Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File:                     TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier:          D/mWUAs2VHG2IC7xx/aA0gz/G00ua3R3y4GCtkWpUi8=
Subject key identifier:   C2:6C:A3:FD:5A:9B:28:F6:BF:23:D2:85:F2:8A:B2:D9:BF:C8:DA:90
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer:       /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial:       019855324727426ED6EB3B9212728F44E067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number:          160B
Signing time:             Tue 29 Jul 2025 08:00:14 +0000
Manifest this update:     Tue 29 Jul 2025 08:00:14 +0000
Manifest next update:     Wed 30 Jul 2025 08:00:14 +0000
Files and hashes:         1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
                          2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
                          3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: LRXANczX9nQZVU+wPFPwnR9ayblztuGBeQPS/SLcbsI=)
                          4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
                          5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:32:47:27:42:6e:d6:eb:3b:92:12:72:8f:44:e0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Validity
            Not Before: Jul 29 08:00:14 2025 GMT
            Not After : Jul 30 08:00:14 2025 GMT
        Subject: CN=c26ca3fd5a9b28f6bf23d285f28ab2d9bfc8da90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:87:7d:a6:89:44:8d:f4:d4:a9:87:89:04:
                    ad:e7:7f:22:fc:7c:44:c6:2a:57:e6:9f:ff:a7:8c:
                    fa:ce:1a:8a:2c:e7:ff:82:45:ef:1d:2c:74:b2:a4:
                    28:cf:c5:ec:b1:ec:ae:5e:10:95:6e:78:45:dc:fa:
                    1a:46:22:8e:f9:e1:e1:b1:a9:fe:86:cd:da:b6:92:
                    44:26:0e:23:56:a9:7f:00:63:29:aa:15:48:e8:52:
                    88:53:1a:35:5a:58:2b:3a:79:9d:7f:ca:4f:1c:d1:
                    1f:d0:b2:27:35:3b:e3:5d:5e:19:9a:4f:32:0f:b1:
                    7f:e4:60:56:1a:0a:93:d0:2f:c8:eb:0d:34:e2:6c:
                    4a:18:a8:e1:40:6e:88:cf:a0:5c:7f:17:e3:5c:d8:
                    33:da:f9:c0:25:4d:5e:3f:d9:61:50:9e:fc:51:e6:
                    6a:c9:b7:6e:bc:b3:a2:5e:69:ab:f4:54:7c:0c:d0:
                    8d:38:48:5d:36:14:18:0d:54:2b:02:03:d0:bb:bb:
                    7f:e4:d2:62:02:ea:a4:99:1f:6b:9f:fe:2f:8b:13:
                    bd:41:be:b7:c4:f7:af:11:cd:fb:18:a9:18:2f:85:
                    6d:1a:0c:b7:3a:9e:6a:b4:57:2e:e2:2f:5a:4e:99:
                    73:d0:f7:c2:3e:09:ea:b0:33:61:ac:df:a8:83:c3:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6C:A3:FD:5A:9B:28:F6:BF:23:D2:85:F2:8A:B2:D9:BF:C8:DA:90
            X509v3 Authority Key Identifier:
                keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:68:fe:81:f6:cb:b4:9d:78:fe:a6:8f:e1:b1:d7:da:34:
         9b:02:6f:68:18:85:f6:57:14:fb:42:9e:9e:13:8c:1e:b9:fb:
         9c:8e:02:29:ec:c6:22:ea:9f:8d:16:1e:a5:d1:7b:05:b5:8d:
         a6:f1:2b:58:e9:fe:d0:bf:0c:ee:b4:33:38:7d:7f:2d:25:25:
         36:8b:57:3f:f5:5d:f1:3e:bb:78:48:6e:9f:73:d0:22:f6:bd:
         7e:a3:d7:34:11:ac:22:65:42:4b:9a:2e:f5:6d:22:94:d4:e1:
         d4:07:8a:2a:41:8b:3d:d8:6b:9f:39:a0:53:72:a5:d0:7d:fb:
         37:72:f5:47:06:0b:cd:18:9a:ff:82:44:e2:f1:4d:e6:91:a6:
         7c:3a:f0:81:db:45:9e:70:c5:3b:f3:0a:1a:29:a6:22:3e:97:
         9f:db:49:14:b1:d5:46:71:3d:4e:27:cc:6a:a6:fc:3a:69:34:
         6b:32:2f:8e:c1:48:f8:c9:a5:41:aa:68:f2:de:fe:5c:3b:7d:
         f9:6a:3e:ee:46:1c:44:cc:b6:5d:d0:2d:e5:30:25:52:2c:b3:
         93:5a:52:aa:28:5b:ca:b1:8c:8f:79:11:b1:f8:62:45:18:2b:
         72:00:ec:61:b4:62:03:f3:b6:1f:5c:1a:22:d0:29:d0:99:8b:
         70:dd:0e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:15:33 2025 by rpki-client