Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
File:                     v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json)
Hash identifier:          nswB0MfKS4BAXXDECS2VJNjFyMsZ1jE3MrPvC7VIUC8=
Subject key identifier:   C6:12:93:17:71:33:A2:AE:00:9D:F0:35:66:AB:21:EB:E1:1C:AC:DC
Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
Certificate issuer:       /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Certificate serial:       019872CF7429F7DD47D1D35CB6382B8B03E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
Manifest number:          044F
Signing time:             Mon 04 Aug 2025 02:00:54 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:54 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:54 +0000
Files and hashes:         1: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: 09xDFAnZnh8x/hcxx8nG1SS57QlxUh8LSWiAv+Lz2vk=)
                          2: wvpX23IN2w8d2-KXP6RepnCHP3g.roa (hash: hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:74:29:f7:dd:47:d1:d3:5c:b6:38:2b:8b:03:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
        Validity
            Not Before: Aug  4 02:00:54 2025 GMT
            Not After : Aug  5 02:00:54 2025 GMT
        Subject: CN=c61293177133a2ae009df03566ab21ebe11cacdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:7d:16:da:3d:30:d1:21:8b:96:92:f5:0f:
                    d5:a4:54:e5:bd:2c:44:23:78:67:56:bd:ca:21:d4:
                    30:92:00:49:1f:f1:a4:ec:b9:45:b0:5c:99:27:8c:
                    99:ab:13:49:11:85:4c:79:00:79:a9:dc:eb:50:82:
                    a7:a3:e3:cb:48:da:d4:26:d3:e9:90:3e:11:a1:70:
                    2e:76:f5:b9:1f:0d:b5:3b:6d:46:8d:3b:40:2d:aa:
                    25:34:ab:a9:df:26:d0:59:76:1a:b1:06:6f:01:6f:
                    b9:5f:84:0f:b7:57:f1:e0:be:0f:65:6b:99:91:47:
                    02:19:16:ed:57:6c:24:95:57:6e:bf:29:60:60:ae:
                    49:14:d6:09:8d:b6:07:79:53:cd:db:8a:56:98:7b:
                    ab:83:fc:29:51:c6:df:ff:47:7b:88:17:ae:25:90:
                    6c:75:a5:31:15:0e:ee:d6:4a:e0:59:6d:8c:7f:65:
                    a6:7c:64:94:d1:66:a9:32:0c:6a:3f:a1:67:e5:8d:
                    02:c7:ac:16:31:bb:c5:32:d7:d8:1f:c4:6b:e1:bc:
                    f3:bc:45:ca:33:0e:23:06:ec:33:1f:3f:21:7a:43:
                    96:ae:9c:7e:60:69:a3:92:a2:9c:8a:07:f9:ce:eb:
                    b7:b9:a5:a8:2b:5d:e6:e8:6a:f7:a6:37:4d:33:0b:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:93:17:71:33:A2:AE:00:9D:F0:35:66:AB:21:EB:E1:1C:AC:DC
            X509v3 Authority Key Identifier:
                keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f0:62:df:d4:52:88:0a:3e:2f:a0:d5:d1:e7:ea:e7:fc:4d:
         65:f3:57:09:d0:00:a7:45:44:96:9b:ac:18:49:1b:96:f4:d6:
         ce:00:d4:83:1d:4e:2f:55:da:33:de:11:71:31:d8:85:1f:5e:
         d8:5d:b8:5a:27:aa:68:47:f5:0b:2c:85:10:74:cf:af:2e:15:
         db:c2:a3:a3:e6:7c:78:ff:33:0a:0f:f4:35:b4:2e:c5:cf:3c:
         c0:a5:59:c8:d2:99:ed:94:b2:34:e6:d7:a0:fe:df:1d:2d:01:
         1c:15:b8:b2:e5:db:67:8a:27:e6:88:0c:5d:40:d2:6f:ab:36:
         e7:5f:3b:ea:72:02:72:af:ab:a7:bd:5b:ac:b1:b4:70:0e:84:
         0e:0a:9d:4e:88:49:f8:37:c8:64:be:47:d6:55:89:b0:f0:0b:
         e6:e7:e1:9d:c4:f1:ed:09:76:18:6c:05:c4:33:89:41:17:03:
         6d:d5:e9:33:b2:30:99:02:9e:cf:99:c9:83:86:ca:e2:d8:6b:
         15:1d:04:4a:b1:ea:11:db:e9:8e:30:4a:3d:4d:2e:61:1c:31:
         ae:9d:14:4b:17:33:64:56:fe:72:50:af:7a:94:75:3b:1f:a1:
         47:2c:7e:ae:5e:9d:19:a6:78:c9:10:3a:1d:c7:30:9b:24:f3:
         9f:29:a5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:46 2025 by rpki-client