Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
File:                     tme4cki-Ko4zew55BX2JQHmMd5o.mft (raw, json)
Hash identifier:          ynZX8rz3uzfV3zma2QF6HwZxCpxR20Y9alinU47TGdY=
Subject key identifier:   A0:C1:92:90:BB:1D:D5:0F:FE:00:82:4F:88:0B:71:DB:75:85:52:8F
Authority key identifier: B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A
Certificate issuer:       /CN=b667b87248be2a8e337b0e79057d8940798c779a
Certificate serial:       01987298AF83816E1425A55E3D44704F77D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
Manifest number:          0345
Signing time:             Mon 04 Aug 2025 01:01:05 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:05 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:05 +0000
Files and hashes:         1: tme4cki-Ko4zew55BX2JQHmMd5o.crl (hash: OWi4SGbmowMPwjeM99CVGkK3n+HIIXDdARR1+obknbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:af:83:81:6e:14:25:a5:5e:3d:44:70:4f:77:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b667b87248be2a8e337b0e79057d8940798c779a
        Validity
            Not Before: Aug  4 01:01:05 2025 GMT
            Not After : Aug  5 01:01:05 2025 GMT
        Subject: CN=a0c19290bb1dd50ffe00824f880b71db7585528f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:cb:8d:95:f2:42:aa:92:43:07:33:0f:03:
                    1a:8e:4c:7c:44:f4:8c:06:6c:82:db:a0:8f:4c:ac:
                    19:f4:81:a3:e3:6e:85:dd:22:e7:e1:7b:35:08:4e:
                    00:3c:d9:b6:39:b0:90:14:6e:f6:9b:b4:fe:1e:fa:
                    eb:c4:c5:57:de:fb:9d:84:4e:e2:fa:75:77:e8:d5:
                    e1:aa:66:ad:a8:75:d5:23:f3:b2:78:b8:b7:8c:13:
                    fc:02:1f:66:44:e2:e6:6c:d8:cc:2b:1a:2e:91:ef:
                    1a:6c:78:f3:76:be:43:b6:a7:c9:d1:5e:1c:9d:22:
                    8e:9f:7b:62:2e:44:99:65:37:d7:11:a3:a6:f5:92:
                    3d:bb:60:b2:a9:cb:cf:8d:f6:05:3e:ba:2a:a8:bc:
                    1f:8c:37:7d:29:f6:bf:6a:bd:4e:cf:6c:ac:df:f5:
                    00:62:fe:46:80:0b:00:3a:5f:af:f5:55:d3:d5:78:
                    f1:d4:f3:3f:e4:83:01:d3:d1:ca:0f:63:08:10:c0:
                    9b:fa:9f:fe:d0:18:a1:2e:de:0d:79:6b:fc:b7:9e:
                    47:98:6b:92:bd:a7:bb:57:73:1d:fe:89:fd:eb:ae:
                    fa:e3:a1:51:32:df:37:ed:87:d7:b0:d5:a2:95:8b:
                    e5:b0:a1:fc:c0:4e:73:f3:6a:39:11:22:5a:78:3d:
                    b2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C1:92:90:BB:1D:D5:0F:FE:00:82:4F:88:0B:71:DB:75:85:52:8F
            X509v3 Authority Key Identifier:
                keyid:B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:63:78:75:93:4d:0e:15:f8:86:48:85:2e:f8:e2:59:b1:
         8d:0a:1e:36:07:b9:68:d1:31:b1:8a:5d:29:ed:bc:fe:5f:a2:
         7e:40:9a:4d:45:14:69:f4:49:61:1d:71:d1:8a:e8:8d:43:94:
         02:fd:e8:80:ab:88:f9:f9:83:1b:8b:d8:b1:ab:04:f8:2d:93:
         42:07:10:bb:f3:65:d8:d6:05:5b:89:85:6b:80:8b:f7:4e:10:
         73:8e:b6:ac:85:aa:c3:34:46:11:dd:20:3c:38:a8:10:49:87:
         8e:a9:ba:d7:c5:48:1a:2a:bb:96:19:0a:95:00:61:71:0f:f0:
         28:92:71:e3:4c:d8:07:01:f7:c9:93:a2:f4:9d:37:d9:a5:b8:
         01:2c:98:1b:bf:2c:1e:18:d6:27:cf:9b:aa:b7:7a:b6:04:14:
         c2:62:dc:01:d2:87:0f:18:78:f4:d5:b8:12:a4:12:c8:59:01:
         b1:c1:d4:a4:40:f0:8d:46:aa:8c:9e:cf:09:bd:1c:02:e9:d0:
         86:9b:7e:bb:2e:fb:62:8b:17:1e:ad:f4:37:83:1f:c5:03:9a:
         bc:60:86:41:f2:14:76:c9:11:8c:1a:da:61:66:61:ae:22:41:
         4c:4b:43:37:d8:14:a3:55:f0:66:84:1f:8c:78:7d:f2:51:40:
         38:bb:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:06 2025 by rpki-client