Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File:                     tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier:          yhTHig7s+NTy9fOtwJInyGR1GE6h/dxKptJRvDMMXaM=
Subject key identifier:   60:6C:8F:6C:9F:CB:BA:1C:EE:3A:B3:48:7A:0B:03:01:7F:CB:1B:B5
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer:       /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial:       0199FF22EF63DC3BB8D97E7880D8AE32BEB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number:          16EE
Signing time:             Mon 20 Oct 2025 01:01:43 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:43 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:43 +0000
Files and hashes:         1: 3wNNo-iI2pc3szTShzwRJQcPQ9g.roa (hash: UlE7Git4bpx6FDGabnpMDUtAooHhFae2TZHIhuwKgXk=)
                          2: MqT4HJJOzTQVMwOVUIPQ89Vg7oc.roa (hash: afWnYJW6s1CaDObkwTU5kA7v+0oYXDgnGB/f5yofQ5k=)
                          3: P7UI9wbXQO7767Ee_OeO-FbHpEk.roa (hash: 3nnbFB8QPYfC95SG+310oNK9akUzhHQ/muxTMob6BTg=)
                          4: U39msWOqgwaliq8DKMspRhKQ3Kg.roa (hash: Z6S+9hFUTMzmzmKnTFgFfim8JmWqS4uAPgj1Z/Z4oQ8=)
                          5: sGGZndDmRMx-w7J8U5J6G3BFVOk.roa (hash: uF6jgyxh4ugT/l6V+mIZvN4IJ+X7IddAc7QQehPWZsY=)
                          6: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: tSAQXPTbNKbN1A1mKBFB/XeWol6fb34Ayiv+bsAP1u4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:ef:63:dc:3b:b8:d9:7e:78:80:d8:ae:32:be:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
        Validity
            Not Before: Oct 20 01:01:43 2025 GMT
            Not After : Oct 21 01:01:43 2025 GMT
        Subject: CN=606c8f6c9fcbba1cee3ab3487a0b03017fcb1bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:08:57:48:64:6a:b9:5e:ca:ee:86:b2:32:81:
                    63:f9:af:b0:e1:28:64:5b:43:51:ab:8d:a1:2b:24:
                    ee:1b:36:fc:a1:cb:e7:ea:30:c4:ef:c9:45:1a:e1:
                    06:41:c4:11:ca:c0:34:f9:c3:12:a6:76:f9:35:2f:
                    02:f6:18:ae:55:60:81:8f:17:a7:71:da:a4:84:51:
                    5d:26:c3:d3:12:6e:1e:db:7e:6d:cd:6d:c4:b6:11:
                    57:2e:28:3b:94:38:c2:b9:91:c4:a8:cb:fc:cf:80:
                    38:dc:87:5d:e2:97:70:10:28:a2:ed:f8:d5:31:62:
                    73:90:6c:ad:1b:1c:4e:24:87:88:6e:c4:6a:47:71:
                    c2:b1:2c:98:45:e2:04:44:ba:20:95:6c:ba:eb:3d:
                    30:a7:f2:2a:7c:77:45:09:31:0f:c5:66:19:ea:1f:
                    63:81:7e:6c:74:5c:a3:1a:41:3c:32:00:81:ec:ce:
                    c3:d5:c6:32:22:c0:3f:f8:d7:92:ac:85:0f:78:81:
                    bc:fd:c9:d8:bf:ff:22:90:0b:5e:40:66:7a:95:a7:
                    1a:c3:22:d9:4e:a4:60:5c:88:3e:d3:a4:0c:d1:df:
                    f4:1d:69:c0:5f:e6:c7:44:47:68:77:18:e8:d8:a5:
                    5e:f0:2b:48:aa:2a:28:03:d6:2d:7d:55:b2:09:44:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6C:8F:6C:9F:CB:BA:1C:EE:3A:B3:48:7A:0B:03:01:7F:CB:1B:B5
            X509v3 Authority Key Identifier:
                keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e5:e9:86:e1:91:02:df:87:5b:54:fa:a0:62:55:f8:6e:1f:
         b8:56:3f:0e:74:1b:c6:1a:0b:23:1d:57:20:41:c9:ee:6e:b5:
         23:a2:c9:ba:2c:cf:0c:dd:e1:99:76:6e:a5:63:36:ee:30:7d:
         c3:52:17:3c:7d:74:f0:cb:bd:be:75:a6:b6:05:2a:14:43:9c:
         4f:f5:88:ed:e2:02:0e:e7:6d:20:f7:cd:54:e9:82:b9:d3:1f:
         93:96:ad:8e:a2:ac:22:66:eb:80:fe:45:d0:56:2e:8f:b4:83:
         66:35:93:75:58:1b:82:03:0c:26:ef:c7:69:22:9d:29:ea:74:
         2a:63:fb:ed:0e:ce:b1:1c:40:3a:f5:10:35:06:79:e6:3f:23:
         f0:fa:a5:cd:25:c5:f6:72:42:92:f3:2e:e1:b8:75:27:f5:ab:
         8e:c6:ca:11:23:f4:c1:bc:e7:cf:65:e9:5f:b9:00:65:7f:9f:
         52:0d:17:89:42:70:cb:af:2a:f5:e2:d5:62:d5:66:d8:6b:4f:
         7f:72:d0:bb:ed:d9:bf:82:39:db:6b:ae:15:a2:12:88:e0:a2:
         54:2a:80:d3:e4:f3:c6:37:e8:f7:ac:06:48:57:12:f9:e1:3f:
         29:07:20:00:97:f2:f7:fc:45:94:81:48:21:b3:36:13:ef:8c:
         2a:04:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:41 2025 by rpki-client