Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
File:                     TTR1C-IXPLmwhqd8bepUtKhGmvM.mft (raw, json)
Hash identifier:          7j/P/Ayzucbr76Sex/3rJOCrgDEcEV5hOmtfR6+rnPY=
Subject key identifier:   D8:FE:3C:AD:AF:86:0D:B7:68:D7:61:9C:F6:FA:87:36:DC:E9:76:5E
Authority key identifier: 4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3
Certificate issuer:       /CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
Certificate serial:       019A71EE9E0045B148AE9AAFED6AFDD6CBAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
Manifest number:          0A93
Signing time:             Tue 11 Nov 2025 08:00:54 +0000
Manifest this update:     Tue 11 Nov 2025 08:00:54 +0000
Manifest next update:     Wed 12 Nov 2025 08:00:54 +0000
Files and hashes:         1: TTR1C-IXPLmwhqd8bepUtKhGmvM.crl (hash: DcMH/wetmtU0ucrj+OSrd/VLefjgPmx8Nd6fISYvkIk=)
                          2: WYXlKPxfFrF5-delsIPB_r6FESQ.roa (hash: cI2mCSSEwOLi9AIJI3IVWlSF6M3b+jAGtzx5i3z7sFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:9e:00:45:b1:48:ae:9a:af:ed:6a:fd:d6:cb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
        Validity
            Not Before: Nov 11 08:00:54 2025 GMT
            Not After : Nov 12 08:00:54 2025 GMT
        Subject: CN=d8fe3cadaf860db768d7619cf6fa8736dce9765e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:be:1a:24:e4:0e:43:09:34:ca:ee:b2:c1:
                    29:db:bd:58:df:fc:24:db:a8:4b:72:c1:8e:8e:0d:
                    c0:e6:27:25:84:ed:f7:bc:fe:2d:d8:62:50:0e:1f:
                    63:f4:33:0a:98:cc:a5:23:cd:da:f2:1a:a7:90:5e:
                    5e:80:b4:1f:b9:85:5c:0d:a0:32:da:77:48:b1:32:
                    1d:b6:c9:b5:54:a7:fb:88:44:73:8f:a2:da:e2:dd:
                    17:50:02:72:70:51:10:65:bd:9a:ff:74:e4:ab:46:
                    c7:6a:bd:ce:92:4e:db:cf:be:48:5d:1b:e4:f5:0d:
                    7d:2f:4a:6e:24:4c:b8:7f:41:2e:d3:88:0d:ac:26:
                    19:ef:88:55:a6:25:91:47:e7:bb:5b:7c:94:f6:d2:
                    08:42:fa:ed:ec:c6:9f:24:64:5f:80:53:16:42:2a:
                    4e:b6:71:b9:40:ad:53:7a:77:26:ce:93:3c:ec:82:
                    76:5b:e5:80:52:71:e8:fb:31:06:14:ab:5a:80:fb:
                    ad:0e:fe:4b:d0:79:ed:9c:13:cb:81:3e:52:64:e8:
                    58:b3:4c:4a:d3:22:ec:cc:e8:e7:68:af:8a:1d:b5:
                    44:a5:a6:7e:89:75:97:58:aa:72:df:77:fc:7d:07:
                    9a:74:48:52:5a:75:03:63:fe:d3:c4:8c:cf:7c:1d:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FE:3C:AD:AF:86:0D:B7:68:D7:61:9C:F6:FA:87:36:DC:E9:76:5E
            X509v3 Authority Key Identifier:
                keyid:4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:b2:b9:c6:fa:2a:e5:a8:a7:e7:bc:c3:3a:3c:f2:ab:df:
         40:78:aa:50:08:8c:41:f4:54:05:c0:5d:e8:e6:41:ca:a7:86:
         42:e3:3a:64:9a:b9:d3:75:44:9c:4c:28:7e:55:10:ba:30:48:
         6d:2b:68:4f:29:5d:43:f5:c2:d0:35:1e:77:36:8f:c4:01:ed:
         39:62:a0:90:be:09:ae:fa:78:16:0b:52:9a:4d:93:20:43:df:
         6e:44:07:0d:50:a4:7e:13:ce:4f:2b:b7:43:f4:a0:63:8d:49:
         de:27:3f:ae:bf:16:4d:30:39:c2:73:68:ac:73:5c:82:95:2d:
         2b:6e:ed:ec:35:59:d8:57:d6:24:55:87:b7:77:18:be:4a:08:
         40:05:00:61:f2:3b:ef:f9:77:4f:ed:60:3e:35:62:32:a1:e3:
         58:31:29:47:7a:ea:16:41:11:02:1a:6c:f4:d5:e8:df:68:bb:
         97:9e:19:b0:d2:75:ec:97:79:50:ea:d0:44:43:30:b5:a5:8c:
         a5:66:01:84:e4:30:90:96:ff:e3:a9:18:24:e7:ff:24:c1:ad:
         38:c3:4f:b3:c2:ef:b4:53:08:19:c3:75:92:43:8d:37:8a:75:
         49:22:b3:25:61:14:e7:0e:65:da:42:0f:65:a3:ca:a0:e1:dd:
         a8:ed:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:43 2025 by rpki-client