Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File:                     TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier:          /YDBbBHhW3u0l+keHoNt0qrTfkdpR0slLGofCZy+6bY=
Subject key identifier:   9E:0E:83:BD:E7:7F:91:D2:A6:82:A4:F8:53:48:AE:C4:5C:6C:0D:EA
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer:       /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial:       0198A1CD5893FFC0EA3BA20007DB060160EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number:          1049
Signing time:             Wed 13 Aug 2025 05:00:45 +0000
Manifest this update:     Wed 13 Aug 2025 05:00:45 +0000
Manifest next update:     Thu 14 Aug 2025 05:00:45 +0000
Files and hashes:         1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: 8CE3fWqvQjF4pX8OGJfyToLG3EiAzgdvuDRnRMZ4oF4=)
                          2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 Aug 2025 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:cd:58:93:ff:c0:ea:3b:a2:00:07:db:06:01:60:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
        Validity
            Not Before: Aug 13 05:00:45 2025 GMT
            Not After : Aug 14 05:00:45 2025 GMT
        Subject: CN=9e0e83bde77f91d2a682a4f85348aec45c6c0dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:06:ae:28:a7:b1:77:96:58:21:e2:5f:c0:
                    81:ac:9d:62:76:6f:4a:bf:6d:66:d4:3f:6b:f0:52:
                    73:18:b2:95:aa:94:3d:0b:62:82:67:1d:6f:c5:96:
                    2a:04:27:c7:45:7c:30:aa:25:6f:50:af:49:52:8f:
                    c5:e7:47:0c:1a:6c:2e:15:3d:c6:35:a2:e7:b0:2c:
                    ff:89:6e:01:52:0d:12:72:05:3d:21:bd:dd:e7:0d:
                    fe:d3:dd:0b:67:6b:24:39:65:ec:ba:f8:41:23:78:
                    ea:21:4a:ae:80:c1:3e:df:0b:9a:3d:19:7e:48:17:
                    4a:20:9e:00:4f:86:2d:1a:b1:26:be:53:20:d0:d2:
                    2b:31:d4:44:a0:bb:b6:34:d9:c8:5b:a6:11:79:e0:
                    fd:d3:f7:95:8c:f7:c1:f8:15:9a:89:4d:de:30:63:
                    81:4c:c2:20:c0:69:22:19:57:f6:a1:15:2a:3a:1c:
                    e7:67:3c:46:00:04:57:a3:0d:a1:be:55:b3:ac:7e:
                    bb:41:c6:26:f4:73:00:cf:e1:47:57:b9:13:2f:41:
                    50:c2:f5:5b:97:6e:90:07:54:37:50:9f:6f:09:e7:
                    94:e7:e2:2e:64:8a:a9:9f:83:6f:03:49:36:7e:51:
                    f8:37:67:4e:8e:90:0e:c7:b6:53:cb:42:5b:07:1f:
                    7e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0E:83:BD:E7:7F:91:D2:A6:82:A4:F8:53:48:AE:C4:5C:6C:0D:EA
            X509v3 Authority Key Identifier:
                keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:65:6e:29:7a:58:f6:84:1c:fa:a4:83:a9:4b:b0:8d:81:
         1f:c5:dd:bb:92:21:1c:5d:80:e6:e4:18:43:98:f9:8c:41:e1:
         f3:16:99:13:8e:41:b9:73:98:72:38:9b:31:de:15:3e:76:de:
         8e:b8:87:12:05:bd:3b:0d:dd:43:1a:9c:ca:b4:91:66:b2:41:
         f9:5f:ae:46:1f:2f:57:9b:ed:01:c9:69:c0:d2:df:89:20:53:
         5b:c8:2e:35:80:12:d0:86:f5:af:30:3f:83:a8:bd:2a:61:55:
         58:b7:d7:ad:20:f1:3a:28:7f:8b:fb:df:77:1b:41:a7:e0:d8:
         a9:16:3d:03:9d:3d:3e:38:b6:fb:1b:55:92:18:7c:21:65:13:
         06:88:06:5b:3b:9a:4c:49:94:7c:59:4e:ab:53:56:75:f6:1c:
         5f:20:94:48:a5:8f:0f:1a:12:98:0b:7f:7b:9d:36:77:4d:3e:
         da:ac:b0:d6:2f:d3:ad:38:0c:9c:a2:98:ff:a7:4f:8e:c2:10:
         81:28:dd:5e:ec:7a:c2:d4:c0:92:82:3e:e9:5c:9d:d6:c0:82:
         ff:b1:fe:35:21:46:d5:29:ce:8a:ba:7e:85:51:22:f1:cc:13:
         7e:2d:2c:52:d0:81:f1:57:96:c2:cf:82:65:43:03:5b:92:8b:
         6c:0c:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 14:55:42 2025 by rpki-client