Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
File:                     TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json)
Hash identifier:          vlLxNEupfiPsYqLzmYf/u08xpAoz+FfhvQ3cQStZXdw=
Subject key identifier:   EC:39:55:B0:9E:53:24:FF:FA:B5:D4:C6:92:99:C7:C1:06:CC:70:12
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Certificate issuer:       /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial:       019A21AD9DF37B86FCE59276BAA051694135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
Manifest number:          1638
Signing time:             Sun 26 Oct 2025 18:00:17 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:17 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:17 +0000
Files and hashes:         1: 04QV-ve6N6q1z5keiSip22HWq-U.roa (hash: oA0QfyCg1GT0LK/v+pk71hC3hYPHoYN/Zjd1n/b4oLE=)
                          2: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: MkSS+YHpQrCsjS49h3AkkttdU0Uf3QIZmWIq7/JCaog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ad:9d:f3:7b:86:fc:e5:92:76:ba:a0:51:69:41:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
        Validity
            Not Before: Oct 26 18:00:17 2025 GMT
            Not After : Oct 27 18:00:17 2025 GMT
        Subject: CN=ec3955b09e5324fffab5d4c69299c7c106cc7012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:1f:d5:11:e6:1c:25:81:25:00:b4:36:69:
                    5e:b0:74:08:71:d2:ec:2d:3e:3f:6e:fc:6a:61:e2:
                    33:02:1c:7a:67:e6:00:66:1f:09:c1:2b:47:50:64:
                    d4:9d:f4:e4:f5:99:4e:c7:73:3b:03:50:39:66:dd:
                    b1:82:8a:a4:a2:9e:d2:ac:39:c2:dd:9e:ab:b4:ce:
                    67:aa:52:7b:01:b0:fa:c2:77:25:54:30:7e:2e:2c:
                    54:71:82:8b:4a:57:68:98:21:fa:3f:67:d1:fc:c7:
                    c5:1d:ad:cd:d5:b1:0c:08:a9:c4:4b:3a:d5:88:df:
                    da:1a:77:21:2d:38:64:59:f5:3f:bc:c2:15:33:8f:
                    a8:c0:cf:50:54:22:ce:5b:bb:53:62:14:7f:5a:14:
                    48:e2:68:aa:3f:2b:3d:7c:96:51:23:06:77:f1:f2:
                    ea:d2:1a:ea:78:0f:0c:cc:85:50:bc:aa:8f:b2:7b:
                    c3:d2:30:52:b4:a6:29:fb:2a:66:11:31:aa:b9:e0:
                    ef:9b:77:f7:ad:49:51:29:54:26:09:62:6a:83:58:
                    18:2f:80:74:a8:e6:21:14:c4:87:34:14:2c:76:24:
                    68:64:d3:4a:6f:f6:76:8d:75:22:5c:18:d1:1c:f5:
                    f0:a4:9f:05:ab:a6:59:8a:1c:9a:86:27:a3:2b:fb:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:39:55:B0:9E:53:24:FF:FA:B5:D4:C6:92:99:C7:C1:06:CC:70:12
            X509v3 Authority Key Identifier:
                keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:b9:12:2d:e5:64:b4:49:38:03:f8:8a:a0:e6:06:03:37:
         ff:14:c7:88:a7:18:11:ba:41:37:27:58:1a:73:56:cf:e7:d5:
         44:65:4f:8f:c4:c0:40:dd:01:94:ea:26:a8:62:53:ce:45:bd:
         0e:bb:ba:29:e8:2b:6f:9e:69:47:32:72:3e:7f:c3:b9:88:37:
         9f:36:e6:96:c0:0e:5e:f4:5a:43:c4:b1:ff:63:43:83:db:f8:
         f3:88:40:68:d0:df:b0:ec:67:c4:c0:8e:3b:ec:ff:e8:aa:13:
         73:82:61:27:42:ff:6e:e9:4e:e2:0a:f7:34:41:fa:66:be:9a:
         75:a1:4e:c5:6a:0d:d6:79:22:1d:8c:19:18:13:82:a4:22:05:
         17:ca:7e:67:6b:58:6f:e2:37:7d:00:1f:58:7a:c2:f7:4d:f0:
         5e:a9:5e:e0:43:d3:e2:aa:cf:e4:f7:6f:dc:92:60:73:cd:a4:
         08:12:81:18:6d:e1:74:50:0c:05:be:a4:56:08:18:49:ab:4b:
         64:81:27:e7:ea:a7:8b:0b:a7:eb:08:2d:9a:97:7a:5f:a3:5c:
         b1:f8:3b:31:03:2d:f0:fe:6d:86:62:3c:a8:fe:18:81:94:13:
         06:43:43:aa:74:8b:f4:ec:0f:57:b0:35:e9:98:00:17:ca:15:
         a7:81:7f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:41:35 2025 by rpki-client