Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
File:                     tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft (raw, json)
Hash identifier:          o1n45p4UvmIIO9x5Z14DLQuEdufTzg+/YzFCb8svjlE=
Subject key identifier:   25:9F:33:D9:40:95:68:96:66:9F:32:DA:FE:73:40:75:F6:D7:63:16
Authority key identifier: B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
Certificate issuer:       /CN=b605d1901c571100b89a5c48c3a7065784157196
Certificate serial:       019845F630D4C6BA2A1068BC62C03C3484A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
Manifest number:          0864
Signing time:             Sat 26 Jul 2025 09:00:18 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:18 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:18 +0000
Files and hashes:         1: tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl (hash: /sNSFTk54ERAXwsuONOkPo2jGPoWZnm9ADT3dheLq64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:30:d4:c6:ba:2a:10:68:bc:62:c0:3c:34:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b605d1901c571100b89a5c48c3a7065784157196
        Validity
            Not Before: Jul 26 09:00:18 2025 GMT
            Not After : Jul 27 09:00:18 2025 GMT
        Subject: CN=259f33d940956896669f32dafe734075f6d76316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:29:35:cd:7e:7d:3b:05:7f:f2:60:3f:76:
                    08:95:bc:e0:b5:3a:84:5d:17:f7:55:33:f7:4b:f2:
                    ca:98:07:fd:ad:d0:66:49:b9:45:7b:a0:37:41:c7:
                    94:8a:5b:93:11:82:0e:31:af:9a:d9:e5:8c:60:32:
                    cc:18:3b:87:42:76:2c:c0:a5:ef:a5:d4:e7:da:76:
                    70:87:59:47:4b:32:5f:59:73:b3:a0:4b:18:51:97:
                    73:25:31:8f:81:46:8e:16:80:94:1d:a0:da:f4:cd:
                    dd:f3:4a:d6:a1:ac:7b:c2:c4:98:8b:d1:8b:5e:6c:
                    ff:14:09:6f:17:74:2d:17:41:e5:00:ed:a8:fe:ec:
                    1c:bc:21:c5:48:95:fc:5c:d6:ca:3d:63:9b:09:fe:
                    1b:d6:ac:c9:77:90:2d:fb:91:21:81:78:eb:ce:ad:
                    99:75:13:b5:4e:88:63:7b:f9:23:ce:e7:3a:78:23:
                    dc:d5:7a:80:58:07:40:cc:e6:c0:58:07:43:2e:e5:
                    47:59:bc:a9:db:69:f3:a3:52:11:33:d0:80:49:2b:
                    e1:4f:c1:93:e1:f5:46:00:cc:47:87:8d:a3:c2:87:
                    b8:a6:c0:15:c8:63:08:8c:24:4d:32:44:6f:ba:e9:
                    26:86:d1:88:97:2d:98:9c:c7:84:d9:dc:e1:3e:78:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9F:33:D9:40:95:68:96:66:9F:32:DA:FE:73:40:75:F6:D7:63:16
            X509v3 Authority Key Identifier:
                keyid:B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7a:0f:ef:4d:45:81:f6:55:07:e6:9c:38:fc:86:dc:ab:5a:
         8c:03:bb:44:a3:43:d0:0a:79:39:8b:27:e4:5b:db:88:ec:9c:
         c7:1d:b4:be:6c:ab:96:fc:a5:90:b4:00:90:06:72:1d:4f:8a:
         2a:29:4c:23:af:f7:08:4b:3f:f2:c7:7a:d3:8a:26:04:30:2b:
         fa:9b:45:20:af:6c:e2:a2:bf:06:e7:5b:30:f1:1b:f3:4e:b2:
         af:55:c6:cf:81:61:74:74:0c:45:06:a0:c9:94:77:54:f4:dc:
         60:b9:58:53:c6:c8:61:04:3e:1d:21:00:2d:ba:b2:7d:cb:5e:
         64:ed:97:6e:a2:03:87:8f:2b:31:85:45:2c:12:58:95:57:60:
         48:dd:72:17:01:93:8e:58:e4:60:2b:55:8b:a8:e5:86:e0:27:
         42:4b:c1:5b:05:ec:42:7d:5e:68:73:b4:bf:da:27:f4:dd:18:
         75:dc:b5:b7:05:16:61:92:4f:e2:9d:c3:e0:18:09:7e:65:fc:
         05:c3:2b:41:82:0d:9f:83:46:c1:04:bf:13:ff:d2:92:5d:73:
         5d:89:07:2b:b6:27:1b:ac:40:f9:33:09:43:1b:85:39:94:75:
         03:08:1b:01:c9:94:c3:d6:fe:49:cb:08:49:28:2c:a8:22:d8:
         e9:d5:c1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:11:17 2025 by rpki-client