Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          BmJD5Ye27tznJ7hwUyxgB7R8Gxy+u9EzJy/rUSAeDHs=
Subject key identifier:   41:EC:07:01:E8:C2:B1:20:A4:71:49:7A:25:EC:02:53:B7:F6:5F:57
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       0198D661487174C7D297BF2214B81202F177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          0586
Signing time:             Sat 23 Aug 2025 10:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:36 +0000
Files and hashes:         1: 4ib--cnqLp0oi-QRP9CJRqv85Fk.roa (hash: NsYpYhfEaLmslYSk1TQ4VoW4ixy6WRpz9PM1r2Tk7Rg=)
                          2: MtLhAuf2NgYHgf0idQEjB2O5NSs.roa (hash: au7HQECLFDd4UQvAj9wy4z/oD6hBOrQVLU0RNpgJw7c=)
                          3: R23zeQRDOen9HPSmR-eKHeta0HU.roa (hash: lKe4syLzRE8BrGtoS0ZImyw7G/jxJEgSU5WDE02BXs8=)
                          4: Rb4b2fJCublE-IL8HhGXicF9sEM.roa (hash: PyYAOqircy60MPWz4V06L7QvOxOEimKDajTYlawGVcc=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: YGs3svbX90Ev/u8ZqAYotGnGrzgydSBMmRtzHww/3eI=)
                          6: nPr9uZx_D8jJFj15etiyotIJZFA.roa (hash: pbSWt6WwR9cxpCQXd7EkLbNcjMbaXCcbiCmqJC5x8GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:48:71:74:c7:d2:97:bf:22:14:b8:12:02:f1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Aug 23 10:02:36 2025 GMT
            Not After : Aug 24 10:02:36 2025 GMT
        Subject: CN=41ec0701e8c2b120a471497a25ec0253b7f65f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:12:0d:69:ed:67:69:ae:8d:a7:8c:52:07:
                    cd:a4:11:fb:1f:3e:60:f2:5d:bc:54:f6:76:42:07:
                    21:2a:75:ac:7b:25:a4:8e:33:45:03:bf:b5:fd:5d:
                    83:cb:25:41:fa:9d:46:df:e3:7c:e4:81:ee:fb:ae:
                    74:08:40:35:61:31:81:7e:58:a5:70:60:fb:b9:0d:
                    ad:32:93:0e:83:a1:a1:74:06:40:e8:3c:21:10:76:
                    72:35:a5:fe:be:42:b6:3b:ab:53:a4:1c:f4:6e:0e:
                    a5:f0:d7:c3:28:5a:da:32:53:8d:f4:e9:fa:77:ea:
                    49:86:e5:f0:b6:46:e6:f9:d4:ab:f6:1a:a2:9b:e0:
                    79:5f:80:b4:1a:49:0d:43:5d:35:16:81:c0:93:09:
                    7b:91:9d:54:f6:47:27:bc:82:b8:8a:19:ec:e8:21:
                    2a:4d:95:4d:4d:78:46:02:c3:bc:8f:12:11:c8:5c:
                    dc:95:b2:b0:43:d6:2a:16:41:4a:60:26:29:26:04:
                    94:88:4f:6e:c8:8b:4b:47:84:21:e8:d1:54:9a:98:
                    87:25:49:f1:87:62:30:b6:7f:be:f4:5c:b4:64:6a:
                    fe:42:21:22:cc:62:10:ad:88:66:83:28:d8:74:fc:
                    b6:4b:2e:1b:f5:01:2f:1c:48:76:88:18:14:3d:ed:
                    df:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EC:07:01:E8:C2:B1:20:A4:71:49:7A:25:EC:02:53:B7:F6:5F:57
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:62:97:60:34:2a:d2:74:b7:7d:c9:92:a3:80:f0:1b:cd:74:
         2e:d6:9a:77:a2:1b:aa:93:66:d4:54:d5:8f:78:26:2b:ba:64:
         1b:1d:3e:5c:dc:37:c4:12:12:fd:7c:af:1c:50:f6:26:05:10:
         2b:a1:b6:eb:1f:47:cd:ba:be:63:9b:37:f8:bc:70:da:b5:ee:
         4d:49:7c:b9:a0:2f:c1:8d:00:cf:b6:ff:60:da:f0:19:0f:79:
         c9:b4:a8:65:1b:21:87:52:6e:30:c4:bb:d2:33:7d:9f:d4:5b:
         40:15:d8:df:85:23:0a:4f:f1:01:09:a7:24:3b:2a:8d:e7:64:
         2e:00:d9:1e:38:38:69:7e:63:5e:f1:e3:11:c5:ce:66:05:fa:
         ee:17:39:c3:5c:3c:ec:ab:5a:44:1f:42:2c:ce:6d:5f:47:05:
         62:de:02:c4:e5:66:b1:29:f7:91:0e:1c:a1:fe:2a:2e:07:20:
         19:f8:38:f6:64:86:84:4a:ef:02:23:86:b8:e7:70:8f:0e:3f:
         cd:2c:ca:fc:33:be:f6:9a:0e:20:44:30:e5:20:ab:f7:d6:40:
         4d:2e:70:e8:b4:f1:3d:57:5c:d0:43:e5:7e:37:01:ee:79:9a:
         da:42:8a:a3:bc:2e:7c:56:d6:9c:80:0d:f7:7b:06:82:7a:47:
         ab:84:c2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:42 2025 by rpki-client