Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File:                     TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier:          KDwlyetnMtxx8AT1JNp5tTZJPdKmddPfLcSuItBsp2M=
Subject key identifier:   98:FF:9B:D2:81:5F:D3:7B:00:96:43:19:09:14:D0:67:B8:3C:64:FF
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer:       /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial:       0198537B6FB813962BB0E61B8BE0EEC7F77C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number:          1615
Signing time:             Tue 29 Jul 2025 00:00:54 +0000
Manifest this update:     Tue 29 Jul 2025 00:00:54 +0000
Manifest next update:     Wed 30 Jul 2025 00:00:54 +0000
Files and hashes:         1: IF7POYmH2s6_XyYc1YSgmRclBfU.roa (hash: vkWkPszh+VD/raa/NYL5vb45rCVCasfYYp1M1TBPCxY=)
                          2: JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa (hash: Cf4mCXc4k2uDXgbB44mtC61vJtEhAxi4CrnAuvkGzGk=)
                          3: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: yUe2JJkE027zkc6qc6lwjKi8Ogx8FGhTiSS4o+8F77I=)
                          4: aC7DUlOCYd4ZrOlGrZ-OMdQYyBE.roa (hash: gIed90T8oX8NcIFpqOYwduIUaAgChpM53a4QzPH0Bg8=)
                          5: e0P4zqHajvo1XtAyySozyOucDY0.roa (hash: uBYNOSzSg+Z80PXiuAGXfKeocd8WYWEry+iBGwq/1mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:7b:6f:b8:13:96:2b:b0:e6:1b:8b:e0:ee:c7:f7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
        Validity
            Not Before: Jul 29 00:00:54 2025 GMT
            Not After : Jul 30 00:00:54 2025 GMT
        Subject: CN=98ff9bd2815fd37b009643190914d067b83c64ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e6:6e:b3:6b:9c:da:dc:79:8d:c2:49:28:b8:
                    4a:54:c5:0b:11:17:a3:47:0c:40:e6:03:5d:be:59:
                    2a:87:ba:75:51:5f:59:7a:a3:b3:ca:b6:c6:08:87:
                    40:bf:48:a7:28:3f:04:26:00:3e:e6:56:16:36:56:
                    90:19:48:3d:fb:82:c6:f0:b3:7d:36:02:44:15:e6:
                    7c:5e:54:4a:7a:32:0e:5d:7e:4f:c3:5e:7f:ee:9d:
                    d2:67:b4:34:ae:26:12:79:d6:cc:e3:f6:08:6d:ad:
                    dd:16:c3:74:33:cb:75:76:de:78:fe:de:d4:24:0f:
                    41:d1:fe:20:33:e1:55:77:6a:8c:6f:3a:20:2a:8e:
                    97:b4:25:fd:55:e7:23:53:32:f2:32:95:40:a7:d0:
                    0e:e4:ca:ed:f4:60:87:85:6a:5a:c8:60:47:1d:08:
                    e0:42:82:b9:9c:94:6a:eb:9d:a8:10:52:ed:b2:0c:
                    67:c1:53:b5:f2:30:ba:14:96:3a:24:d5:9e:59:8c:
                    c6:d5:f5:20:69:89:6d:07:d9:06:92:ea:69:17:9f:
                    5a:59:eb:f1:54:c5:08:3b:12:a7:54:63:f3:f0:8b:
                    46:68:fd:5f:91:49:b0:9d:cf:de:76:f7:32:42:cd:
                    a5:9e:ed:10:9d:dc:4d:4c:2c:6a:08:80:63:e6:52:
                    d3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FF:9B:D2:81:5F:D3:7B:00:96:43:19:09:14:D0:67:B8:3C:64:FF
            X509v3 Authority Key Identifier:
                keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ba:1c:ef:05:4d:1f:86:7c:43:a7:64:f6:4d:09:44:6f:c2:
         0b:38:fd:72:44:66:07:d4:95:9c:4c:a8:81:61:4a:e7:7e:65:
         e4:dc:1c:5c:d8:04:3b:fc:50:0d:ea:03:d7:c6:b1:80:00:65:
         90:f8:56:a5:b4:cf:69:bf:7c:9f:f5:67:0f:13:f8:9b:30:92:
         0b:54:ed:1d:11:a1:6b:b3:8a:34:be:7f:29:79:48:5b:5f:0c:
         d7:bc:67:fe:d0:55:67:09:4b:b2:b2:b5:86:e3:02:13:eb:24:
         92:99:24:d5:f2:90:8a:80:e7:5e:1e:88:b2:41:4c:05:b1:c6:
         44:53:75:d2:71:07:10:75:88:9a:bd:56:f4:c8:b3:85:f0:ad:
         5b:c7:9e:d9:3a:50:27:aa:ca:f4:c9:74:10:e9:87:ff:e0:26:
         65:11:e0:56:a4:72:14:2e:8a:e4:4a:f1:02:77:0b:a9:f8:72:
         46:8f:f9:c8:5a:a4:a3:f3:c3:a7:47:3b:82:f9:90:35:e1:bc:
         0b:7f:2e:b8:fa:50:5e:02:03:86:e8:b0:c3:04:3a:09:6c:28:
         e4:93:72:cd:6e:b4:98:7c:44:be:a2:ba:6d:1f:9f:b4:e6:d0:
         5a:a8:42:14:f4:de:ce:a6:da:9b:93:96:d9:c3:b2:b4:60:cc:
         5c:44:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:36:16 2025 by rpki-client