Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File:                     TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier:          lp7KXo54CA/tA3m3Vb/rsNg0Q9V7RYeHltzQBEIbybQ=
Subject key identifier:   3D:77:C4:C3:22:46:78:25:36:AA:29:B5:09:3A:BE:AE:C0:EC:ED:42
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer:       /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial:       01984AE5ED796EFED32EAE616F067C9547C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 08:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:39 +0000
Files and hashes:         1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: Z/JhM/J1Qh1OWXANvte1fC2U3FUtqhLb6i12X3VcZrA=)
                          2: tbYt8CsTUjvQCfPmxRHFnIb3gng.roa (hash: Wb48gd6AG1NXeN5IWX1LXBtrKALPG/kRfuLTU0uD7B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:ed:79:6e:fe:d3:2e:ae:61:6f:06:7c:95:47:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
        Validity
            Not Before: Jul 27 08:00:39 2025 GMT
            Not After : Jul 28 08:00:39 2025 GMT
        Subject: CN=3d77c4c32246782536aa29b5093abeaec0eced42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:55:ea:fe:af:c4:3b:7a:6f:03:c3:7a:6f:
                    ac:37:8a:2a:22:3d:fa:b2:82:ed:ee:d9:a7:3e:21:
                    c8:ef:ff:1f:7f:fd:a9:1b:e7:11:3e:b5:0f:8d:26:
                    bb:fb:0e:a5:c7:9b:40:4a:ea:7d:12:dc:e1:49:fd:
                    14:9c:9d:ba:2d:ae:e2:a1:64:8f:f5:c5:3e:d2:7d:
                    91:a1:d8:aa:25:98:79:38:8a:3d:21:8b:b9:95:64:
                    18:6f:11:40:75:b2:e4:2a:8d:36:96:e3:83:04:10:
                    b6:98:bc:3b:1b:b0:aa:30:07:65:2d:e8:60:4e:97:
                    70:36:4c:a0:be:e7:41:d5:01:9c:4d:d5:93:56:be:
                    8b:5d:c3:9d:2f:87:52:9c:41:5a:92:8e:a7:30:19:
                    60:3c:ae:91:6b:b9:c4:9f:a2:4d:e5:6b:a3:93:d8:
                    2f:78:9c:fc:99:d8:58:11:c3:b7:a0:85:6e:3d:37:
                    d7:45:a7:59:57:95:06:b0:62:a6:1f:4d:89:7b:dc:
                    94:d6:d7:80:f8:8e:73:03:65:a3:ab:21:d9:77:56:
                    39:e9:0c:47:be:fc:a2:f1:fa:9c:c4:1c:b4:0f:96:
                    c3:58:53:b0:cf:f0:f1:26:c6:f5:46:9b:45:24:e0:
                    38:69:41:90:d7:94:c9:f1:e0:b1:ae:7d:f6:87:7c:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:77:C4:C3:22:46:78:25:36:AA:29:B5:09:3A:BE:AE:C0:EC:ED:42
            X509v3 Authority Key Identifier:
                keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:74:f1:cf:b4:10:75:60:f6:f6:bb:e1:21:54:2b:23:98:
         4f:fa:64:a1:68:50:b3:e0:cc:d6:58:7b:59:93:e1:45:78:50:
         ef:e8:2e:36:18:41:43:18:a1:d4:e8:40:7e:c1:1d:ab:74:b3:
         98:e0:6a:8a:20:dc:b3:e7:34:8f:5f:68:a3:5f:63:47:39:56:
         85:2e:67:e3:fd:56:7a:8b:81:f6:3a:b1:86:5b:49:52:9f:4a:
         45:17:40:40:76:f8:5b:1a:0c:39:c2:df:4e:35:8a:b4:99:00:
         b1:8c:bf:82:20:33:a6:3b:42:a3:34:8e:d6:b3:be:55:3c:cc:
         bc:ca:c5:a6:3f:04:36:f1:b5:9d:1c:ae:76:c2:91:a7:5f:62:
         c4:1c:80:a9:fc:28:c9:f4:99:90:81:6b:ff:77:7b:b9:b9:3a:
         ca:62:80:97:d3:bd:ed:8b:29:d2:40:b5:53:c0:58:1e:bf:bd:
         14:f3:8f:0b:66:a5:89:f2:74:02:34:b3:2a:42:a8:85:58:ee:
         b3:a7:b4:06:1f:b4:a5:82:fb:67:da:a2:a2:3f:95:83:7c:65:
         93:90:dc:75:2d:8c:2f:48:ec:6a:02:72:ff:73:b5:13:96:7a:
         21:7c:12:c7:38:06:93:be:ca:8a:85:64:df:87:00:7f:67:8f:
         81:ac:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:24 2025 by rpki-client