Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File:                     1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier:          veWc63/LqVLuUrz2Z7s5nCxi3Mc7pYIBUZJEOWxpaWo=
Subject key identifier:   82:DE:FF:7C:DE:BF:CD:69:9F:30:92:AE:8D:A4:D2:EC:3E:29:A5:AD
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer:       /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial:       01989ECC7BC2F5460427B9F435339C115467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number:          0D03
Signing time:             Tue 12 Aug 2025 15:00:57 +0000
Manifest this update:     Tue 12 Aug 2025 15:00:57 +0000
Manifest next update:     Wed 13 Aug 2025 15:00:57 +0000
Files and hashes:         1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: 5yLXWXkril8McfwnJZa4XpMh+w5w3aBC7c5eZgH1yWo=)
                          2: abjDTRVBx93z2E7sN_HQNKnGE2A.roa (hash: yz4j9HyamSJCRl3OAqF2NjSGl0kugENBZv6tnB8JfMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:cc:7b:c2:f5:46:04:27:b9:f4:35:33:9c:11:54:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
        Validity
            Not Before: Aug 12 15:00:57 2025 GMT
            Not After : Aug 13 15:00:57 2025 GMT
        Subject: CN=82deff7cdebfcd699f3092ae8da4d2ec3e29a5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:b3:d8:f9:4c:b7:d5:f4:e4:be:94:22:4c:
                    b2:df:bc:c3:db:87:aa:2c:ec:91:57:16:37:9a:fc:
                    ea:58:43:ef:88:4c:e1:58:48:bc:01:53:64:d2:c4:
                    59:13:7c:05:9b:ed:48:b9:d3:ef:4b:93:b9:5a:83:
                    fb:f4:59:f3:20:13:12:cc:a8:81:a4:52:d9:e1:ac:
                    1e:1d:ff:28:09:6e:99:53:62:b2:39:78:16:a7:03:
                    06:d6:a9:2d:f3:6e:35:a9:48:f1:7a:c5:4f:e4:a6:
                    38:64:62:bf:f2:6d:02:1b:d2:cc:1c:b3:b5:93:74:
                    cb:b2:f6:ef:a9:3c:17:59:ed:10:15:39:03:22:e1:
                    2d:ca:94:fb:40:e9:cd:88:68:f5:7a:f6:9b:9b:95:
                    1a:83:5b:23:92:1a:fc:2f:7b:f8:4c:97:de:92:b2:
                    f4:7c:ac:85:0e:10:1b:dc:68:ee:dd:6b:a9:ff:49:
                    e4:1c:10:fb:dd:ce:a4:58:d2:f1:01:d6:77:fb:fd:
                    24:e1:9f:d8:0b:c9:8d:15:71:b7:77:9d:7a:5d:bd:
                    b4:af:e0:db:d8:8c:1b:5c:bd:41:c9:81:b0:cc:1e:
                    0c:39:6b:5f:be:7e:42:70:dd:6a:a4:20:63:54:52:
                    5b:58:1c:5b:f8:43:c6:0f:0d:16:33:6f:7a:55:ad:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DE:FF:7C:DE:BF:CD:69:9F:30:92:AE:8D:A4:D2:EC:3E:29:A5:AD
            X509v3 Authority Key Identifier:
                keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3e:9f:19:b9:74:28:16:af:6d:b4:db:aa:06:aa:2b:d5:41:
         2f:2c:d5:fc:74:02:94:b3:0d:06:02:d8:3c:93:04:cd:8d:73:
         4c:e2:ca:61:76:3a:f2:a6:c0:18:4f:6e:22:75:39:13:13:51:
         7a:61:fa:08:cb:a3:13:7e:fe:f4:6f:cc:55:97:b0:75:6c:00:
         62:aa:1e:38:ba:c1:20:85:f7:08:b6:c4:71:d7:4a:b1:4b:c2:
         7d:a1:74:84:2b:25:34:83:d7:4e:ff:4e:fb:28:94:b6:53:9b:
         36:b5:b1:98:ec:0b:b7:a7:5e:cd:34:22:e4:20:94:22:18:f0:
         10:6e:27:00:c0:d1:7a:18:ea:4d:c4:8d:17:b5:10:56:17:88:
         4c:ad:fe:19:a6:ad:f7:9d:ed:90:d8:01:ac:b4:e5:22:df:f7:
         bb:97:f3:33:5b:10:3d:58:10:d8:ec:b2:11:5c:42:42:16:48:
         9f:41:e6:89:da:b9:01:0a:f2:e9:e1:10:3d:be:ce:83:51:d8:
         8c:e4:af:0c:fa:39:53:7f:b0:18:9f:9e:b8:88:6b:fb:d3:bb:
         68:0d:82:93:7f:05:23:a6:5c:9d:2b:a5:80:6e:34:cd:3e:03:
         8a:b4:77:5a:3e:89:27:f6:b2:b8:02:33:bb:fa:a6:d0:57:c4:
         77:8e:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:25:08 2025 by rpki-client