Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File:                     Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier:          VWFo4cJloiaoNRD9G5R2v1REmEhWjaYX09gktdf32Uk=
Subject key identifier:   90:96:08:DE:C1:73:B5:74:C7:A1:C3:DE:A5:7F:2A:AD:23:3C:0D:80
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer:       /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial:       01984AE57232CB6413AFB1994A760430A37B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number:          08D3
Signing time:             Sun 27 Jul 2025 08:00:07 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:07 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:07 +0000
Files and hashes:         1: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: asnVjvpiv03OcrgoTt1c6q3tCVzFvOrZlo8HnELazFk=)
                          2: paYxpLOj5q1m1CkvSIrYuNJXnfY.roa (hash: oASY8mwNlrx1vBXDbDUsEVfC2Mdva3sHjU/P5M6cgKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:72:32:cb:64:13:af:b1:99:4a:76:04:30:a3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
        Validity
            Not Before: Jul 27 08:00:07 2025 GMT
            Not After : Jul 28 08:00:07 2025 GMT
        Subject: CN=909608dec173b574c7a1c3dea57f2aad233c0d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:06:2f:60:1c:c4:43:91:14:0a:51:e1:95:eb:
                    2e:57:c5:e9:83:c7:c0:1c:61:99:c1:7f:c0:8f:e6:
                    b9:fa:a7:5c:64:86:90:36:f5:cb:6b:49:53:2b:01:
                    4a:d0:ff:ca:18:bf:5b:87:1b:c1:34:4f:fa:79:58:
                    25:76:c2:c1:c9:b0:d7:b3:3d:d0:1f:d1:71:19:b1:
                    9c:41:5b:cb:ea:c6:b8:c9:c9:77:ea:43:4b:1a:16:
                    1f:f1:e8:d7:45:bb:5e:b6:6d:35:53:80:ea:9a:b9:
                    d3:7c:c5:6e:c3:d9:ad:50:da:6a:12:90:ca:12:4e:
                    03:75:8c:35:60:34:4d:0d:26:ad:ca:e6:47:81:50:
                    4d:93:50:f4:0f:95:f9:60:42:2f:96:32:e5:14:58:
                    f8:10:18:27:c1:cb:20:61:f6:08:13:8c:f6:44:4b:
                    0c:29:21:09:c5:9d:40:1d:d0:4a:5e:6c:16:b2:36:
                    2d:fe:83:f6:de:f9:de:bd:90:e3:d4:e1:94:cd:7a:
                    3c:08:7f:85:c3:8c:91:dc:e5:ef:cb:e4:1b:16:bd:
                    f7:ef:2c:c0:c7:52:80:11:16:cd:67:78:1a:5a:e0:
                    a7:68:bc:73:cc:a6:87:c1:36:d8:a4:34:d0:c9:bb:
                    20:23:6f:b4:0b:86:8d:c9:43:29:6f:af:87:3b:ab:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:96:08:DE:C1:73:B5:74:C7:A1:C3:DE:A5:7F:2A:AD:23:3C:0D:80
            X509v3 Authority Key Identifier:
                keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:28:1e:e1:67:e4:83:65:e7:62:26:01:1f:d9:42:17:0d:bf:
         a5:7b:1f:75:96:bc:5c:40:35:6c:08:cc:66:44:8a:ff:84:74:
         84:88:0d:29:76:3b:79:e4:dc:56:9c:d9:4c:e0:03:87:62:83:
         37:56:63:e0:02:a0:bb:33:37:da:c2:5c:20:9b:96:a2:68:dc:
         df:4a:6c:95:49:e0:47:1b:93:80:83:c3:4e:2c:ba:83:2e:c7:
         92:26:f0:10:03:03:ae:33:48:df:8c:5b:57:fa:c5:85:6d:29:
         d4:3c:72:cf:1a:49:b2:1d:61:07:0b:a5:f3:d6:9f:40:ad:ab:
         3e:32:9c:59:d0:be:8b:ee:78:a0:e8:71:72:df:c6:35:c7:51:
         ae:dc:03:2f:d3:db:88:1b:27:ea:4c:37:a7:32:66:be:12:6a:
         66:75:f8:e2:29:b1:bb:93:ca:41:b9:fa:4b:9b:45:47:bc:d3:
         3c:12:07:97:ff:f8:cb:c3:ee:6c:a0:a7:a0:c8:50:d8:92:85:
         4a:d8:99:ab:4c:a3:d8:d9:b8:9b:60:7c:d8:b9:1a:3e:73:36:
         04:f2:5b:8c:c6:e3:13:df:00:12:e6:95:82:6e:5a:9e:4d:32:
         37:75:4c:0b:4a:f0:78:3c:39:8f:96:d5:38:86:bf:43:ce:f6:
         13:26:96:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:42:22 2025 by rpki-client