Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
File:                     TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json)
Hash identifier:          puBp3w9gRth42wusndUz/LQcqNlnzQeJ4WFbRFnfm8w=
Subject key identifier:   51:6C:D9:17:8C:D3:7E:B6:10:2E:71:0F:17:9F:F6:5B:F7:CC:83:16
Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
Certificate issuer:       /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Certificate serial:       0198496698F619B11EC0CA82C68A6D176679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
Manifest number:          1033
Signing time:             Sun 27 Jul 2025 01:01:57 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:57 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:57 +0000
Files and hashes:         1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: 8XNjN6qtXNbIoRBLmBU3O1/xKzTlXmh9JwB/MPEWK5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:98:f6:19:b1:1e:c0:ca:82:c6:8a:6d:17:66:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
        Validity
            Not Before: Jul 27 01:01:57 2025 GMT
            Not After : Jul 28 01:01:57 2025 GMT
        Subject: CN=516cd9178cd37eb6102e710f179ff65bf7cc8316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:51:3b:3b:00:41:5e:db:39:2c:1c:2b:02:
                    f6:d7:25:d7:da:33:b6:3c:5c:09:d0:05:ae:e1:00:
                    4c:3f:a7:24:e6:45:86:f0:61:6e:7e:ef:c7:0c:ff:
                    ea:8d:62:ad:96:3e:61:a1:cf:90:4c:00:f7:3c:64:
                    c4:4f:f5:15:51:85:af:4f:77:02:ea:2f:74:3b:09:
                    ac:9e:cc:24:6b:75:8b:c4:ee:43:67:89:77:db:92:
                    a8:49:0f:7f:f1:5e:86:bc:00:2b:86:57:ba:03:a7:
                    f7:09:73:61:32:2d:32:8a:49:fe:8d:d7:46:66:77:
                    82:0d:b3:d4:55:66:39:69:52:1c:69:78:e1:1a:fe:
                    2e:1c:4b:f0:3c:f2:18:78:d0:af:65:2b:ce:8a:bf:
                    59:9d:e2:d8:4f:bf:d5:e0:40:c3:c7:af:a1:87:d6:
                    59:36:80:5f:7b:e0:ec:e2:6c:03:bf:51:a1:e9:e7:
                    e6:ed:b8:6b:ec:fb:a7:7d:fe:81:93:12:c6:bb:df:
                    fd:dd:93:ae:3d:a7:5f:de:5c:9b:a4:27:14:fb:69:
                    1d:2a:29:53:fd:fd:f2:38:be:53:76:d0:46:92:1f:
                    51:ac:61:11:6f:15:b3:9a:ce:5e:47:1f:11:6f:b2:
                    dd:82:10:20:66:b8:f0:ce:ee:00:e5:37:05:69:3b:
                    13:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6C:D9:17:8C:D3:7E:B6:10:2E:71:0F:17:9F:F6:5B:F7:CC:83:16
            X509v3 Authority Key Identifier:
                keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:74:83:8f:dc:80:45:6b:d0:23:5b:bc:b5:49:46:78:ac:97:
         32:bd:a3:bb:c1:31:bc:40:e0:54:41:38:6d:cf:f7:13:1b:ec:
         4e:7d:58:ef:c8:87:4a:94:83:66:f4:34:6b:72:67:d0:34:6d:
         12:4a:5e:63:6d:6c:a4:a9:87:f2:90:18:d7:26:9e:18:87:71:
         d5:e2:45:1f:3a:e2:73:ac:83:ae:5c:79:ee:a4:06:5a:d1:cf:
         21:f1:30:7a:6b:f4:cb:38:05:c0:c5:17:50:b1:e0:72:69:0a:
         96:a6:74:5c:0b:94:24:01:f6:64:ea:8a:7c:fb:b1:fa:9a:67:
         64:93:56:48:17:82:d4:57:23:5c:4b:31:ca:4d:ce:44:57:8d:
         15:79:b1:3d:ab:46:e0:d3:51:d7:cb:3f:c1:5d:e3:ed:39:cd:
         c7:61:0b:9b:7d:23:3b:d2:fb:3a:22:d4:fb:c6:b3:8a:b5:7c:
         c3:46:25:d2:da:89:f1:9e:5f:ad:84:9b:5e:be:52:bc:eb:a4:
         ea:07:d4:a5:1f:19:f1:e6:fd:3f:ad:a3:c0:ca:49:26:a3:e5:
         ac:b7:27:d7:b7:29:8a:e8:1b:fc:ae:f1:08:31:f1:df:20:fb:
         92:7f:a6:6d:d8:73:45:44:df:bd:e8:f5:bf:72:e9:32:d8:d2:
         be:59:42:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:25 2025 by rpki-client