Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File:                     TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier:          lrgka41bRRm1E1bgWbdaoaMsFmYZOj5bF7fDEK7zgJk=
Subject key identifier:   93:CC:53:AE:86:C6:02:5F:1D:5F:A2:4B:73:21:54:09:CE:B0:DB:A8
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer:       /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial:       0199639089743D6FDC14795319EFC905FF6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number:          1697
Signing time:             Fri 19 Sep 2025 20:00:40 +0000
Manifest this update:     Fri 19 Sep 2025 20:00:40 +0000
Manifest next update:     Sat 20 Sep 2025 20:00:40 +0000
Files and hashes:         1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
                          2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
                          3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: i0L4gplqNBuOO5qNaPw2ksv7PsPScHMM0yXchqvCSi8=)
                          4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
                          5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:63:90:89:74:3d:6f:dc:14:79:53:19:ef:c9:05:ff:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Validity
            Not Before: Sep 19 20:00:40 2025 GMT
            Not After : Sep 20 20:00:40 2025 GMT
        Subject: CN=93cc53ae86c6025f1d5fa24b73215409ceb0dba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:9b:89:2e:05:3c:ee:d7:79:07:aa:fb:35:
                    48:ce:f1:d1:88:1a:ca:4b:b3:4f:b1:67:9b:d0:a0:
                    b4:21:c4:97:9c:3c:02:43:c6:e1:f7:3a:99:5f:04:
                    ac:20:8c:51:62:ab:12:f1:84:66:48:ad:e4:76:6b:
                    34:c7:cb:4c:8b:89:56:3a:53:fb:e2:5d:f6:de:d4:
                    ab:0f:f8:ce:d9:61:5d:ec:3c:49:dd:86:ce:8e:40:
                    37:69:a7:50:d9:c2:7f:7c:30:fc:f5:1f:1d:3d:ce:
                    a1:5a:9c:83:b1:68:b9:15:e8:07:f8:12:8b:9c:af:
                    dd:3f:56:b3:6c:61:c9:3f:3a:71:7f:9f:71:0a:94:
                    7c:61:00:a1:32:82:8e:cc:3a:e9:51:f7:5f:43:04:
                    52:b3:fa:35:fd:86:d7:65:3d:8b:93:05:86:b0:a9:
                    eb:45:df:ca:e7:4a:8f:18:66:3e:61:a3:63:07:4f:
                    03:54:8a:d5:b8:b9:d2:68:99:71:e5:95:57:41:a2:
                    06:c5:e5:a8:ff:26:7a:20:d2:44:0b:ca:d6:b2:48:
                    69:de:70:5b:44:46:48:54:cf:3e:fb:00:77:f1:c7:
                    50:09:da:33:dc:c6:77:28:36:0c:9a:a1:14:22:de:
                    6e:1b:eb:fb:34:c4:f2:29:e3:1e:ef:82:bb:17:c7:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CC:53:AE:86:C6:02:5F:1D:5F:A2:4B:73:21:54:09:CE:B0:DB:A8
            X509v3 Authority Key Identifier:
                keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:70:a2:58:23:44:f9:fe:7b:c0:5f:f7:86:05:a6:bd:a2:93:
         cc:44:8e:d4:da:fb:97:c8:b7:d7:37:31:18:e8:b8:a6:69:53:
         21:2f:5a:7e:4c:57:33:58:ba:33:74:af:7d:dc:f8:43:cf:74:
         19:ca:f1:0a:95:75:5e:0f:58:fd:07:f9:b5:b7:f5:a5:b1:19:
         2b:e6:89:48:c7:c8:17:dd:76:a6:02:0e:ff:18:40:52:bf:d4:
         f7:4b:45:6a:e4:a3:a0:99:6f:00:e5:b1:cd:da:68:bc:d7:0f:
         cc:64:35:17:29:a9:47:ad:d2:f0:68:db:79:6e:a6:88:85:19:
         d4:2c:2a:b5:cb:96:98:8a:11:69:56:b9:f7:81:45:80:0d:55:
         2e:f5:f9:90:f9:62:a3:40:64:60:5d:91:ab:dd:03:7c:22:ce:
         82:88:43:69:b9:fa:b0:4d:54:fb:83:7c:3c:25:c9:87:44:e5:
         dc:2c:24:04:96:1c:f8:0d:43:a1:1e:45:db:3e:e5:6c:76:19:
         cd:31:74:9a:8f:27:90:39:0b:da:90:cc:6a:c6:d2:df:7c:ad:
         e5:12:76:0e:2b:e9:07:0f:be:c3:a3:52:de:fb:73:7c:ff:f4:
         1b:09:04:74:8c:bf:bd:ce:01:35:de:f3:5b:10:c0:db:a3:d6:
         a8:f0:81:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:58:00 2025 by rpki-client