Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
File:                     TgyY_GY_7jZUpy9MCBRhxBYc84E.mft (raw, json)
Hash identifier:          ZJTHxvAuzmAzY78embgILklMeytY7zlMNyeNG+W/XzY=
Subject key identifier:   4B:39:7E:79:4B:95:EE:3A:F2:07:95:78:A9:8E:30:AA:59:A6:42:27
Authority key identifier: 4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81
Certificate issuer:       /CN=4e0c98fc663fee3654a72f4c081461c4161cf381
Certificate serial:       019922FA80C7512BAFCB1A670C6D3C105802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
Manifest number:          142F
Signing time:             Sun 07 Sep 2025 07:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:06 +0000
Files and hashes:         1: TgyY_GY_7jZUpy9MCBRhxBYc84E.crl (hash: 2Wcg96BiRh0pMLwL+9EP80OjcPEt4NM/MPWKfSW/0I4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:80:c7:51:2b:af:cb:1a:67:0c:6d:3c:10:58:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0c98fc663fee3654a72f4c081461c4161cf381
        Validity
            Not Before: Sep  7 07:01:06 2025 GMT
            Not After : Sep  8 07:01:06 2025 GMT
        Subject: CN=4b397e794b95ee3af2079578a98e30aa59a64227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:66:f6:d0:4b:dc:df:9a:68:e2:b6:96:86:74:
                    94:a0:0f:94:5e:cd:48:80:a3:04:16:8b:25:89:87:
                    80:90:a6:67:26:4f:29:f2:1e:8a:87:7c:3d:a7:f7:
                    03:bc:a9:de:00:f1:19:15:9a:59:2b:15:f1:45:dd:
                    88:a6:72:25:e8:4d:97:d6:7f:d8:cf:5b:5e:87:38:
                    97:00:de:3c:1f:71:4b:89:cc:5d:ef:77:68:b4:15:
                    4d:61:82:46:9f:1a:f4:aa:68:5f:b2:8a:42:c6:74:
                    3c:79:d2:bf:55:ac:2e:36:37:1c:99:49:50:e8:29:
                    3f:fe:e5:e4:e1:91:ea:1d:22:f1:c5:1f:99:0c:84:
                    c4:a6:51:f3:28:e5:10:d2:72:6c:bb:b1:5d:c7:72:
                    32:76:95:0c:e0:08:7b:44:71:45:1b:a9:40:80:a0:
                    2e:5c:2c:33:11:67:db:53:48:05:8d:79:1c:99:80:
                    95:51:83:4f:b3:99:75:c8:99:a0:04:b5:74:80:a7:
                    8e:07:b0:00:c5:02:b6:ea:36:33:69:0d:f7:69:88:
                    a9:12:13:05:45:b9:8d:22:fe:11:2c:e3:44:20:b1:
                    bd:33:e6:ca:13:bd:63:ae:87:68:3d:ff:cc:9a:01:
                    c2:88:31:28:a2:73:9a:21:aa:ce:22:cd:68:f2:bb:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:39:7E:79:4B:95:EE:3A:F2:07:95:78:A9:8E:30:AA:59:A6:42:27
            X509v3 Authority Key Identifier:
                keyid:4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:12:b3:71:1f:1b:f5:84:6f:c4:25:b9:d1:49:51:85:cf:a4:
         3e:a9:3d:46:2e:e6:6c:73:34:19:d1:77:2e:bd:9f:09:52:85:
         29:52:1d:57:16:32:a8:33:9b:37:01:35:4e:0d:51:3f:b6:f4:
         ec:cf:3f:1e:ff:d6:73:8c:10:cb:93:00:e8:bc:4e:42:d6:75:
         96:50:f5:00:19:43:ef:53:eb:39:c6:cd:d4:c2:7a:16:dc:46:
         67:bd:85:e5:07:d2:01:2b:7e:1e:08:ba:92:67:f0:d8:ac:59:
         42:5e:e7:59:f6:f9:bb:27:45:1d:fe:50:42:1e:66:7b:ad:97:
         52:e2:23:e4:12:bb:8d:4f:39:ff:b5:d4:b6:f7:f6:2b:ae:9f:
         08:c4:6c:99:1f:42:1e:5b:47:3c:a7:02:c8:9a:78:06:7c:09:
         52:5d:bf:92:a9:ff:8d:58:ff:71:c9:5a:eb:3f:3e:4f:51:81:
         64:1a:9c:3d:ad:df:be:03:3e:68:d1:9e:00:f1:30:3e:c0:bd:
         a6:4a:35:c9:66:c9:21:e1:94:79:c1:56:38:85:f3:c6:80:0d:
         f6:b4:ab:5e:29:fa:fd:06:3a:47:90:4a:45:67:65:6a:c6:60:
         88:78:f3:ee:12:9b:24:de:20:26:22:0f:4d:80:bc:af:09:97:
         ec:58:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:37 2025 by rpki-client