Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
File:                     TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json)
Hash identifier:          Az4RkkHuN6wySUsYucODg3XU+iLXWFXj+nkRrDSxyAw=
Subject key identifier:   08:C1:0C:74:44:08:18:F9:3A:21:CD:CC:B0:87:F0:14:D9:5D:3F:47
Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
Certificate issuer:       /CN=4d21374da731314f0a05175d25b0d89a76f6e081
Certificate serial:       0197CA957C28E9757704A0091BAF6D232FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
Manifest number:          052E
Signing time:             Wed 02 Jul 2025 10:01:23 +0000
Manifest this update:     Wed 02 Jul 2025 10:01:23 +0000
Manifest next update:     Thu 03 Jul 2025 10:01:23 +0000
Files and hashes:         1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: SS6s5hvaOs+RPjhEJGRxmKKhXbmoHY/8ruGJ6kAsWo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:95:7c:28:e9:75:77:04:a0:09:1b:af:6d:23:2f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081
        Validity
            Not Before: Jul  2 10:01:23 2025 GMT
            Not After : Jul  3 10:01:23 2025 GMT
        Subject: CN=08c10c74440818f93a21cdccb087f014d95d3f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:6b:06:75:f0:8f:22:73:36:26:8a:49:1f:
                    05:13:17:78:f4:43:16:e4:cb:6a:7c:ae:02:7f:31:
                    2c:24:a9:5d:48:fe:a0:34:6e:07:c2:2b:ce:e4:a0:
                    d4:7f:aa:54:e3:40:6f:16:0f:69:19:ad:c7:d4:e9:
                    0f:26:eb:30:be:4a:80:6c:5c:ce:d1:56:cc:a8:36:
                    e4:c6:11:6b:a1:13:96:10:86:54:53:79:8c:d7:c3:
                    ac:17:8a:de:a3:07:36:7f:1d:45:e5:29:f5:9f:c5:
                    b0:7b:e3:b7:60:ae:f7:2f:d0:ca:b2:6c:fb:bf:5e:
                    28:fa:3f:8f:8a:bf:eb:16:ce:00:1e:32:65:dc:c3:
                    64:e9:d7:4c:16:29:3d:55:8a:eb:45:3a:c0:1d:6e:
                    f5:ab:67:3c:cc:87:6b:db:2a:a7:e7:69:fb:f6:2c:
                    6f:0e:90:25:a9:53:0d:51:f3:dd:ba:c1:dd:d5:c1:
                    ce:c1:d7:ee:3b:b6:a0:45:39:8a:91:8e:2b:c9:07:
                    11:70:00:f8:1e:66:d6:9c:bb:5d:ca:ee:a4:7d:1f:
                    e7:a4:c9:46:75:ef:3f:0e:a5:9a:49:94:cf:ac:1d:
                    4e:5d:aa:01:70:62:7e:2c:3d:6f:88:27:cc:de:3b:
                    96:0a:b7:7a:c7:e9:ec:0e:d2:8e:43:9c:07:93:61:
                    d0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:0C:74:44:08:18:F9:3A:21:CD:CC:B0:87:F0:14:D9:5D:3F:47
            X509v3 Authority Key Identifier:
                keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7b:d7:66:49:e2:13:bb:67:c9:7a:a3:1b:57:9b:16:31:51:
         d0:22:74:5c:ee:40:b7:12:21:0e:f7:0d:e2:95:c7:ce:54:0d:
         88:6b:30:a1:15:ff:07:18:e1:db:0b:84:0f:70:12:73:26:73:
         84:d8:5d:6f:02:6e:cf:79:09:f0:f0:dc:ae:93:69:2a:d8:92:
         1c:5d:ca:d6:9b:7c:e0:a4:e8:f0:95:2c:6a:1d:06:06:70:8a:
         ab:76:c5:48:69:d4:3a:0d:31:43:ea:ba:14:17:f2:d0:93:f9:
         ee:ff:92:23:27:3e:64:2c:f7:3b:ed:3e:e4:1d:bc:2d:96:b8:
         16:f9:04:c6:90:5f:88:b3:68:81:c9:97:6c:c2:13:18:de:9a:
         4f:62:8d:4c:7e:78:5d:a4:f2:7e:9d:66:32:ec:31:a0:ac:18:
         da:53:2c:70:88:b4:8d:d4:89:6f:41:1c:18:ad:44:f8:39:47:
         0c:c6:f4:53:42:11:12:a3:94:4a:d5:b9:3d:f8:48:bd:75:39:
         96:5e:9d:68:86:8c:de:0d:e0:08:6b:40:aa:31:28:c2:f4:61:
         ee:70:5c:09:1f:98:51:9e:8f:50:74:d4:ac:a5:41:76:f2:4b:
         f7:f1:af:50:62:f4:d5:0a:cc:f0:ae:42:0f:3c:15:d9:81:ea:
         1e:d3:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:15:58 2025 by rpki-client