Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
File:                     TitWhe45Z_zPVK8VDpg_D4AlWpI.mft (raw, json)
Hash identifier:          K5gaSQVuU6E0XXJrmgGuuiaWe8rQvFxcThNI1hqNGoU=
Subject key identifier:   75:ED:46:92:FC:CA:92:56:9B:F4:4C:5E:F3:95:AA:2A:3C:C4:F0:96
Authority key identifier: 4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92
Certificate issuer:       /CN=4e2b5685ee3967fccf54af150e983f0f80255a92
Certificate serial:       019A71B878D0DFAF39AA6764BD69CB280185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
Manifest number:          0B13
Signing time:             Tue 11 Nov 2025 07:01:46 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:46 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:46 +0000
Files and hashes:         1: TitWhe45Z_zPVK8VDpg_D4AlWpI.crl (hash: rLrGueJNwf8V4zLLYNljJXwgbG41yV3Neaq1P5jQifY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:78:d0:df:af:39:aa:67:64:bd:69:cb:28:01:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2b5685ee3967fccf54af150e983f0f80255a92
        Validity
            Not Before: Nov 11 07:01:46 2025 GMT
            Not After : Nov 12 07:01:46 2025 GMT
        Subject: CN=75ed4692fcca92569bf44c5ef395aa2a3cc4f096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:a8:1a:25:0b:7f:e2:d1:c1:c1:34:1c:67:
                    f7:73:79:f5:32:00:f0:0c:a1:a6:d4:fe:63:95:16:
                    d7:40:3f:13:76:29:0e:ca:2f:2e:02:fb:2b:14:09:
                    3a:d0:0f:de:28:3c:f6:ca:e1:4c:4f:7c:99:35:ee:
                    bf:1a:9c:05:79:c1:64:af:b1:ed:36:6f:9d:4c:71:
                    5a:76:fe:97:5a:aa:78:54:b4:10:a4:8f:d3:3c:35:
                    35:7a:41:b4:65:6c:9e:84:88:97:44:b5:6a:85:12:
                    e9:2e:68:fa:66:c2:73:45:56:a5:83:e6:f5:03:b4:
                    c2:d7:10:fd:61:c6:e1:71:7d:bb:be:85:a2:23:02:
                    13:24:05:36:53:ef:e2:44:63:2b:30:83:89:03:06:
                    b3:04:ed:fc:5c:1b:f7:a1:ca:b5:8a:16:73:86:62:
                    57:87:b0:a6:d0:31:b5:58:91:a0:e8:0f:3f:cf:19:
                    db:f8:49:04:2f:9f:64:f2:dc:88:04:c2:be:b9:70:
                    9d:ad:5b:ab:8e:ae:9b:62:8a:2b:06:2e:2e:a6:48:
                    df:07:66:e9:0d:49:94:20:a7:81:31:cc:c9:64:e5:
                    25:b7:07:4a:39:1c:12:ab:d5:59:71:e4:a3:55:00:
                    97:ac:18:02:b1:77:29:74:60:2a:79:09:d3:77:2d:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:ED:46:92:FC:CA:92:56:9B:F4:4C:5E:F3:95:AA:2A:3C:C4:F0:96
            X509v3 Authority Key Identifier:
                keyid:4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:da:6d:e9:73:c5:af:6d:a9:78:71:df:9c:f6:1a:d3:21:
         d2:d5:b2:de:c6:94:5d:1e:5e:49:2d:c8:db:a2:32:f7:c8:99:
         50:61:0b:f4:ea:34:56:45:29:b8:f4:d3:25:fa:4f:86:1a:f8:
         15:d3:9d:5f:3d:0f:05:6b:b8:b9:50:d5:52:d3:c9:d8:03:3a:
         da:05:d1:ac:39:4e:44:d0:23:e6:1b:cb:40:f0:c8:60:88:4c:
         df:86:e4:23:bc:ae:ab:e8:dd:63:a4:f2:8d:c8:87:9b:6d:fa:
         66:bf:ed:79:92:35:57:77:e0:a3:8d:c6:79:9d:7e:3c:e3:ff:
         d2:25:da:52:74:c3:15:e3:24:f3:86:2d:cc:e8:74:d7:dc:ad:
         c3:3c:17:7b:32:e7:93:bc:7c:ca:97:f4:f1:fc:47:b5:c4:cb:
         4b:26:f5:7c:ca:37:89:9a:d5:63:6b:ed:af:69:d8:93:27:9e:
         3b:8d:56:f3:33:01:0e:46:a4:91:12:33:fd:35:5a:92:57:c8:
         7c:07:f7:0d:8b:33:fe:22:c6:8e:45:0d:b2:ad:f3:19:1b:82:
         dc:0b:e4:7f:3c:74:20:73:b3:c9:10:e8:ac:26:8c:62:1d:41:
         29:7d:4c:95:9a:6a:66:b1:4a:f4:9f:ff:27:9e:47:45:e9:ce:
         7a:a3:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:16 2025 by rpki-client