaPGBJltNlsooNaPlcMJnkDXf8.mft (raw, json)
Hash identifier:          nvX1AtmnxP6SeLsgbPgPEQwZv9iYlw56gCyo0ZKxzU8=
Subject key identifier:   78:C1:C0:B6:FA:4E:9F:ED:EA:0A:A0:F5:59:1C:66:3A:BB:BE:81:2E
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Certificate issuer:       /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial:       0198857A9F81DBB04F9D1BC0BB48A9D00107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
Manifest number:          1552
Signing time:             Thu 07 Aug 2025 17:01:02 +0000
Manifest this update:     Thu 07 Aug 2025 17:01:02 +0000
Manifest next update:     Fri 08 Aug 2025 17:01:02 +0000
Files and hashes:         1: TEaPGBJltNlsooNaPlcMJnkDXf8.crl (hash: bTwnx07CLedEfWEsSoywgPuNX5ia79HtuY+9cOeDWX8=)
                          2: TlMdFyo8UfqJ-RDrKLDhrg_5XKw.roa (hash: xU0L/Ky30tv9qoqHoWWKteKnPJXzN1H+V1CKVuBw5jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:7a:9f:81:db:b0:4f:9d:1b:c0:bb:48:a9:d0:01:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Validity
            Not Before: Aug  7 17:01:02 2025 GMT
            Not After : Aug  8 17:01:02 2025 GMT
        Subject: CN=78c1c0b6fa4e9fedea0aa0f5591c663abbbe812e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:69:38:2e:fc:57:2a:d5:e9:52:f1:a5:e1:
                    08:69:43:6d:58:fd:ec:c6:24:80:b4:50:25:f4:67:
                    6d:3c:e7:3f:b3:65:d5:2a:e9:c0:f9:66:c3:54:96:
                    ff:42:78:9a:14:cb:48:ca:47:a6:4f:e0:85:58:e3:
                    cc:b4:df:6c:19:35:ab:ef:46:77:58:3b:d3:b4:ab:
                    e9:fe:c4:c0:3f:76:7f:f8:06:ae:97:ea:3e:72:89:
                    00:34:58:ac:3f:05:07:85:ec:b2:95:84:36:fd:e3:
                    b8:38:76:a2:97:56:b9:83:d0:ee:fb:d9:70:95:fd:
                    2d:8b:20:32:7f:94:87:fe:27:78:f4:50:6d:0b:8b:
                    8c:75:12:7d:3b:a1:e9:03:68:f6:98:18:1e:1e:37:
                    61:1e:1c:60:a0:63:d9:a9:2c:1d:d2:08:f3:35:26:
                    14:07:4c:8f:d1:74:ba:89:fc:15:0a:41:7b:34:ca:
                    59:23:be:38:ab:94:34:49:22:5e:46:1f:48:a1:7c:
                    2d:c5:92:94:d2:88:c6:c0:44:54:b1:94:c1:60:1b:
                    23:0d:47:2d:0d:26:1d:ac:4f:95:17:c2:af:4c:c0:
                    b6:ef:17:aa:35:4f:53:c5:82:13:5e:53:e3:12:6d:
                    cf:4c:c4:38:9d:8c:b0:75:85:3d:15:6f:14:aa:4e:
                    a2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:C0:B6:FA:4E:9F:ED:EA:0A:A0:F5:59:1C:66:3A:BB:BE:81:2E
            X509v3 Authority Key Identifier:
                keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:bf:62:58:6b:10:90:84:98:99:75:b9:50:bf:3e:47:eb:ca:
         43:d3:44:4c:8a:79:70:7f:04:31:e4:10:92:f5:42:b0:3c:27:
         00:5f:0e:c5:c3:cd:4c:c8:a9:39:c2:e8:6c:5e:51:e4:0a:ea:
         0c:5d:01:0b:10:d2:93:53:12:33:e1:7f:23:2a:e7:25:81:cf:
         39:ee:aa:67:c4:41:74:26:99:a9:eb:c1:62:2d:6c:02:08:8c:
         ee:bc:87:8d:57:07:bf:12:48:9f:e0:d4:3a:de:ba:ce:95:36:
         5e:1a:ab:ad:e9:01:a5:70:6f:e1:ae:4c:01:6e:97:d8:52:fa:
         61:4d:48:01:04:87:21:d6:95:70:9a:f8:fa:74:eb:cc:dc:da:
         7c:7e:01:1d:fe:18:b3:7d:f4:11:50:ae:8b:0a:30:9e:31:33:
         09:80:20:8a:1e:73:56:69:56:9c:44:36:7f:14:89:1c:c6:00:
         ea:48:ed:38:78:4a:d5:08:22:88:c5:55:1b:cc:29:86:7c:28:
         88:d6:b6:68:3a:50:96:b1:f5:6e:45:79:7c:04:86:18:d1:dd:
         52:be:2a:d9:25:49:5a:df:30:1b:86:c7:78:61:ab:1f:9c:ad:
         dd:58:80:5b:e0:94:18:b2:57:27:07:bf:62:d4:e7:d7:c1:5c:
         8c:0d:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:35:49 2025 by rpki-client