Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File:                     TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier:          zpDC/jGAM6YoNQDj7aP91AsGtpQquAcbxlDn+u+RD6E=
Subject key identifier:   9D:4A:2B:E4:90:31:6E:26:41:FF:61:EA:FC:2C:83:7B:47:CE:39:04
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer:       /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial:       019922C304B21DE576A9EC10B188CC276952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number:          1670
Signing time:             Sun 07 Sep 2025 06:00:29 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:29 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:29 +0000
Files and hashes:         1: Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa (hash: evDadyMTuwtAOSC/b6PGvpRRvlRN1DP+6W56r0BhqXQ=)
                          2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: 8y5aZYhI7CNUD/0/Usyp8kkVEAqQfNhfIQ1mSjNB++k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:04:b2:1d:e5:76:a9:ec:10:b1:88:cc:27:69:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
        Validity
            Not Before: Sep  7 06:00:29 2025 GMT
            Not After : Sep  8 06:00:29 2025 GMT
        Subject: CN=9d4a2be490316e2641ff61eafc2c837b47ce3904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:bc:ce:c0:f3:b5:f9:0f:d7:df:23:99:2f:
                    3d:c5:da:fd:44:76:67:d7:34:bc:c7:1a:dd:2e:78:
                    33:fe:49:c4:37:8e:e3:41:03:a9:94:dc:0d:a9:ae:
                    08:6d:d2:12:36:0f:f0:ed:a7:94:78:77:c9:11:d9:
                    a4:b7:d0:ec:eb:8a:7a:af:db:44:a7:cd:4e:51:ef:
                    80:9d:f7:79:f1:5c:f8:09:cc:38:a5:d4:23:71:08:
                    09:38:66:ee:af:cf:5f:95:06:05:43:1f:3a:28:2f:
                    9e:80:f8:55:3f:62:6d:1b:ae:b4:3e:a8:c9:44:a1:
                    e5:1a:22:97:d2:55:6d:c5:7a:41:af:e0:d9:74:6a:
                    2b:05:f4:7f:69:44:91:46:d4:6d:d3:85:a2:9a:fa:
                    6a:8d:97:b3:db:09:b2:c4:e4:ad:77:0c:ae:1b:55:
                    c3:d9:c2:c5:40:01:4b:81:6f:b7:5b:85:e0:ca:8e:
                    fa:d3:18:0c:a6:1f:41:0f:e3:d2:69:0a:12:6a:fb:
                    91:e4:02:cb:65:c1:e0:bf:eb:3b:a7:7e:6d:b2:8d:
                    c4:32:16:1c:7f:0d:dc:48:33:ed:bf:7f:5f:65:6d:
                    88:a1:db:fb:d8:96:f3:d6:9e:27:82:f7:a2:e6:f7:
                    e9:6f:4d:6f:6d:1d:2f:54:7c:80:a4:86:71:6e:f9:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:2B:E4:90:31:6E:26:41:FF:61:EA:FC:2C:83:7B:47:CE:39:04
            X509v3 Authority Key Identifier:
                keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:fc:08:5a:9f:d4:64:09:60:7b:05:f6:5f:a5:93:2f:06:3f:
         06:9c:04:5d:55:0d:14:d3:88:18:53:13:39:e0:6f:36:70:a1:
         cf:6d:de:c3:e8:a8:38:95:93:73:87:30:5a:66:26:b3:92:d8:
         64:d8:01:84:69:dc:e0:db:bd:b8:2f:1c:e7:be:02:c1:cc:b4:
         b6:78:57:31:f6:06:8a:1d:7c:84:ab:21:67:90:6f:1a:ac:11:
         69:07:e2:ac:3e:e2:b8:60:16:03:18:28:e7:5e:4f:c3:ab:b8:
         51:84:a3:c2:1b:30:2a:ac:53:15:26:72:fc:51:6d:2f:71:fe:
         9c:42:3d:a6:21:47:27:a3:47:55:bb:4f:39:d3:e9:7e:32:e9:
         fb:e1:50:c4:f1:32:b6:1c:d0:14:2a:c4:cf:7c:50:f1:d3:26:
         30:64:bb:5d:f0:dd:d6:e7:9b:f5:02:fb:47:c5:3a:84:29:74:
         e8:11:23:06:9e:a4:1d:1b:31:9c:3b:56:46:a3:17:57:6b:fd:
         5f:03:b7:bd:89:d5:9c:5f:62:d2:7f:b5:33:dd:24:a6:d3:3d:
         8e:71:21:03:01:10:a0:b9:b6:a5:33:8a:a1:f1:44:bd:18:64:
         66:86:8a:b1:91:bc:3c:06:a5:ab:5a:7a:1d:53:db:1b:cc:a2:
         42:0e:18:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:20 2025 by rpki-client