Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          AzproFuPTxMFOFXdnGnFBLc8pQuT+OhZETYTkUwN/pg=
Subject key identifier:   CE:2B:97:50:AD:AC:77:89:A9:89:F5:18:20:E5:93:53:26:9A:69:D2
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       01984B5473292F5BDA7134D6D814B3B53A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          053E
Signing time:             Sun 27 Jul 2025 10:01:22 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:22 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:22 +0000
Files and hashes:         1: 4ib--cnqLp0oi-QRP9CJRqv85Fk.roa (hash: NsYpYhfEaLmslYSk1TQ4VoW4ixy6WRpz9PM1r2Tk7Rg=)
                          2: MtLhAuf2NgYHgf0idQEjB2O5NSs.roa (hash: au7HQECLFDd4UQvAj9wy4z/oD6hBOrQVLU0RNpgJw7c=)
                          3: R23zeQRDOen9HPSmR-eKHeta0HU.roa (hash: lKe4syLzRE8BrGtoS0ZImyw7G/jxJEgSU5WDE02BXs8=)
                          4: Rb4b2fJCublE-IL8HhGXicF9sEM.roa (hash: PyYAOqircy60MPWz4V06L7QvOxOEimKDajTYlawGVcc=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: nT/4xvv81uEv/rKoGmhpoRGRDZ+8m7VnHl2jhwP4qSY=)
                          6: nPr9uZx_D8jJFj15etiyotIJZFA.roa (hash: pbSWt6WwR9cxpCQXd7EkLbNcjMbaXCcbiCmqJC5x8GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:73:29:2f:5b:da:71:34:d6:d8:14:b3:b5:3a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Jul 27 10:01:22 2025 GMT
            Not After : Jul 28 10:01:22 2025 GMT
        Subject: CN=ce2b9750adac7789a989f51820e59353269a69d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:0f:b7:e7:cf:10:ec:cd:94:45:d5:47:b0:
                    4a:b6:f2:92:8a:81:73:d0:47:28:7d:5b:22:bb:83:
                    de:11:68:3a:af:df:c6:b5:6d:33:b2:2a:bd:ec:96:
                    48:68:13:08:15:a3:9a:05:3a:cb:7c:32:c2:54:00:
                    4a:0a:80:b5:a2:ae:01:c4:5d:5d:b0:19:5d:ee:0f:
                    72:52:9a:66:32:78:f0:1f:61:37:f6:e2:72:94:d0:
                    bd:ad:df:ae:3f:2d:32:fa:92:a3:75:c4:86:e0:ee:
                    2d:b1:55:5d:45:73:27:53:96:2c:b4:28:d8:49:41:
                    04:5f:c2:b9:a9:67:7c:2a:56:a0:88:58:16:c9:9b:
                    29:5d:48:86:60:fc:28:3a:6d:b1:33:bb:89:d9:fc:
                    6c:38:ad:67:ca:d6:74:7a:77:77:f8:e7:6a:71:ee:
                    12:5a:ce:29:93:78:3c:a7:ae:df:ea:56:17:cc:8f:
                    31:49:93:99:c8:fa:1f:f9:5e:57:ee:5c:80:06:91:
                    a9:8e:ef:42:b0:01:d3:48:dc:93:5a:6d:79:ad:0d:
                    08:af:f0:ae:eb:3a:e6:7a:9e:30:f8:64:ed:24:27:
                    f3:34:74:28:24:a4:b9:78:f2:64:5a:87:e0:9b:a7:
                    b2:53:45:c0:0c:c9:c8:67:81:33:42:0b:e6:84:27:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2B:97:50:AD:AC:77:89:A9:89:F5:18:20:E5:93:53:26:9A:69:D2
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4a:15:58:68:11:ed:02:fc:70:08:cb:c2:33:a7:3f:5f:b5:
         d0:c6:35:b4:e2:1e:45:3f:96:d7:4e:4e:08:6d:db:96:cc:9e:
         2e:0c:36:4d:bd:a3:69:47:ec:55:f5:d0:8e:49:29:a7:33:b0:
         03:2e:a3:e9:ce:8f:42:ed:08:ae:bb:f4:2d:2d:2f:73:71:4e:
         46:73:61:97:3a:b5:63:42:5c:5e:49:f2:87:ac:a4:17:ea:fd:
         ee:9b:f9:7f:da:ef:f0:56:87:2e:7d:d0:b1:0d:ef:ef:a1:dd:
         17:65:39:69:b2:88:af:1b:88:a1:81:f3:f3:26:d4:d7:84:b0:
         88:3a:6d:11:5d:e9:69:11:c2:c4:5d:0e:93:2d:e3:2c:03:e0:
         8b:8a:62:13:75:a1:1c:a8:32:4c:34:28:32:9a:d5:c4:b5:29:
         7a:b7:67:46:ba:51:c1:a3:d9:f6:17:b3:b1:4a:57:6b:39:4a:
         be:e8:11:bd:77:57:c2:23:9e:dd:45:0d:62:f5:63:6b:9c:72:
         95:88:26:6f:df:b6:6e:53:8e:33:7a:42:bf:6b:79:51:60:d0:
         0a:ad:14:73:bf:7b:49:f9:40:b6:a2:e9:81:d9:69:99:a6:e3:
         4d:cf:c7:6a:cf:ab:7d:cc:6b:12:6f:07:aa:0c:94:91:84:bb:
         20:1b:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:46:33 2025 by rpki-client