Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
File:                     TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json)
Hash identifier:          cwgXVsMVwb+hUQZOVGK78w/7eyh/K6Tu4Yeu5gdwXpw=
Subject key identifier:   9E:E8:34:3E:02:5C:FE:47:AE:92:07:E5:A7:EC:D3:A4:13:60:85:A1
Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
Certificate issuer:       /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Certificate serial:       019873E1D5270F145172808011D38480217A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
Manifest number:          1613
Signing time:             Mon 04 Aug 2025 07:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:36 +0000
Files and hashes:         1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: +g7R4DEXQbaJp+DirAmDV6eXNwoDklI8nmMb4BzSsrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:d5:27:0f:14:51:72:80:80:11:d3:84:80:21:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
        Validity
            Not Before: Aug  4 07:00:36 2025 GMT
            Not After : Aug  5 07:00:36 2025 GMT
        Subject: CN=9ee8343e025cfe47ae9207e5a7ecd3a4136085a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:79:ff:e2:15:6b:9a:a6:d2:cb:db:b6:52:
                    f6:7a:60:0c:e3:74:fd:de:db:a6:69:0a:85:92:41:
                    54:ff:34:dc:96:46:11:48:da:8a:4a:80:7a:a5:c2:
                    ed:bd:99:82:8b:75:2e:01:56:cf:2e:0d:17:5a:70:
                    9e:32:0d:68:e0:f7:8f:ae:dd:93:f4:e6:db:30:99:
                    b8:80:b8:e9:8c:5b:7c:32:a6:f2:40:41:7f:f5:a9:
                    78:69:88:50:37:e4:b6:1e:c1:4d:66:74:a6:9c:84:
                    54:41:aa:79:61:cc:d0:21:b4:43:79:3e:8f:2f:af:
                    16:7f:6e:8a:20:cb:3c:36:2a:64:00:32:c3:f0:25:
                    41:73:09:1d:84:52:d3:a8:85:be:5c:6e:83:e1:32:
                    cf:4f:8d:af:6a:2d:d1:b1:ec:0f:6f:bc:cb:c9:b6:
                    da:cc:67:1d:cb:3c:1f:a3:72:91:ac:43:22:76:36:
                    b3:6a:23:70:b7:af:b4:a1:ed:fa:59:32:41:ff:8f:
                    56:cd:48:89:7d:78:b4:1b:27:33:34:2f:f4:29:f5:
                    f3:f1:76:b3:98:c1:57:03:90:08:22:f3:8a:ac:e2:
                    76:23:6c:ad:e8:c9:74:ce:43:c5:79:bc:35:62:bd:
                    24:35:92:59:f9:46:e3:71:f4:a4:ed:44:66:05:eb:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E8:34:3E:02:5C:FE:47:AE:92:07:E5:A7:EC:D3:A4:13:60:85:A1
            X509v3 Authority Key Identifier:
                keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:35:88:22:3a:89:f1:30:70:c2:5c:fe:16:cb:91:f8:47:59:
         4c:23:58:dd:91:ef:47:98:02:b5:47:b5:7a:3d:f0:88:e0:40:
         17:09:44:17:4c:e9:e0:dc:92:d4:70:c7:89:1a:13:3f:f2:94:
         b0:d7:3e:2e:24:84:dc:c2:30:a8:94:e5:15:97:a2:7f:0e:32:
         3c:fe:b8:66:eb:bb:c1:bc:51:ec:e7:28:6e:92:de:b4:99:f3:
         5f:a0:34:e9:01:d2:78:02:28:dd:5b:ad:fa:59:ca:3d:48:6a:
         9e:2e:fc:37:31:d6:3c:2b:b9:db:2e:81:64:55:8a:d6:11:1d:
         95:24:7c:ac:ab:40:c2:4d:a7:f8:3f:f1:b9:20:ab:22:e0:64:
         cb:10:11:4f:11:f7:d2:92:fb:2c:91:8a:bc:c3:8e:c1:b3:95:
         d9:bd:09:0e:bb:75:1c:d3:0a:ae:d7:29:fa:71:45:75:6f:36:
         2e:9f:1e:60:dd:b7:bb:2e:1c:fb:c0:30:98:1a:1b:e8:26:e2:
         cf:4b:74:bb:97:67:8a:e7:f3:be:e1:d7:fb:ce:fa:f4:fd:cc:
         3d:e4:74:c9:80:31:df:5e:13:9b:c6:27:d5:e1:a0:10:7e:57:
         90:26:57:29:a4:ff:30:2e:f6:7e:8f:63:ed:07:c6:56:ff:5d:
         95:1c:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:10 2025 by rpki-client