Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File:                     TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier:          QGwmYM4jeR12aRlQM4hsOpY/CPDkR/dYncwAC+bTG20=
Subject key identifier:   16:41:4F:B9:53:24:2E:EB:13:2D:1D:D9:1B:42:42:18:76:77:B7:6B
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer:       /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial:       0198451A43FD35604B2CC547AAC1ED395D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number:          1019
Signing time:             Sat 26 Jul 2025 05:00:05 +0000
Manifest this update:     Sat 26 Jul 2025 05:00:05 +0000
Manifest next update:     Sun 27 Jul 2025 05:00:05 +0000
Files and hashes:         1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: gGOnd8sYH5fF2TD2R/57RHtuKTiAEjMJ/iTgLc8vWTw=)
                          2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:1a:43:fd:35:60:4b:2c:c5:47:aa:c1:ed:39:5d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
        Validity
            Not Before: Jul 26 05:00:05 2025 GMT
            Not After : Jul 27 05:00:05 2025 GMT
        Subject: CN=16414fb953242eeb132d1dd91b4242187677b76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d1:42:2e:a1:f7:72:8a:39:0e:b9:c8:46:82:
                    66:0c:18:d2:71:cb:07:ff:e8:85:bc:09:25:58:98:
                    0a:b4:6a:8e:50:d5:0a:c0:c6:0c:21:ab:fe:e1:54:
                    c7:c6:8b:4f:f4:11:00:06:d7:3e:ff:4e:b0:42:13:
                    d1:cb:50:6d:e6:bf:80:a9:5b:48:1c:43:8e:e7:0b:
                    bd:a8:d4:f3:12:8b:f9:87:bc:5e:ee:71:93:e5:6d:
                    5a:8f:84:37:17:50:f7:f4:95:68:1b:4d:8b:ff:cb:
                    11:85:d3:ae:b9:69:b8:e8:0c:63:2d:3c:20:d7:93:
                    2f:6e:38:bf:44:4f:de:1a:1d:73:08:86:59:9d:78:
                    a8:77:89:b8:8b:a4:57:c9:2c:0c:71:7d:14:0e:28:
                    e3:4b:2f:ba:74:3a:95:db:f7:be:f9:da:94:e3:54:
                    6f:8b:2a:69:06:63:2a:91:31:2b:4c:aa:98:8b:48:
                    02:50:ec:50:4f:76:ba:79:3e:1e:0d:a3:73:65:a4:
                    a1:98:24:64:fe:b9:ab:2a:a4:62:82:be:22:dc:2f:
                    1d:9f:58:50:35:f8:a2:47:40:bc:5a:5c:ba:1f:74:
                    93:a5:ce:d3:d9:5d:5b:52:40:c6:46:2a:ba:b4:be:
                    d1:d9:1c:ba:41:e3:9f:8a:74:d7:80:8c:7f:eb:cd:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:41:4F:B9:53:24:2E:EB:13:2D:1D:D9:1B:42:42:18:76:77:B7:6B
            X509v3 Authority Key Identifier:
                keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f1:56:f0:6c:b4:cf:4c:65:53:75:77:a7:44:34:fd:69:d1:
         30:a9:ff:0d:03:f5:ce:fe:1e:2e:f5:64:4c:4d:6e:f5:6a:0c:
         6e:8b:13:c9:8b:3c:0e:0e:14:01:61:5f:90:32:cc:73:f7:7a:
         f1:1a:0b:15:e0:b5:fd:19:42:d9:4a:b9:aa:d0:bf:31:1f:9e:
         e6:61:08:de:82:17:e0:98:90:a0:a4:9a:ec:1f:ac:75:14:64:
         12:90:28:2f:32:f5:7f:27:2a:ff:7e:e5:7a:52:f7:85:e6:80:
         cc:c0:31:69:d7:83:43:dc:6e:c0:0f:bd:f4:99:25:c2:bf:5c:
         91:75:69:c5:55:f7:fc:c4:59:52:72:87:16:d4:48:05:a0:43:
         08:bd:75:bc:72:9f:4b:c2:42:66:98:f2:0e:59:90:94:cf:65:
         f8:bb:64:93:a1:49:06:70:70:95:5f:9c:b6:37:2e:be:51:80:
         f1:61:e3:0d:13:9b:60:98:09:39:89:64:af:df:c0:44:12:14:
         fe:b8:69:21:81:9a:c5:b0:89:97:a1:be:d4:cf:35:fa:74:f4:
         e8:a4:2d:69:ac:7c:15:e5:8e:dd:2f:c5:bb:03:2b:89:b4:9e:
         15:23:23:c0:e8:e6:39:01:4d:0e:67:94:4c:e3:54:90:e2:f6:
         be:2a:16:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:07:53 2025 by rpki-client