Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          CZLevog4KFMfEF5VYh0cSqqUd4ts4woGQRSorGamTrE=
Subject key identifier:   58:2C:A8:2B:B7:1A:A6:29:F8:5D:CF:F6:04:77:0E:F6:22:5C:62:8B
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       0198C5DAE9685A7B709787C2104D6CE35246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          1645
Signing time:             Wed 20 Aug 2025 05:01:54 +0000
Manifest this update:     Wed 20 Aug 2025 05:01:54 +0000
Manifest next update:     Thu 21 Aug 2025 05:01:54 +0000
Files and hashes:         1: 17YYIme-KWzHBg96NocCTiyimXg.roa (hash: FAXdBZmp0XEPsS+suM0xEmeoeGFCXd94Tv626XwAcGQ=)
                          2: H94mgXcbmEPiObELGoT_irqbFZA.roa (hash: zafi3kAgrBwpb+xZqeS8u0za5f6rLKTWup2Rk4ukWyE=)
                          3: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: fuYs7kt/AgsGtJDXd042lDE6Rk28DHKekIDLY/ziYCI=)
                          4: v0ygM5ko9tgsiV9gTnymwBnpZD8.roa (hash: Qr8YJSCtuGUwCDefoz4H2ImMBPjSdowCdy9x6G8wdbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 05:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c5:da:e9:68:5a:7b:70:97:87:c2:10:4d:6c:e3:52:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: Aug 20 05:01:54 2025 GMT
            Not After : Aug 21 05:01:54 2025 GMT
        Subject: CN=582ca82bb71aa629f85dcff604770ef6225c628b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:76:c0:97:4f:28:43:9e:07:b6:8d:79:89:
                    ad:fc:d5:5b:9c:45:d9:54:64:0a:37:20:d5:40:e7:
                    ab:72:f6:4b:0b:9b:56:84:9b:7e:bc:49:7b:57:7b:
                    52:10:09:da:61:91:e2:15:20:dd:e4:85:54:60:bc:
                    06:8c:d9:79:46:90:35:76:ff:35:66:f8:5a:d1:a5:
                    d6:b9:63:0c:0b:d8:8c:e0:a0:35:8d:29:af:4b:c5:
                    c7:ff:02:6b:73:6e:8e:3d:77:da:33:8a:f7:60:70:
                    18:46:13:70:3f:73:2e:60:7c:6d:9c:f9:3f:2a:45:
                    59:c2:33:e5:46:85:a2:d2:76:b9:af:bb:6d:65:f9:
                    46:e5:19:25:89:b8:5e:2b:1a:c4:2c:89:bf:ee:fa:
                    65:b0:37:4d:14:b3:16:34:e3:17:e9:84:1d:4e:b9:
                    20:78:4c:07:e3:2f:26:47:a8:8d:b3:b5:dc:01:86:
                    ac:2b:a5:ce:c5:c9:a7:f2:0b:ad:da:a1:df:68:fd:
                    b9:77:24:f9:a9:78:2c:bf:f8:e2:fd:f7:ed:9c:e2:
                    f3:c8:f1:9e:a1:ad:98:d4:94:1f:dd:08:bf:20:aa:
                    8b:20:f2:07:a1:4f:f0:13:66:9c:d7:ab:56:40:0e:
                    86:4e:a7:8f:6d:f0:60:58:58:e1:4c:bf:39:48:99:
                    30:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2C:A8:2B:B7:1A:A6:29:F8:5D:CF:F6:04:77:0E:F6:22:5C:62:8B
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:c1:74:87:84:b9:f6:ed:73:04:4b:dd:98:c5:cd:13:0b:
         51:f9:64:a7:b4:86:5e:57:d9:5b:a8:89:61:27:31:56:c4:19:
         9c:8e:e8:04:61:a6:68:96:ec:00:4d:a2:59:7f:90:dd:06:39:
         85:b6:b7:b2:13:26:88:56:8e:dc:91:b3:30:ee:75:9f:dc:97:
         ad:0d:f3:77:36:76:69:6c:3b:26:cd:dd:4b:10:b6:d8:f0:68:
         0b:ed:d4:2c:1b:95:ba:11:16:93:80:9b:59:cc:60:e5:41:ff:
         8f:5b:23:9d:fa:f9:65:b1:40:fc:e4:a4:27:a7:b5:1b:35:92:
         c2:42:00:80:ef:5c:44:b4:11:ba:76:bb:f1:d7:f7:e5:5d:36:
         4c:0c:18:cb:c0:b3:02:79:a7:e2:89:a3:7c:ec:ca:8d:b5:ff:
         4c:e0:58:3e:8d:9e:36:76:52:c2:cd:7a:c7:e8:94:b0:24:1c:
         43:04:36:a9:88:98:f3:31:04:da:21:d3:ff:df:17:f3:53:f3:
         de:0d:9e:15:b0:57:ef:9b:4f:1d:cb:09:57:d8:92:00:48:d2:
         92:aa:f3:d8:46:fa:9d:d9:b7:7c:35:10:bb:fa:a6:46:be:6e:
         d4:5a:ba:19:1a:0c:01:e1:5e:4e:be:ce:f5:84:b2:bc:b8:56:
         f0:b8:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:11:18 2025 by rpki-client