Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File:                     TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier:          Cnu1K4QRcZBOB0O9JFfYQEPKaY6p7o81ATSab4j5wCc=
Subject key identifier:   1A:45:54:B2:04:2D:58:CC:88:44:CC:5A:FE:16:35:F7:2A:98:E0:54
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer:       /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial:       0197CC15C5D8903B51658983E1E9BA505C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number:          15C4
Signing time:             Wed 02 Jul 2025 17:01:08 +0000
Manifest this update:     Wed 02 Jul 2025 17:01:08 +0000
Manifest next update:     Thu 03 Jul 2025 17:01:08 +0000
Files and hashes:         1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
                          2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
                          3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: DkDZ3atKkAIKxGB0P4WOSba2mqp+/CLKuUHbFCK3Wq8=)
                          4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
                          5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:15:c5:d8:90:3b:51:65:89:83:e1:e9:ba:50:5c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Validity
            Not Before: Jul  2 17:01:08 2025 GMT
            Not After : Jul  3 17:01:08 2025 GMT
        Subject: CN=1a4554b2042d58cc8844cc5afe1635f72a98e054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5f:d3:e0:aa:cd:07:c7:03:0d:64:32:9f:43:
                    0a:96:a2:73:fe:91:2e:13:46:11:ae:90:e1:20:9e:
                    8e:ce:73:68:48:3f:2a:ae:8b:fc:e4:db:15:3f:4a:
                    58:b8:1e:7f:6b:7e:a3:09:f1:a9:29:3f:0e:cc:50:
                    43:79:f2:cc:0d:39:63:44:6d:19:65:51:4b:eb:f3:
                    aa:e8:0e:37:36:46:67:ab:ff:62:8f:1a:eb:fa:31:
                    ab:33:f1:e1:bc:b3:9a:d9:8e:44:fe:70:01:19:83:
                    8a:9f:c6:7d:0f:03:3c:e4:28:2c:b1:f4:0e:11:e9:
                    48:3b:f6:c3:dc:9f:d8:e1:1c:2e:b8:d6:97:d0:44:
                    60:98:c7:ad:f3:81:02:10:ff:c7:45:7f:20:fe:6f:
                    8b:ac:41:d7:44:46:44:22:a6:6b:d9:32:c7:22:71:
                    c3:05:a6:ba:a4:01:33:bb:21:9a:18:e1:d2:af:71:
                    51:0e:36:8f:ed:39:88:55:8c:c0:a4:77:75:b2:87:
                    c0:88:84:7d:dc:01:b6:e2:50:56:49:04:de:d4:f0:
                    22:9f:7a:f6:82:56:43:d7:c4:47:d2:d5:44:7a:8f:
                    ad:94:3f:90:36:3e:e6:96:64:22:24:65:a0:c3:b8:
                    7e:81:d8:b7:55:6b:b8:71:20:95:6c:a9:53:f4:48:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:45:54:B2:04:2D:58:CC:88:44:CC:5A:FE:16:35:F7:2A:98:E0:54
            X509v3 Authority Key Identifier:
                keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c2:fb:08:db:e4:93:ac:cd:67:fc:b8:f6:3a:34:0a:3a:fe:
         6a:ba:11:9b:04:d4:08:c9:fb:63:5f:00:34:1d:c7:49:bf:df:
         9c:a6:89:8a:6e:46:c3:70:6e:87:cc:75:72:b3:ee:b6:8f:70:
         22:e4:bc:df:55:e2:eb:f8:d6:16:8f:96:79:bc:ba:66:7c:92:
         e2:be:c2:f2:c3:5c:38:7c:7e:b2:26:06:84:84:b7:a7:25:66:
         fe:3e:ba:65:31:d5:cb:4c:4a:0b:16:1d:a0:44:85:5c:f7:a1:
         2f:e1:1d:af:5c:55:1e:1b:1b:ca:c9:46:6b:e0:2c:be:66:53:
         39:41:63:c9:17:5a:2a:08:72:35:aa:d6:1f:2f:5e:e1:52:a9:
         2a:e2:fa:bf:9c:a0:c4:fd:cf:56:3f:94:cc:43:82:c6:95:09:
         57:66:e4:4b:28:91:1b:a2:fd:2d:6e:60:63:a8:e6:65:5b:70:
         c4:8a:1a:5d:e9:95:13:89:ab:93:dc:80:36:6f:1f:87:ee:7b:
         40:71:46:60:bf:5f:a9:85:d6:a0:c6:b9:fb:9a:21:62:0e:69:
         29:e6:1b:b1:c3:d6:23:9f:01:b5:5b:80:f8:66:d1:ab:1c:1d:
         6f:20:17:7f:62:15:4b:93:ea:15:a9:cc:45:f5:d5:aa:d3:ad:
         2a:2b:fd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:01:43 2025 by rpki-client