Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File:                     TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier:          V5OLLYix9bHu4EFHeGPF1eCK5+urZ9v1CPAZcdyv+nc=
Subject key identifier:   E0:20:ED:63:0D:B3:35:D9:61:AF:81:30:FB:B8:88:ED:24:DD:A3:62
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer:       /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial:       019874BE6363AF5D66F643FB4F2CEEFBF812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number:          11CC
Signing time:             Mon 04 Aug 2025 11:01:30 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:30 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:30 +0000
Files and hashes:         1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: yIGhz7OeIGqXge38YdLv9Ln3QOPbRuw6uoj8dY+YwcQ=)
                          2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:63:63:af:5d:66:f6:43:fb:4f:2c:ee:fb:f8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
        Validity
            Not Before: Aug  4 11:01:30 2025 GMT
            Not After : Aug  5 11:01:30 2025 GMT
        Subject: CN=e020ed630db335d961af8130fbb888ed24dda362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:eb:52:cb:ed:18:42:84:23:21:cf:6f:b4:
                    af:85:26:83:ab:2e:55:98:47:50:09:03:b1:cf:68:
                    3e:4d:c7:d0:6f:8e:53:b9:f5:95:c9:45:e8:7b:f1:
                    95:29:cc:68:4f:c2:4a:90:b5:82:0c:e7:50:57:f6:
                    51:1f:29:3e:24:c2:65:2a:98:d6:e5:55:b9:7c:02:
                    bc:59:3e:16:53:a2:16:64:73:49:92:d1:d1:cb:28:
                    61:b6:fb:6e:ce:52:19:6e:2d:43:9c:b4:85:b5:0c:
                    77:a5:22:bd:ba:fd:85:ba:bf:13:39:88:d0:ef:f7:
                    85:64:5c:71:fb:fd:0a:59:68:e7:23:af:f2:85:45:
                    d8:32:19:ee:28:9a:b3:4d:11:4d:03:4f:3d:b8:0c:
                    b9:87:41:9d:a1:79:b1:50:86:a6:4c:7e:44:ba:02:
                    eb:7d:77:06:c1:b5:f6:b7:4f:ef:c2:a8:62:3d:f1:
                    73:38:7f:99:b9:03:5b:b4:64:34:89:7e:c9:73:5d:
                    6b:cf:58:a1:96:0f:ab:49:61:b7:9c:9d:18:c0:ad:
                    25:7e:72:dc:16:99:24:86:b4:0d:49:0a:13:8c:25:
                    26:a6:6e:64:8e:bb:bb:08:27:ba:b4:1b:c1:63:8a:
                    18:01:63:d2:2e:dc:09:01:5f:aa:a7:ec:e9:cc:82:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:20:ED:63:0D:B3:35:D9:61:AF:81:30:FB:B8:88:ED:24:DD:A3:62
            X509v3 Authority Key Identifier:
                keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:8f:af:3a:3b:7b:5c:c8:09:35:52:9b:7c:a5:6e:0f:5f:
         d7:ae:fa:5d:95:d8:94:75:79:43:03:d2:89:78:74:38:0e:de:
         f3:7d:07:30:92:f7:c1:c9:20:e6:bd:78:39:84:ca:c0:cf:6b:
         d6:83:9b:af:a4:e2:57:d8:56:50:e4:b1:8b:08:2e:5a:04:57:
         dd:4f:2c:bd:d4:7c:d0:2c:24:e4:42:f1:7e:ca:49:8c:3c:54:
         63:a6:6e:54:93:1a:06:ff:a7:8c:48:f7:65:7e:a2:b8:42:c3:
         36:40:f6:e2:71:91:db:4e:73:13:65:08:2c:da:8f:d3:23:4f:
         63:32:6b:d6:f6:fe:53:19:c0:51:cf:25:37:59:a9:2d:88:9c:
         31:6f:88:75:ba:1f:aa:9d:7f:fa:f5:eb:45:b1:4f:0f:17:46:
         9b:93:5c:fd:de:8c:ad:6f:ad:76:76:e1:81:e0:e8:78:04:a2:
         25:0d:6b:48:40:9e:8c:67:17:24:01:94:46:ae:f7:95:05:71:
         4b:ba:74:53:e8:5f:de:d6:98:ae:65:f7:d3:85:6e:72:03:83:
         53:1c:57:37:ab:66:31:45:d5:79:1c:5d:01:e2:fd:3a:b9:9c:
         34:0b:4f:a7:a7:a2:b2:22:d5:c6:3c:ed:eb:11:fc:eb:35:39:
         b9:9d:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:51 2025 by rpki-client