Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File:                     TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier:          PODD2hppjRW5Lm9iRkYAjgFtHf9+1DpTiF53vS1GkLY=
Subject key identifier:   DB:74:09:42:C1:C9:9A:8B:D0:88:D0:0B:D3:2F:4E:B8:8C:7B:32:CA
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer:       /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial:       01984966A1E65C2BD2570DEA83705FC4ACBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 01:01:59 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:59 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:59 +0000
Files and hashes:         1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
                          2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
                          3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: PmucOxsnsf3LcRNwQNBW8fy6Qx9Ns9YC+YbbCFQE11Q=)
                          4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:a1:e6:5c:2b:d2:57:0d:ea:83:70:5f:c4:ac:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
        Validity
            Not Before: Jul 27 01:01:59 2025 GMT
            Not After : Jul 28 01:01:59 2025 GMT
        Subject: CN=db740942c1c99a8bd088d00bd32f4eb88c7b32ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:62:f9:9e:fe:a5:66:cc:b0:dc:d6:46:b2:
                    0a:06:45:e7:94:a2:94:91:48:e3:10:13:63:91:f6:
                    e4:55:80:fe:3a:b9:7b:be:a6:69:74:d5:56:e1:17:
                    ce:78:57:9d:9a:1d:59:74:fe:d0:3b:45:e6:43:44:
                    4a:2e:0b:cb:ad:b1:eb:de:fd:00:d8:b9:88:b0:8d:
                    67:08:c5:73:bc:0b:f0:74:89:88:48:14:49:c0:22:
                    c7:9e:29:31:3c:77:31:00:1a:87:b4:e5:f6:5b:11:
                    ec:ec:b5:ef:1d:5b:b7:6c:0a:06:2c:5f:ac:31:aa:
                    b8:02:aa:7a:68:03:c9:45:bb:7b:14:a0:c0:0f:26:
                    a6:cd:cc:82:0f:57:4a:6a:dd:b7:38:2d:dd:3b:3d:
                    55:43:5b:20:da:24:2b:6f:c7:21:04:90:9c:48:a3:
                    14:c1:93:63:50:0b:42:aa:63:28:24:de:e0:81:ff:
                    04:06:9d:b1:0b:26:da:30:38:5c:06:e8:14:7a:22:
                    61:92:ca:c0:1b:9c:9d:c4:7c:10:e5:dd:8c:13:ff:
                    74:73:df:cb:bf:7b:6b:13:e3:45:05:07:c7:8a:49:
                    6f:5a:0d:dc:05:bc:6c:db:4e:f6:07:9a:5d:dd:6a:
                    8d:21:1d:f7:e2:81:11:24:a3:6e:b9:d7:da:48:e2:
                    e3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:74:09:42:C1:C9:9A:8B:D0:88:D0:0B:D3:2F:4E:B8:8C:7B:32:CA
            X509v3 Authority Key Identifier:
                keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:30:b4:ab:7a:1c:72:36:d6:b5:2d:a8:13:55:29:52:68:
         d9:2f:29:7a:d2:d8:f0:ac:9a:3c:bc:ab:2d:92:b1:55:dd:05:
         99:02:f1:da:f8:86:a1:97:6a:c5:34:2a:88:85:7a:35:ab:64:
         28:05:53:00:71:1f:3d:c9:38:b5:e0:77:5c:32:12:1b:6e:c3:
         97:10:a8:09:f1:42:50:d3:21:71:c5:82:9f:21:8d:50:bd:b9:
         de:20:46:54:0a:26:d5:be:4c:1b:16:84:8e:16:9a:5a:d3:71:
         e5:29:50:10:08:3b:1c:4b:a6:8f:4a:6a:47:ba:fe:9d:f6:96:
         07:d8:42:39:e2:b2:9d:c3:74:6b:67:1c:2c:f1:1f:d8:46:a4:
         83:34:a6:55:34:4d:d1:8d:9d:9b:f5:13:ce:c7:6d:78:fa:3c:
         18:cf:37:1b:f8:a8:e7:38:3b:87:ab:12:2f:4c:40:c4:87:da:
         8e:b3:df:f9:b8:83:fd:4c:15:41:52:a5:0b:09:8b:03:bf:64:
         3c:7c:6b:d3:74:7c:0b:74:34:b5:55:61:c5:18:99:4a:ad:8e:
         62:77:dd:01:07:fc:30:54:84:ac:d6:5b:90:20:92:ab:f1:8b:
         03:ef:ff:5a:85:8e:22:53:5b:99:8a:ab:bd:14:0b:20:cf:99:
         e8:0b:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:01 2025 by rpki-client