Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File:                     TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier:          dWl9Oni+EH9fLnuiQr8tMUbpATIsjXL0eApPweQzJIM=
Subject key identifier:   BD:F1:42:96:2C:92:1A:7E:06:52:CD:93:79:21:85:09:38:B4:7F:AD
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer:       /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial:       01984777BB0DA1633EC90BD2F3070AC92033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number:          02E3
Signing time:             Sat 26 Jul 2025 16:01:25 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:25 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:25 +0000
Files and hashes:         1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: GWHth8XUrrpiHKrbckorhKLYNp234FgIMBm2ZzFWWQc=)
                          2: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (hash: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:bb:0d:a1:63:3e:c9:0b:d2:f3:07:0a:c9:20:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
        Validity
            Not Before: Jul 26 16:01:25 2025 GMT
            Not After : Jul 27 16:01:25 2025 GMT
        Subject: CN=bdf142962c921a7e0652cd937921850938b47fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:6b:ba:23:fe:d5:3c:0f:25:92:5d:6b:9c:
                    7a:aa:6c:d3:c6:b6:17:d1:e4:87:9c:2f:de:af:db:
                    2a:86:eb:fa:81:fc:9b:a3:fc:32:97:59:d7:17:c7:
                    52:71:ec:30:3b:d5:51:1b:5a:29:66:ef:07:66:f4:
                    01:9a:95:9d:52:7c:55:04:29:16:2d:eb:8f:d4:74:
                    e2:af:dd:d4:bc:b8:85:27:5c:2b:3b:c4:e9:04:10:
                    15:a1:da:58:00:39:b9:75:df:b2:c2:f9:7e:14:3a:
                    00:53:2c:df:76:a3:0f:6e:66:64:98:ef:19:dc:86:
                    5b:79:bf:4f:67:96:7d:e5:38:9d:77:6f:fc:43:38:
                    5e:72:bb:fc:5f:1e:7d:b8:3c:b9:c4:99:69:ac:06:
                    14:63:d5:33:a5:58:d5:df:d7:9b:6a:c2:a9:9f:c5:
                    64:1c:59:37:1c:38:89:12:32:7a:40:fb:4b:0d:e3:
                    6a:69:6e:09:8b:46:bc:7c:83:6a:64:31:b0:45:b3:
                    f3:58:9d:04:65:eb:99:2f:a6:a4:2d:3e:1b:c7:9b:
                    c5:42:1a:46:ca:0c:df:b3:ca:e9:ba:b1:02:66:79:
                    58:e8:28:c5:12:ab:13:7b:40:9b:0d:04:85:69:d9:
                    ff:5f:d0:00:e9:bc:07:ed:43:3a:91:64:23:68:af:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F1:42:96:2C:92:1A:7E:06:52:CD:93:79:21:85:09:38:B4:7F:AD
            X509v3 Authority Key Identifier:
                keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2a:a4:73:37:5b:cc:7a:b7:f2:54:fb:bf:2b:8b:03:19:ab:
         28:08:05:f4:03:97:e5:e1:e3:df:60:61:84:53:d6:bb:1b:c3:
         9c:ae:d3:e1:e2:15:cf:f5:d9:a4:6c:e2:23:b8:02:90:61:a8:
         71:98:d0:58:da:b3:55:21:c2:68:1d:25:4a:f9:5f:e5:97:74:
         1e:06:0e:0b:2d:45:09:a5:91:eb:49:d2:3b:29:6e:e5:52:f9:
         51:39:10:2e:21:c2:c1:fa:e1:89:b0:ed:05:58:05:f0:7f:c0:
         c7:7f:0e:02:c4:25:80:df:d3:f2:aa:31:4f:0c:9f:03:e1:ed:
         74:5f:4e:ee:16:c5:b9:06:a6:71:da:88:46:dd:8b:58:43:e6:
         23:53:dd:48:9b:74:27:dc:0b:e0:32:7b:f7:ff:f1:a3:24:4a:
         95:4b:1e:3b:92:f9:4b:09:93:7c:8e:df:49:fc:74:fe:83:5b:
         db:d4:fd:48:ca:34:4a:57:3e:c7:2f:47:6f:ba:a9:e6:bc:59:
         7f:0f:4a:44:9c:0d:6e:bb:0c:cf:1b:a9:4b:21:9d:95:12:75:
         5e:74:35:9e:18:ee:88:57:0b:7c:a3:1b:f6:83:c4:f5:e0:ec:
         26:24:f5:53:87:f2:35:da:9a:af:6f:ce:47:9a:36:5b:0b:86:
         d3:df:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:37:56 2025 by rpki-client