Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
File:                     TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft (raw, json)
Hash identifier:          d/1GNihvS7ebuxZzXDGy+Ajj2ZzSOK7elGgDcNoEuGY=
Subject key identifier:   88:3E:E0:22:58:3D:D5:38:03:EB:86:22:5A:0A:D4:00:3F:95:90:26
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Certificate issuer:       /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial:       01993313A650059D6836DC595AF3EA0EB251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
Manifest number:          1487
Signing time:             Wed 10 Sep 2025 10:02:29 +0000
Manifest this update:     Wed 10 Sep 2025 10:02:29 +0000
Manifest next update:     Thu 11 Sep 2025 10:02:29 +0000
Files and hashes:         1: DppKxT5ljLij19Y9kuFKbXPtInE.roa (hash: dBb9XFhPZs/yEDFIrNxXoE0ofTm7AGuxUXTTkIoqD0w=)
                          2: H9SO8EzcNBS2yNz1oqlQvF8nYaA.roa (hash: DHcHXu+DGDdMpd1sZPMiGOEXUFezuU4wJP51eqKaDv0=)
                          3: Ie5KawkP4b238jzWIkt7U1G1OH0.roa (hash: b/NOk3BaQteK7RVlxUiaRcKQ/ZGCaP84MpBuSn/nXxo=)
                          4: TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl (hash: 49FGSAHGnUV8caUI42KZAqWMfCj3IVMhrrTEJYIP4oo=)
                          5: vHwCw7oMDPrClYvdX-A30AyKV5Q.roa (hash: rqndv/sj8Hh1XnVuBVWvDlA5Odz01ECXqpzsqO0GIsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 10:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:13:a6:50:05:9d:68:36:dc:59:5a:f3:ea:0e:b2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
        Validity
            Not Before: Sep 10 10:02:29 2025 GMT
            Not After : Sep 11 10:02:29 2025 GMT
        Subject: CN=883ee022583dd53803eb86225a0ad4003f959026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:b3:df:10:be:38:e6:71:db:ad:c2:83:74:
                    6f:04:64:6b:f2:9a:a0:ab:fd:52:80:92:99:13:56:
                    43:08:18:80:74:cb:60:f4:56:4d:da:42:19:81:5b:
                    15:05:24:41:47:68:bc:5d:47:38:69:50:ab:1d:63:
                    85:5d:0b:9b:9b:c4:da:f4:73:86:9d:ef:97:5d:ff:
                    d1:0d:42:45:3a:7a:ec:b8:9e:1f:76:bf:86:4b:49:
                    61:b5:65:0d:bb:79:0e:fc:76:a6:8b:dd:a0:0b:75:
                    8d:1d:59:99:0f:a5:11:77:20:0a:33:f5:1f:95:62:
                    f8:33:75:4a:e6:95:8e:8e:22:39:31:ff:ae:d1:ba:
                    8e:e6:b9:4c:9a:27:8b:4d:73:8b:48:d2:e6:4a:ee:
                    68:eb:02:68:9e:93:14:a1:7d:c9:c6:64:ba:d3:be:
                    d5:10:77:13:a1:8d:1e:4a:ed:c2:eb:d9:eb:cb:66:
                    55:e6:67:5e:60:d7:4a:17:83:b5:95:80:e0:03:83:
                    bc:65:76:a9:70:80:ee:d7:31:bb:0c:90:8f:2c:be:
                    89:31:34:44:1f:28:13:b4:6f:42:8d:f5:96:45:f6:
                    c5:e3:63:26:0d:78:75:08:54:4a:a2:96:32:6d:e7:
                    d3:23:62:c7:27:26:47:c4:0f:42:3f:b2:7d:7f:2d:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3E:E0:22:58:3D:D5:38:03:EB:86:22:5A:0A:D4:00:3F:95:90:26
            X509v3 Authority Key Identifier:
                keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e0:18:13:48:3e:4c:dc:21:86:31:bb:e6:33:81:08:e9:59:
         4b:2b:7e:a0:4e:c0:fe:62:b2:15:d9:96:66:6e:ba:63:d6:da:
         e9:46:6f:a1:a1:4e:79:b8:fb:0e:39:d0:a2:da:96:cd:44:a8:
         67:52:91:81:11:83:70:15:cf:9c:0e:1d:9d:02:c4:fc:cd:c1:
         a6:8e:89:e5:38:18:50:91:29:45:d7:46:72:70:1c:e3:7f:5d:
         78:da:f6:7b:a5:b0:dc:06:f5:08:65:8f:87:69:8b:30:dc:84:
         a4:18:a9:38:ed:92:e3:ee:2b:59:e9:79:14:c6:8d:19:bd:8f:
         e6:51:2c:bd:d3:53:62:eb:61:c4:4c:57:74:d3:38:74:29:58:
         13:c7:6f:07:81:9a:46:c2:e5:c9:10:cc:1a:50:4a:c2:74:f0:
         4c:d9:38:1f:7d:68:74:ad:06:ff:02:aa:de:41:36:fc:c4:69:
         d7:62:5a:4c:fd:05:0e:e6:68:3b:02:ad:33:65:42:c7:a7:49:
         ce:dc:f5:a2:f9:39:e5:14:a7:01:fc:21:d6:6d:e1:29:3d:15:
         0e:cd:26:0f:cc:17:cc:00:75:d1:2f:89:b5:10:f8:17:85:6b:
         af:eb:0b:ac:61:d9:6e:37:07:5a:73:68:e3:6c:52:b8:27:95:
         d2:95:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:19:44 2025 by rpki-client