Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File:                     TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier:          WtT4L/bv35NDfgCBaNKBuRzg7kiJm1JP0qW0VrudsFw=
Subject key identifier:   5C:F5:EA:A4:18:AA:AA:07:57:18:04:B5:59:4A:12:7E:D5:E3:27:50
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer:       /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial:       019A50E33280967574AB07B5DBECDF2DF326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number:          170F
Signing time:             Tue 04 Nov 2025 22:00:58 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:58 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:58 +0000
Files and hashes:         1: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: kCc3pBBww15Kb7caZHInSrhmG5qM/gmyyb2F8Af5SjU=)
                          2: pdjC9ITQ24acWwqpMZ438xSZhiA.roa (hash: J1OLMcnc+nGL4fyVYlLU268vrwR6/zxGbhF2T7OJ2uY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:32:80:96:75:74:ab:07:b5:db:ec:df:2d:f3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
        Validity
            Not Before: Nov  4 22:00:58 2025 GMT
            Not After : Nov  5 22:00:58 2025 GMT
        Subject: CN=5cf5eaa418aaaa07571804b5594a127ed5e32750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:36:c2:3b:0a:76:c5:e8:15:52:55:d4:df:9b:
                    ad:0b:7d:48:39:05:9d:20:4a:ae:0f:68:be:33:17:
                    8b:46:85:8c:32:3d:41:0b:17:fb:40:43:66:b3:2a:
                    85:f9:e0:33:63:50:7d:24:e3:09:e0:1a:89:14:1d:
                    77:d2:70:53:d3:23:0a:c0:98:82:8b:0e:c0:9e:c3:
                    c9:06:69:fd:37:da:85:2d:0c:97:01:a0:1a:d0:95:
                    ad:33:e8:4c:52:43:80:3d:76:b5:b1:10:f5:78:9a:
                    cf:52:16:cf:1e:d1:1f:95:5e:20:0a:7a:0b:1d:3b:
                    09:42:32:ec:75:e1:1f:09:0c:8a:4e:fa:9d:86:e6:
                    46:33:b5:d2:16:14:81:6d:59:23:f1:cc:43:ce:ea:
                    88:ad:9a:4d:4a:54:14:10:cf:56:c4:3f:28:07:96:
                    d2:c9:04:56:d4:35:1c:a1:fb:6a:c2:f5:9b:27:1e:
                    d5:2c:b2:e6:aa:85:0e:04:ee:5b:7e:7d:61:63:1b:
                    ba:7f:35:72:d1:f2:f2:dd:72:f4:4c:27:7b:ff:50:
                    a4:f2:f1:5e:46:98:46:35:38:a6:f7:66:c8:78:59:
                    45:15:b2:1f:43:8c:cf:eb:f2:fe:88:68:37:40:f8:
                    7f:ae:81:b3:18:a4:5f:53:8f:e1:8b:00:9a:fe:5c:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F5:EA:A4:18:AA:AA:07:57:18:04:B5:59:4A:12:7E:D5:E3:27:50
            X509v3 Authority Key Identifier:
                keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c2:e5:ae:99:c4:bc:07:00:3c:89:ca:14:94:bf:5d:42:97:
         5e:ea:46:aa:97:4c:d8:aa:2f:d7:b8:40:c7:4a:91:8e:77:0d:
         63:6e:14:0e:df:cb:23:e5:ce:b7:7f:09:dc:80:c5:28:c7:0f:
         68:ef:79:9a:96:b1:72:c5:b2:96:fb:c1:29:15:ac:88:cb:a9:
         a9:f0:a3:68:bc:c4:70:e7:26:fa:4b:b6:4d:b0:20:05:03:84:
         6b:d9:39:ee:ba:64:16:42:14:9e:31:9f:49:b4:f8:fc:3c:0f:
         fa:8e:15:b1:c5:6f:5d:92:ed:6e:91:22:ad:2b:6a:c9:5b:a4:
         54:48:fe:15:07:86:bf:42:98:7b:53:b8:2e:d1:49:5c:73:e5:
         10:9b:88:79:85:fd:e2:8b:d8:ca:29:64:6b:66:4e:f5:6c:41:
         2c:b2:06:32:dc:7b:95:0a:64:9f:04:53:15:f5:ff:ee:22:38:
         d6:8d:19:fc:c2:41:c9:28:e9:f3:d7:02:31:bd:e7:84:30:82:
         eb:03:41:20:ca:20:51:91:21:d7:51:f8:fd:10:92:07:d2:b9:
         ed:fe:11:a4:96:71:26:22:18:9a:ee:5a:3c:87:a9:a1:4a:ce:
         c7:e1:55:02:d7:7a:93:32:f0:d9:84:fa:fb:9e:2e:0e:2d:09:
         d0:4b:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:11:53 2025 by rpki-client