Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
File:                     tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft (raw, json)
Hash identifier:          0O/XXX5HKNIJDS/YflVrgKjKaWycCo/u7upaMiU0Ktk=
Subject key identifier:   45:41:0C:44:F2:FC:03:A1:19:1F:0E:1B:DB:3D:27:3C:AE:AA:83:CE
Authority key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
Certificate issuer:       /CN=b641b288b4d413e955fea4460b32bf2cc182af03
Certificate serial:       01991763C377919A1029B80ED635A8962FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
Manifest number:          1668
Signing time:             Fri 05 Sep 2025 01:00:37 +0000
Manifest this update:     Fri 05 Sep 2025 01:00:37 +0000
Manifest next update:     Sat 06 Sep 2025 01:00:37 +0000
Files and hashes:         1: tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl (hash: Kn5s/aJSzoZPg3thFQcrj3Yz1FdHLFZ4OvOsn8x1794=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:63:c3:77:91:9a:10:29:b8:0e:d6:35:a8:96:2f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b641b288b4d413e955fea4460b32bf2cc182af03
        Validity
            Not Before: Sep  5 01:00:37 2025 GMT
            Not After : Sep  6 01:00:37 2025 GMT
        Subject: CN=45410c44f2fc03a1191f0e1bdb3d273caeaa83ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2c:be:f6:2d:fc:fe:9c:1d:72:cc:7a:3c:74:
                    c6:80:54:43:00:5a:91:71:19:a9:4f:88:d0:2d:57:
                    df:8b:77:af:52:55:8d:cc:1d:5a:51:db:70:02:9d:
                    8e:42:78:44:91:18:88:9c:9a:b8:85:d8:07:5e:d2:
                    88:b5:46:1a:d3:31:58:65:12:43:95:5d:64:8e:4a:
                    62:86:09:f5:b5:a3:d2:eb:d9:32:14:b9:bd:84:04:
                    e7:16:ec:53:3f:b8:a0:4c:20:68:36:90:e2:45:34:
                    7c:90:cf:9f:6c:26:e1:e7:ae:fa:e7:f5:0e:c4:97:
                    31:f6:37:c5:43:fb:8f:c3:46:56:a7:ca:eb:2a:fc:
                    00:c1:2a:04:89:8c:84:05:d1:2e:04:0f:a4:88:b8:
                    69:a7:7b:db:cf:2a:81:29:bf:2b:73:a0:da:b9:18:
                    64:1b:6a:14:c6:08:f9:13:50:f8:00:c6:85:f2:4b:
                    cc:09:82:52:ac:91:13:96:0e:8e:c3:38:7f:90:9d:
                    95:28:91:3f:79:b6:5d:89:94:ec:e2:84:4d:ef:f0:
                    9b:78:e1:fb:b9:6e:7c:0b:13:70:53:9e:05:ec:25:
                    84:32:de:82:6e:42:f4:52:d5:f4:35:9a:02:59:9a:
                    26:45:cc:8e:5d:c8:0b:ba:fc:8a:5e:df:50:d9:c6:
                    37:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:0C:44:F2:FC:03:A1:19:1F:0E:1B:DB:3D:27:3C:AE:AA:83:CE
            X509v3 Authority Key Identifier:
                keyid:B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:94:9d:68:c3:9e:24:f1:4e:8c:73:09:da:94:9e:06:ae:
         ae:e2:33:9a:49:6a:8b:81:5d:05:fe:64:1f:f1:c2:1e:0b:44:
         46:22:bd:3e:01:ea:c1:fe:19:c2:cc:68:8c:fb:f0:d2:8a:06:
         33:df:80:2c:6d:2a:64:78:bb:56:fe:4b:bd:4f:1b:c9:ed:1c:
         20:15:e2:db:aa:b7:a2:69:0f:8a:6c:ef:93:d9:36:8e:93:1b:
         8e:2f:6d:49:c4:54:14:75:0c:38:41:a6:66:af:c4:e2:0b:93:
         8e:5b:21:37:87:82:5d:03:67:f7:c3:cb:c7:12:07:76:82:85:
         90:63:c5:5c:9e:4b:4b:60:d3:d5:66:4c:ff:99:b6:70:6e:28:
         0f:65:a3:ee:5b:22:ae:55:2e:c0:22:40:88:36:1a:ea:3e:32:
         aa:a0:a4:a6:8e:14:a5:71:ca:c3:2d:e1:37:f8:ed:56:ff:c7:
         f2:97:ef:e0:3a:96:ac:cd:27:35:8f:86:09:75:e4:df:0c:44:
         17:2d:dc:35:93:46:64:21:15:cc:19:ff:ea:b9:4a:44:f7:ba:
         b5:6d:89:9f:3c:ad:15:0e:45:23:ed:b5:7d:36:cd:ca:1b:9a:
         f1:64:8a:ce:03:38:57:c3:f1:b1:63:05:e1:cc:2a:50:81:f0:
         38:92:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:19 2025 by rpki-client