Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File:                     TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier:          5bNey9BIb9xzEtzt1BfSf7Nb+EX7b/vXHy4+ZLBmcNo=
Subject key identifier:   2F:DE:A7:41:EB:F5:82:4A:DB:3F:22:60:A3:4F:CA:B5:2C:0B:76:3E
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer:       /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial:       019921B23ECC592E3FE61C2F21CF8892A768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 01:02:33 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:33 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:33 +0000
Files and hashes:         1: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: rfqa3K9DX+BancALWFqiVA0wX8rqNFopZgnfocJ7nrw=)
                          2: pdjC9ITQ24acWwqpMZ438xSZhiA.roa (hash: J1OLMcnc+nGL4fyVYlLU268vrwR6/zxGbhF2T7OJ2uY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:3e:cc:59:2e:3f:e6:1c:2f:21:cf:88:92:a7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
        Validity
            Not Before: Sep  7 01:02:33 2025 GMT
            Not After : Sep  8 01:02:33 2025 GMT
        Subject: CN=2fdea741ebf5824adb3f2260a34fcab52c0b763e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:42:3e:c1:39:69:7e:50:18:93:67:47:0b:81:
                    81:ba:e9:f4:8d:be:77:17:f6:88:62:21:6d:9b:12:
                    0f:5a:a8:49:a9:d0:7d:7d:d1:30:29:22:ef:29:e1:
                    1b:12:16:fc:27:2e:31:c7:cd:28:78:03:8a:bc:1f:
                    fb:8c:d2:69:c1:f4:15:de:7e:b9:32:b7:0e:43:34:
                    dc:3c:52:e9:bb:0e:2f:f8:42:4e:0d:7b:90:6e:51:
                    a3:7a:6f:ae:fe:b4:90:fc:c4:d1:18:df:98:6d:01:
                    e3:5a:b8:ba:b4:32:ee:2d:3d:ab:ad:94:dd:42:c1:
                    1d:ba:29:fd:fd:0f:fc:79:3d:eb:a6:33:22:9e:4e:
                    f8:7d:50:2c:1d:47:1e:f6:e7:bf:c8:41:e0:55:41:
                    e9:7d:11:91:09:77:43:f2:2c:b1:26:01:c8:3e:49:
                    9b:f1:64:54:ad:32:e2:10:29:ed:a2:07:72:a5:74:
                    d7:ca:b2:0a:e2:4f:1f:44:50:5f:f2:21:68:05:fc:
                    06:88:07:10:33:d2:62:cf:0e:70:9e:93:ef:3c:81:
                    58:89:ed:a0:26:a2:74:a8:a2:b5:3e:b1:45:6f:53:
                    2e:0a:32:12:2e:6e:6a:21:70:48:2d:d8:8a:f2:aa:
                    3a:9b:c6:8d:88:78:4b:79:cd:5f:6a:6d:96:d9:41:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DE:A7:41:EB:F5:82:4A:DB:3F:22:60:A3:4F:CA:B5:2C:0B:76:3E
            X509v3 Authority Key Identifier:
                keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d9:f6:4e:32:14:7e:f6:a3:67:d4:37:70:87:32:2a:c2:31:
         a3:33:d7:ac:e0:7f:04:8f:2e:3e:74:0c:c2:0f:a8:d9:34:07:
         3a:94:4e:c2:de:f9:25:27:62:01:93:3e:cc:80:bc:8d:40:d9:
         cd:7b:f2:bb:b1:58:e6:e8:b3:59:cb:4b:62:63:98:67:ea:b8:
         40:77:84:4f:01:fb:b3:7a:8a:90:26:8a:05:4a:8a:e9:4a:b0:
         dd:cd:65:b4:e8:57:fe:1b:d2:f9:ce:cf:b6:5d:bd:0b:b3:25:
         83:d9:4d:48:cd:05:36:5d:02:fe:26:d1:e6:9a:20:f4:94:d1:
         d5:ec:0e:60:eb:41:d9:9f:0b:11:cb:0c:8f:38:c4:1e:c3:69:
         ed:78:6f:b5:16:23:17:48:9a:63:a7:b6:e4:c1:51:d2:bf:52:
         17:c2:3e:15:88:d0:2d:69:12:9f:95:4d:5b:0c:0b:c1:dd:1b:
         cd:10:ed:d8:6f:e0:86:09:cb:7c:65:42:7d:10:ff:1a:9d:ce:
         83:e6:6d:5b:14:e9:8a:f7:81:73:72:23:8f:0d:4e:ef:53:3c:
         97:73:08:6f:25:8e:a7:69:62:5d:50:7e:4e:c5:86:d4:a0:74:
         cf:c2:67:81:38:7a:ee:77:65:15:6b:40:db:fa:66:0c:50:f6:
         8d:4e:a2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:41 2025 by rpki-client