Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File:                     tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier:          Qb2oR8EyJYjCHaxr+6tRj/QToIcSN5MipJG+1MzJqpQ=
Subject key identifier:   22:45:FA:55:9E:20:AE:69:03:FA:5D:5D:84:93:34:3B:1D:9E:ED:0B
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer:       /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial:       019893DAC2F7BB626D6A0390C8FCB12AFFED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number:          1626
Signing time:             Sun 10 Aug 2025 12:00:44 +0000
Manifest this update:     Sun 10 Aug 2025 12:00:44 +0000
Manifest next update:     Mon 11 Aug 2025 12:00:44 +0000
Files and hashes:         1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: aSW1bKIWP+cbv7ZwgYZ9PyxENMAi/LX0DB4IRQvpulQ=)
                          2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:da:c2:f7:bb:62:6d:6a:03:90:c8:fc:b1:2a:ff:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
        Validity
            Not Before: Aug 10 12:00:44 2025 GMT
            Not After : Aug 11 12:00:44 2025 GMT
        Subject: CN=2245fa559e20ae6903fa5d5d8493343b1d9eed0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:50:73:3c:5d:e6:82:bd:6c:62:17:08:f4:
                    5c:df:b2:01:c3:40:b5:fc:d4:08:e6:2d:97:05:a0:
                    82:b7:81:45:07:57:2a:57:6d:e0:10:b2:7e:f8:df:
                    82:8a:2a:c6:41:82:0d:4e:19:23:fe:44:3c:4b:62:
                    d1:48:3b:07:dd:fe:05:17:c0:2b:6e:9f:ee:9f:f3:
                    e7:99:81:cc:9e:c1:4e:bc:73:2e:8d:85:39:1d:3d:
                    ae:7e:52:f2:6c:1c:01:1f:81:c9:58:ae:b3:4e:7b:
                    0d:ba:d2:fd:4a:bd:d4:a3:6e:f8:79:f7:c4:d2:70:
                    06:2d:23:9f:a3:b7:85:7b:b2:29:73:1c:1b:58:f7:
                    af:0d:92:51:c7:08:5f:17:74:a7:3a:61:67:2b:16:
                    26:3f:bf:dc:ca:ea:0f:41:b0:b2:15:4a:5a:cb:e1:
                    6f:46:f0:ae:2a:fc:76:ef:39:90:8c:15:80:29:dd:
                    15:bc:5f:74:25:8f:56:5b:12:e4:43:0b:49:6c:4c:
                    59:48:85:7f:86:98:97:1d:dc:69:cc:85:22:1f:aa:
                    ca:c2:1f:b2:aa:ea:d0:93:bb:8b:3e:a0:11:89:64:
                    01:2b:34:98:d1:12:d4:37:d8:92:32:67:5d:13:d9:
                    33:29:d1:8b:2b:6e:09:bf:02:e6:df:75:84:ad:03:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:45:FA:55:9E:20:AE:69:03:FA:5D:5D:84:93:34:3B:1D:9E:ED:0B
            X509v3 Authority Key Identifier:
                keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:88:1e:71:77:4a:1d:a8:b8:55:ab:03:57:9e:57:0a:13:c0:
         75:76:db:b5:99:87:59:3d:b2:63:33:a2:9e:8b:bb:cf:09:be:
         44:24:f9:41:17:5b:69:f8:b3:4e:fd:12:7b:05:9a:83:39:46:
         e7:69:61:bc:ce:80:e4:ab:15:a9:ca:74:4d:8e:0e:a1:6d:e3:
         0c:b0:88:12:0a:be:2b:07:74:3f:81:4c:c2:a4:8b:96:5b:ac:
         2a:74:14:04:72:87:37:76:07:96:c9:2b:dc:41:ab:70:71:71:
         de:20:f3:82:69:ec:57:9b:a0:23:57:1b:6d:92:47:52:13:e3:
         78:2f:28:4f:c4:98:06:43:54:19:ac:03:e2:f7:4b:4c:39:11:
         0e:19:3c:17:b3:ce:f6:14:0e:6c:05:7d:5f:c8:fa:5f:c1:ef:
         72:7d:c4:22:63:85:57:16:a0:0b:b2:38:b2:2b:24:96:3c:b0:
         a6:1b:0c:ba:77:22:63:d1:b4:c3:c3:e3:6d:85:41:d1:4d:a8:
         eb:e8:12:a8:7e:a1:c5:4b:21:9e:30:b3:69:2a:6c:11:37:62:
         c4:7c:67:c0:aa:dc:be:a5:0a:6f:b4:f8:1b:5a:c8:f3:b1:68:
         57:c9:fa:8b:e9:18:48:f5:f2:11:86:a9:0a:71:fa:ef:84:af:
         13:57:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:56:06 2025 by rpki-client