Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
File:                     T_TbtnXuCOi72XQHoafv2RkZ5zg.mft (raw, json)
Hash identifier:          E+OMmNfQwU1wy2ymZ6zkkNPMcDOm1GjLw2czZ94n5Mg=
Subject key identifier:   AD:78:DE:36:BB:92:DB:73:06:69:13:CE:03:53:68:88:33:F0:58:5A
Authority key identifier: 4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38
Certificate issuer:       /CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
Certificate serial:       01988B10333EA84A62037C4B1A56654A107D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
Manifest number:          0F39
Signing time:             Fri 08 Aug 2025 19:02:31 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:31 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:31 +0000
Files and hashes:         1: T_TbtnXuCOi72XQHoafv2RkZ5zg.crl (hash: jm/sGRK0ZGdnFb2I+hfK9FSRMP/eveDreI3kchM+vCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:33:3e:a8:4a:62:03:7c:4b:1a:56:65:4a:10:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
        Validity
            Not Before: Aug  8 19:02:31 2025 GMT
            Not After : Aug  9 19:02:31 2025 GMT
        Subject: CN=ad78de36bb92db73066913ce0353688833f0585a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:fa:55:b7:4a:69:c6:c7:32:3b:5e:40:d6:
                    09:53:2a:8a:88:31:ad:1c:9a:b7:09:9d:c9:ba:06:
                    4b:18:3b:5d:ae:f5:8a:40:0c:93:b7:78:64:ce:1c:
                    d6:9f:7b:ee:80:76:80:57:5f:ef:ac:f6:48:1c:4e:
                    60:3b:e9:c4:30:98:bb:ea:8d:e2:cd:83:9c:ed:f3:
                    8f:15:35:46:71:36:65:e5:7c:03:04:07:26:98:ca:
                    7a:0d:55:f7:b6:cb:cc:b6:cd:65:d1:dc:5c:11:0a:
                    5a:20:df:1a:2c:b6:43:de:3c:c7:43:22:38:bd:be:
                    a9:a0:fe:33:64:12:47:a1:db:24:9c:aa:35:74:35:
                    d4:d6:47:e9:92:99:b2:eb:64:ac:85:97:43:22:36:
                    d5:60:cc:46:d2:1e:04:0f:c1:94:a1:2d:c6:88:cc:
                    74:16:ad:21:3b:91:5b:bd:95:89:55:a2:19:7e:12:
                    51:6c:ee:fd:00:b7:2b:db:c4:c0:89:e3:20:f6:af:
                    ec:88:4e:8e:b7:73:bb:ed:28:09:c2:8a:1a:23:14:
                    87:05:22:e5:27:dd:0c:9e:08:b5:7a:31:8b:d1:3b:
                    0d:41:ff:7f:0f:d5:e5:f7:9e:91:9f:30:53:f6:db:
                    98:2d:db:15:a7:69:aa:a7:d1:a3:d6:03:66:32:56:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:78:DE:36:BB:92:DB:73:06:69:13:CE:03:53:68:88:33:F0:58:5A
            X509v3 Authority Key Identifier:
                keyid:4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:12:c5:04:7b:12:b9:37:9a:b8:0d:c9:f2:5b:51:20:24:62:
         73:f0:7c:cb:b8:50:2a:3e:46:10:81:7e:dc:f3:19:03:d4:d7:
         a8:55:91:69:09:83:6c:76:26:27:9d:85:f2:c9:a0:54:fb:ef:
         fd:e8:77:fd:83:18:8d:8f:5b:48:b1:32:24:8c:25:11:a0:83:
         56:6d:51:22:6e:b1:aa:b3:91:1a:cd:81:70:23:b9:6c:45:db:
         c4:99:1a:3a:90:aa:62:6c:99:f8:83:c3:1d:6d:0e:a7:f4:06:
         ba:ca:0a:81:79:66:26:ff:9d:83:dc:fa:ac:36:71:e0:63:3e:
         48:d5:f2:7d:10:04:9c:d2:3a:34:aa:4c:6e:3f:0c:82:59:84:
         c8:66:0d:df:e1:28:12:35:85:e6:26:04:89:29:03:96:91:0e:
         c4:68:1b:8f:1a:57:7c:c1:c4:51:51:8f:1b:31:dc:19:cc:cd:
         8a:14:a6:db:9d:da:4c:45:30:f9:61:71:7c:8f:07:9e:6d:d7:
         d3:11:b3:7d:d3:67:70:b1:51:64:0e:a8:9e:5e:82:54:27:a9:
         1f:47:11:60:64:14:57:ff:e5:0b:34:30:33:1c:ca:8e:10:21:
         77:7d:d4:c3:9e:07:a5:f8:1a:c2:57:f3:26:8b:bf:f2:bc:74:
         53:bd:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:18:54 2025 by rpki-client