Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File:                     tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier:          Mp02hQ5WSrXmpntW8RbJBPDEIqDDQsCY6YAB7jni5Eo=
Subject key identifier:   02:6E:E6:91:DB:82:0F:D7:3A:8C:AD:C8:F5:4F:A0:9A:20:EC:AE:B1
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer:       /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial:       019922C37E657383FA8429D5DD085E9AD727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number:          055C
Signing time:             Sun 07 Sep 2025 06:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:01 +0000
Files and hashes:         1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=)
                          2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: m/GnrhACMP1bXNDKIQ6PZnzOE04Ip6di0OteRecHdMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:7e:65:73:83:fa:84:29:d5:dd:08:5e:9a:d7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
        Validity
            Not Before: Sep  7 06:01:01 2025 GMT
            Not After : Sep  8 06:01:01 2025 GMT
        Subject: CN=026ee691db820fd73a8cadc8f54fa09a20ecaeb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:9f:ae:92:2d:9e:90:00:56:8e:ec:b2:a6:
                    ce:36:55:96:46:ac:1f:f0:a8:51:bc:6a:5f:c3:8a:
                    05:0e:36:d9:9a:2b:48:35:c1:dd:24:4b:4c:ab:f1:
                    47:42:7f:03:ce:58:3d:4e:3f:bb:0f:7e:d1:69:a7:
                    3e:a6:cf:8b:f8:1d:3d:34:64:0d:94:93:ab:44:bb:
                    46:c6:e8:a4:c5:7f:a4:90:bc:84:66:7f:67:37:a6:
                    d1:4d:27:df:0c:82:bf:a5:9d:5f:a1:6d:41:e0:ed:
                    45:c8:e3:3c:c3:3c:71:84:98:16:4f:58:6b:bb:d9:
                    c4:ea:49:23:08:61:cf:3e:3d:06:c5:49:e7:07:e1:
                    32:53:c3:e5:64:7f:6d:fb:0e:ce:c0:c9:7f:b6:9a:
                    ed:ea:03:ab:23:57:70:d0:94:24:62:97:40:d6:11:
                    d3:da:f9:57:e7:f0:b6:ab:ed:f3:7d:b6:c9:c4:6d:
                    c4:cc:14:53:a3:72:be:e7:1c:a2:c3:1f:be:9e:e2:
                    d6:5a:e0:9d:fe:c8:e6:72:43:7a:78:7e:0a:67:27:
                    66:61:7a:26:87:2b:07:40:cf:b0:9b:00:87:14:97:
                    60:80:32:9e:65:8c:ee:86:13:54:ff:e7:f7:f1:c7:
                    c6:1b:70:21:f3:d6:ae:f3:c8:1e:ff:86:74:b0:42:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6E:E6:91:DB:82:0F:D7:3A:8C:AD:C8:F5:4F:A0:9A:20:EC:AE:B1
            X509v3 Authority Key Identifier:
                keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c0:5c:0b:08:58:b8:70:0a:dd:9b:64:df:c0:6b:30:b5:32:
         71:d1:11:97:33:94:7e:62:e6:ec:49:b3:a0:ec:30:d3:c2:7f:
         97:34:82:72:8a:45:27:18:f7:07:b2:65:f1:9a:05:a9:91:c6:
         76:ce:d4:ac:2f:bd:49:a5:0a:be:04:61:b5:ad:94:a7:98:0b:
         75:4d:64:3d:5c:0a:ef:1c:d3:12:16:53:94:76:e1:01:06:f6:
         fb:cc:a1:87:b7:bb:01:9d:1f:c9:ea:71:df:00:a0:14:5e:18:
         70:5b:10:63:91:2b:3d:a3:12:33:15:19:32:3e:e0:22:f9:7c:
         56:b3:0c:ad:bd:3c:18:7c:c6:2d:d8:ef:df:42:20:2e:a0:48:
         bd:7f:85:aa:99:9d:61:35:10:f2:27:cb:c3:6f:67:19:09:8f:
         84:17:54:c8:0d:5a:6a:ba:81:e0:d9:f7:c9:0f:4c:3e:e1:6b:
         7d:f8:79:23:8e:25:97:d4:cf:de:8f:c5:c5:46:2f:89:52:8a:
         b2:75:e2:42:e1:62:16:e4:47:ec:73:93:46:68:34:5b:9c:43:
         1c:57:cf:fa:db:e2:3b:17:da:3a:4e:34:57:48:96:44:44:69:
         b9:89:1c:bd:91:15:34:25:d2:ce:8f:b7:bc:d8:72:06:2a:d8:
         b5:41:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:24 2025 by rpki-client