Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File:                     TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier:          wfEW0QLJc6ObqsAfZA/al75ZG9tIVMbU7XBhwzc1SzU=
Subject key identifier:   B6:BE:A8:6D:57:88:1F:FF:7C:55:F3:FA:D1:0A:ED:25:D2:75:46:14
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer:       /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial:       01987C408685E7513D74033A65ADB19C1049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number:          05B9
Signing time:             Tue 05 Aug 2025 22:01:00 +0000
Manifest this update:     Tue 05 Aug 2025 22:01:00 +0000
Manifest next update:     Wed 06 Aug 2025 22:01:00 +0000
Files and hashes:         1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: 752aFGh+ZNxS0tAonc4qzmaPP0nyqPErUDPLEcrvgNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:40:86:85:e7:51:3d:74:03:3a:65:ad:b1:9c:10:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
        Validity
            Not Before: Aug  5 22:01:00 2025 GMT
            Not After : Aug  6 22:01:00 2025 GMT
        Subject: CN=b6bea86d57881fff7c55f3fad10aed25d2754614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:19:52:81:8c:c0:85:41:8a:1d:0f:2c:37:
                    bd:78:92:ba:1f:1f:4c:9b:39:79:e4:67:2b:0b:33:
                    71:a2:1b:b8:ea:21:f2:61:2c:a6:57:4a:8d:6f:84:
                    b0:87:6d:f3:42:36:b1:97:8d:c3:ca:a8:5f:6e:68:
                    6d:47:64:08:3e:eb:f5:26:8d:9e:d3:61:da:15:81:
                    5f:dc:25:08:59:3e:79:0a:82:23:bb:a5:48:52:a3:
                    db:a9:60:b9:bc:bf:1b:5c:df:f3:19:fb:c0:26:bd:
                    39:c0:21:ac:b3:4a:45:4e:46:0d:78:1e:05:8e:51:
                    a6:f6:fa:45:82:b1:4a:d8:ae:5e:81:e3:5e:c2:99:
                    a9:76:fc:e0:e5:85:ed:51:8b:bc:68:18:03:57:32:
                    62:2b:54:00:c2:c7:0f:80:86:8f:de:a9:c9:0b:2a:
                    a8:bb:7b:5e:69:36:42:03:aa:d1:aa:d4:82:49:53:
                    e7:82:9a:c8:db:0e:25:03:cc:c6:2d:d0:a6:e6:c2:
                    76:ed:fd:44:fa:47:3a:6c:69:70:c1:5f:c2:d5:2d:
                    e1:96:ea:bc:95:33:94:75:43:1d:2c:70:5a:a4:0e:
                    f4:e9:ed:5f:8e:e3:1d:64:5d:8b:71:dd:b0:25:89:
                    d1:36:93:16:a4:8e:d4:42:5b:00:e1:67:b7:a8:48:
                    f5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BE:A8:6D:57:88:1F:FF:7C:55:F3:FA:D1:0A:ED:25:D2:75:46:14
            X509v3 Authority Key Identifier:
                keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:df:9d:1b:f8:18:f0:c0:6b:ea:8d:df:58:08:fe:2c:e7:69:
         1e:80:26:70:8f:eb:cf:d5:32:bf:11:3f:99:74:fa:f8:09:c8:
         64:51:25:8f:e3:46:ce:36:a5:ab:95:cf:eb:17:82:6f:68:c8:
         6d:24:ac:29:f1:1e:83:88:d0:20:a3:eb:48:f7:86:fe:fe:a0:
         04:f7:89:8b:d0:ed:f1:57:41:d4:75:53:df:cf:10:86:7f:71:
         b5:a9:41:44:47:e3:4b:7f:ba:65:d1:3c:74:28:59:69:47:32:
         9a:c0:ae:6f:f1:02:d4:84:2c:7f:cb:81:8d:99:ac:8a:bc:c2:
         97:16:9f:fb:28:4b:cb:03:2a:bd:09:36:86:3f:dd:fa:46:31:
         aa:1f:83:a3:bd:cc:e2:81:d3:01:cd:ea:98:1f:9d:30:0e:82:
         9e:fc:35:28:2f:c7:20:03:9e:63:38:7b:0f:15:e2:44:8f:fe:
         ff:11:7c:55:aa:d6:b0:c8:5a:d0:ed:8b:56:61:9d:06:cd:21:
         2a:27:72:77:83:d9:84:c0:03:fb:be:cc:40:9c:d6:7f:c9:9d:
         4f:1b:86:cb:ac:0a:98:a6:31:20:69:7c:d2:81:16:1a:db:28:
         7d:53:56:e7:d3:c8:ae:6d:e5:85:c2:eb:bf:41:10:2b:b4:00:
         7a:b5:4e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:13 2025 by rpki-client