Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File:                     TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier:          bBE9gHb3X/HTg36FDNWGX/oVX3EvgkLKUvnNOhLK/Js=
Subject key identifier:   EC:51:64:28:BA:B9:0C:75:9B:07:3C:80:BA:64:23:80:EB:78:63:9B
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer:       /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial:       01987298CA8A97C82A191FF580B317013A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number:          1613
Signing time:             Mon 04 Aug 2025 01:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:12 +0000
Files and hashes:         1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: zkD+q5g8P3eDP5ES7XrqVC3U/F4+b/kwQH9neUfMZnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:ca:8a:97:c8:2a:19:1f:f5:80:b3:17:01:3a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
        Validity
            Not Before: Aug  4 01:01:12 2025 GMT
            Not After : Aug  5 01:01:12 2025 GMT
        Subject: CN=ec516428bab90c759b073c80ba642380eb78639b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:5f:64:33:6b:f9:fd:c4:98:a8:49:a8:0c:
                    01:74:89:03:0c:c0:6f:ad:3f:90:94:72:88:5b:fe:
                    4c:df:bb:ca:8d:02:ab:3d:01:04:ad:4c:e5:1e:43:
                    39:8f:1f:28:44:64:aa:79:af:37:a2:3f:d7:6f:7d:
                    76:9a:b8:eb:36:51:c3:9b:b5:69:cb:f8:c0:b3:70:
                    8e:87:03:70:f0:fc:32:5d:de:75:11:1d:71:ac:aa:
                    bc:1e:c6:a6:e0:1b:93:e4:37:66:6f:2a:df:42:63:
                    e0:3b:e9:74:26:ad:10:20:a1:fd:43:ed:f5:8d:72:
                    f8:33:18:68:10:e5:2a:f4:76:8c:db:b6:3f:74:a3:
                    1d:38:0a:5c:f5:28:f0:8e:b7:2d:d9:84:33:55:bf:
                    79:66:67:40:0c:87:5e:a4:b5:73:7d:3b:76:80:c6:
                    45:99:2e:cb:13:d0:91:17:d9:a1:25:69:ee:21:bc:
                    0b:1d:b4:b8:dd:0d:7d:f9:84:fb:96:c5:7d:e6:4f:
                    78:44:1e:61:fd:32:94:d6:b5:bf:4e:dc:88:9f:c9:
                    b0:84:90:99:1f:f6:04:5b:2d:01:c2:15:d8:b3:ce:
                    29:e7:f9:0a:2c:b3:2a:2c:d6:0d:08:4f:9f:3c:2e:
                    02:e4:4b:65:5e:d8:5e:ab:68:66:91:c0:5a:75:ef:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:51:64:28:BA:B9:0C:75:9B:07:3C:80:BA:64:23:80:EB:78:63:9B
            X509v3 Authority Key Identifier:
                keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c7:5e:c8:a5:a0:26:f9:39:bb:69:21:d1:58:08:52:77:32:
         93:a8:25:7f:5a:40:e3:49:52:bc:ee:a7:4f:5a:73:14:b0:30:
         56:43:c5:a0:33:4a:c5:d0:92:67:7f:5c:0f:5f:c4:df:19:a3:
         65:d5:26:1e:1f:a6:c2:d8:99:7a:eb:d8:37:c6:59:96:27:fb:
         f8:1f:c4:00:ed:a1:36:b2:fd:ca:b7:32:9d:61:a7:bb:03:a0:
         6b:18:a3:65:05:c8:7f:b8:41:63:f0:a5:75:9d:af:19:43:62:
         40:f1:4e:66:03:3c:5b:39:aa:11:ea:e6:6e:54:c4:b3:ca:83:
         23:b0:d4:fd:8f:e9:92:d8:8b:ea:83:8e:7c:ad:fb:1b:99:b2:
         99:47:ee:76:7c:60:76:21:42:f2:d7:fa:7e:69:77:31:ae:60:
         03:51:0c:74:06:a9:30:17:54:b6:89:a6:f2:6b:c2:3b:f7:f9:
         81:14:06:1f:ef:64:43:0b:f0:07:4d:ae:e4:f7:fa:b1:9b:e7:
         84:41:56:8e:f0:23:c7:8a:f5:c4:b6:d6:9c:26:f2:09:2c:d6:
         55:2a:6e:78:12:4d:d2:b1:aa:34:f7:30:8b:5f:d1:19:80:26:
         b9:0c:5a:dd:70:56:92:6c:56:27:55:38:08:9c:5c:63:8b:0a:
         2e:10:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:30 2025 by rpki-client