Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File:                     TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier:          JHb/pUqn0cLaynhYu++/JNyVTbHHsgnyToOJ/HfMTuE=
Subject key identifier:   2A:66:96:10:00:E8:62:48:3E:EB:5D:14:38:73:79:E8:F3:C1:36:E5
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer:       /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial:       019848F73002EED71FC4D087371F35B1FB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number:          054F
Signing time:             Sat 26 Jul 2025 23:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:15 +0000
Files and hashes:         1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: t2z0JRUcN4DQDcCEN5vKKVzvGHvSZYJ8jtsJucYUUIM=)
                          2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:30:02:ee:d7:1f:c4:d0:87:37:1f:35:b1:fb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
        Validity
            Not Before: Jul 26 23:00:15 2025 GMT
            Not After : Jul 27 23:00:15 2025 GMT
        Subject: CN=2a66961000e862483eeb5d14387379e8f3c136e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:f6:16:85:84:28:3b:c6:6c:26:c4:bb:31:
                    d6:c9:dd:fe:27:02:45:7b:9f:99:92:00:24:14:06:
                    d3:85:5a:14:78:f1:ee:b3:e3:9e:eb:96:b2:f5:5b:
                    ca:73:a4:03:f2:ca:83:dc:93:7d:78:a5:24:7f:f8:
                    14:2c:7a:d5:96:4f:5d:39:8a:ef:b1:0b:08:15:a8:
                    41:1e:ef:ec:61:c8:f8:c9:e4:1d:dc:09:44:e2:87:
                    01:79:cf:db:ba:d2:e7:5c:13:8b:e1:64:f3:9a:9a:
                    2a:c9:f2:ab:50:75:b6:9e:f5:66:44:c8:91:8f:39:
                    b5:ab:c9:45:e1:4e:03:25:56:a3:a9:43:35:f6:f7:
                    5b:ea:04:a2:63:b1:db:4a:93:ab:48:fd:83:36:ad:
                    62:bd:33:fc:02:67:ee:93:f2:6a:08:0f:69:46:e6:
                    7b:ef:46:b2:65:22:58:d2:a2:bb:0d:28:4d:91:a1:
                    8e:a6:d8:68:61:d9:18:8e:ce:72:6b:e7:e3:38:ad:
                    57:a7:2f:8c:42:b7:79:e1:6b:72:8d:6e:61:2c:12:
                    c5:e2:d9:f2:ae:a3:5f:63:fa:8c:37:b7:d8:63:7a:
                    e6:06:69:bc:88:6d:49:80:bb:0c:91:19:f3:9f:d3:
                    d6:2f:4b:6d:2b:0e:24:09:9a:9b:cf:0f:f2:a1:1c:
                    10:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:66:96:10:00:E8:62:48:3E:EB:5D:14:38:73:79:E8:F3:C1:36:E5
            X509v3 Authority Key Identifier:
                keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:31:88:57:d5:fa:05:f3:62:57:62:3c:c7:bd:c3:26:ff:aa:
         e5:b6:16:22:f5:f9:dd:1d:41:72:eb:6d:3a:57:3d:a8:76:88:
         3c:48:da:11:b2:b8:56:dd:7a:0c:97:de:7b:7d:69:27:36:2c:
         9f:42:66:c0:7b:a9:fe:5d:01:a4:8e:aa:9a:e5:91:72:ec:93:
         6e:60:68:30:b0:30:ff:19:e7:40:cd:3f:32:f0:9e:b0:db:87:
         72:5e:e1:e8:e5:0d:1d:34:ab:55:4c:c1:00:ff:48:9e:62:46:
         b5:b9:cd:e3:7d:cd:83:16:33:86:b8:21:82:1c:a6:b4:89:96:
         ca:10:d5:ca:a3:5b:10:08:f7:a4:41:05:e3:b8:7c:20:cc:4d:
         b6:a1:6f:56:b3:d4:b6:7b:fe:48:05:0e:1f:06:aa:3b:69:b7:
         ab:b5:67:fb:08:0e:55:f4:34:3f:e0:c8:7b:6c:9a:51:aa:9a:
         99:e5:6b:76:10:ba:79:b1:27:2c:c3:f1:07:3c:c3:e8:d4:d8:
         e0:2e:2d:a6:0d:3d:ac:49:30:e8:f9:fe:96:9e:b2:ee:bd:5f:
         72:cb:59:b6:6f:8a:af:fa:77:6c:b4:30:0e:87:b3:36:c4:13:
         5a:71:d6:b3:f1:5a:17:41:49:96:a2:a8:fe:b0:c7:3c:4e:f4:
         fc:9d:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:49 2025 by rpki-client