Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File:                     TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier:          ecZxDI7ud3/2ReWkWGpe+SbFQSXS+2Q9uwSjV8QIglg=
Subject key identifier:   CF:D9:69:55:6F:07:04:CF:34:EE:3B:0B:0B:38:51:2F:3F:5B:E9:4A
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer:       /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial:       019922C3819D2AB26718879A74BEFCB29B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number:          1678
Signing time:             Sun 07 Sep 2025 06:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:01 +0000
Files and hashes:         1: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: K6vhev56AiBVJNtTrP9jV1L8L5HJgj9VQRi6C8w2crY=)
                          2: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
                          3: W2TNL5im0fX66hopLKpEaeHN1Vw.roa (hash: jFMMnSyz7YrR/mDL9VXSfjnRvEdkg9GR9m7oXoI7Q1I=)
                          4: cC9Kn5RNwJ59ItW6IXpERzZosPw.roa (hash: Tn7jWRKA9agcVwEoCtyV/3OdfNNW+6uN3rC9ZNlnP8I=)
                          5: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:81:9d:2a:b2:67:18:87:9a:74:be:fc:b2:9b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
        Validity
            Not Before: Sep  7 06:01:01 2025 GMT
            Not After : Sep  8 06:01:01 2025 GMT
        Subject: CN=cfd969556f0704cf34ee3b0b0b38512f3f5be94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:b6:86:33:90:86:b6:ad:e4:26:cc:4f:4f:
                    8c:7e:cd:44:d8:20:a9:3a:78:76:6e:94:ba:db:b2:
                    e3:62:b8:e1:d5:ea:aa:14:86:67:a6:05:36:9f:d8:
                    b6:f9:43:ef:a5:d5:b0:3c:59:55:c8:5c:98:99:e7:
                    df:79:57:ed:a7:14:75:94:57:37:15:b0:d4:1e:5e:
                    d3:8a:ea:12:b3:4e:52:6c:e6:6e:60:bc:6e:ae:38:
                    4c:d7:48:80:ab:5b:d5:e4:19:03:e0:7a:75:a6:fe:
                    7b:f6:8f:fe:fc:65:0e:d5:e5:19:88:27:21:35:29:
                    05:5c:b5:7b:64:f5:06:5b:38:1f:d7:9f:80:96:cb:
                    ad:1a:47:6d:eb:9f:24:f3:1f:42:c0:17:ce:74:50:
                    d9:c5:5e:23:ff:21:7b:c4:93:ad:0e:bd:7b:42:68:
                    92:a8:18:3d:97:47:c6:1f:68:87:d5:5d:54:4a:b4:
                    be:8a:70:43:91:b9:43:13:85:53:83:c4:77:1a:b8:
                    0b:78:f8:e8:19:59:80:a2:20:8f:36:d1:c5:86:63:
                    a5:70:1e:41:48:78:f1:5f:54:67:b0:0c:a6:33:90:
                    4a:df:90:10:b9:a0:ab:6f:50:9b:61:31:b7:11:72:
                    be:15:64:3a:1a:95:93:9b:ca:82:4a:b9:7c:3b:cb:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:69:55:6F:07:04:CF:34:EE:3B:0B:0B:38:51:2F:3F:5B:E9:4A
            X509v3 Authority Key Identifier:
                keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fc:66:d4:e0:be:4e:3d:ea:28:3f:82:ee:cb:9f:1a:1b:d6:
         cb:23:47:18:d4:6d:63:04:f4:fe:e6:54:dc:95:6e:09:43:f2:
         c0:e8:59:ec:46:b7:6c:f0:36:4c:03:c9:22:45:c3:08:0a:00:
         5d:34:bf:8b:85:9d:d7:ff:d3:b9:83:e0:cc:13:da:89:1a:c5:
         e3:f3:01:f1:0d:55:1f:02:1e:fd:a4:af:1b:68:f9:c0:be:d9:
         7e:3a:05:6b:cf:d7:06:2e:72:6e:f4:bc:42:41:46:7a:9c:12:
         fb:a8:b2:ff:cf:f9:7a:b1:e6:18:c9:68:40:fd:d9:f9:6f:72:
         c3:4a:4d:14:68:a3:34:7b:c8:cc:72:bf:5d:93:15:2a:27:b8:
         ce:b4:fd:ab:b7:42:3a:cf:e2:8b:91:40:d3:87:9d:69:e2:b5:
         3e:53:e5:fa:7b:2b:4b:7e:48:0e:23:42:6f:9f:73:16:08:63:
         d7:9d:55:a0:34:d4:88:db:1d:00:28:22:1c:49:e2:b0:f7:92:
         ae:3a:15:5d:a5:9f:dd:a4:ff:66:cd:52:1a:13:cf:5e:72:cb:
         b4:a3:be:ae:c4:69:bb:63:9d:f3:13:65:b0:5c:94:55:4f:31:
         78:94:20:9b:5e:2e:b1:85:fb:9a:d7:1e:8b:17:35:b1:88:91:
         77:d9:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:36 2025 by rpki-client