Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File:                     tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier:          v3/0/923e4SxNBkfJaX+Evpu/EzJ1a5fbIQE4UdwxPY=
Subject key identifier:   58:19:F5:EB:19:2E:DB:14:EC:3E:35:FB:3E:A2:D9:06:92:DD:4D:1E
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer:       /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial:       0197C72672F6CC3B703067A5510BEF4D2F1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number:          04A8
Signing time:             Tue 01 Jul 2025 18:01:15 +0000
Manifest this update:     Tue 01 Jul 2025 18:01:15 +0000
Manifest next update:     Wed 02 Jul 2025 18:01:15 +0000
Files and hashes:         1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=)
                          2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: yJFv05P5hZbuuEVNJqNo2f6CLKlDv++xYc47fq1saqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:26:72:f6:cc:3b:70:30:67:a5:51:0b:ef:4d:2f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
        Validity
            Not Before: Jul  1 18:01:15 2025 GMT
            Not After : Jul  2 18:01:15 2025 GMT
        Subject: CN=5819f5eb192edb14ec3e35fb3ea2d90692dd4d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:e9:93:a3:ed:e8:38:5d:c1:4b:dd:54:56:
                    6c:52:8a:6f:6f:a6:49:01:35:3b:ed:2d:a0:1a:7f:
                    a8:b4:d8:79:ac:78:73:d9:d1:e1:b5:45:ab:b1:f8:
                    e6:36:ff:6c:df:61:d7:c3:70:c2:d1:5c:b3:df:fa:
                    89:a8:71:36:9b:2f:1c:65:61:3f:45:14:db:4d:50:
                    ba:c1:13:cf:c6:52:f0:f7:13:aa:50:3d:85:74:83:
                    fe:53:a2:32:45:f2:cd:b1:6c:00:17:80:69:2d:f2:
                    3c:c2:82:d5:a2:3a:de:39:5b:ea:ce:14:e0:37:ec:
                    fe:7d:b3:43:14:91:e6:99:40:a7:7e:3c:ec:52:d5:
                    58:95:19:e3:96:d2:5a:60:17:76:93:c0:35:15:41:
                    e5:d2:9b:da:06:f6:5a:2c:29:3e:45:50:5e:c4:d1:
                    3f:f2:6a:ba:c7:73:42:a6:c4:6b:6b:08:a9:24:4e:
                    c4:70:4f:03:77:f2:b8:01:72:b9:92:c4:b0:42:99:
                    e7:dc:f0:fb:27:06:a1:35:db:a3:18:9e:ea:6a:7e:
                    8c:1a:2d:f0:59:46:93:a0:5c:51:ff:20:3e:2b:ed:
                    10:1a:b5:f5:cb:d0:bc:4b:a7:1f:74:4d:03:35:23:
                    d5:b4:f6:e0:d2:b8:70:7c:ed:ee:e6:2d:14:79:90:
                    60:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:19:F5:EB:19:2E:DB:14:EC:3E:35:FB:3E:A2:D9:06:92:DD:4D:1E
            X509v3 Authority Key Identifier:
                keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f3:19:43:d4:85:a9:1b:9b:32:23:4f:3c:be:d0:1c:b9:a7:
         4d:d8:bf:ec:11:81:fe:58:9b:6f:b4:25:b5:15:c1:14:56:d1:
         99:77:3d:89:8a:c5:0c:77:02:7c:8d:d2:0e:e4:4f:89:f0:39:
         9b:33:9c:6a:e2:67:99:f8:1c:ea:aa:96:69:34:01:8d:bc:c8:
         37:2e:44:7d:b6:7e:d2:f4:12:8a:0a:95:24:52:fe:3f:50:91:
         00:46:36:3b:16:b9:85:8d:93:8c:60:23:9f:98:78:16:6e:5d:
         1f:39:cc:69:b5:1c:80:48:8b:d7:f4:66:69:6a:f2:37:85:b0:
         a4:26:f6:2e:e1:97:b5:4b:b2:e5:9d:8f:3c:fd:40:7f:36:08:
         18:da:d6:73:7c:2b:43:75:24:84:b9:c4:d4:ba:7a:92:7e:52:
         66:36:13:9e:c0:13:86:e5:96:b9:d8:d8:67:cd:66:52:41:8f:
         3a:46:44:00:5a:08:c3:12:4f:16:a8:57:a8:ed:4e:0e:45:15:
         28:c7:e7:e7:a6:7f:d2:7c:20:91:90:fc:c3:5c:86:f4:35:b4:
         f0:88:26:e3:fd:ed:1a:5e:0f:75:61:0d:91:9b:b7:a1:09:b9:
         d2:12:44:08:5c:07:7b:63:84:2e:2d:b6:73:8a:9a:2c:67:1f:
         af:fa:3c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:57:09 2025 by rpki-client