Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File:                     TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier:          mXyxcULq/4CiAGtv22lLvU0SsSAJy4GcKVm+FhVi4DM=
Subject key identifier:   E7:99:EE:4E:CE:BD:92:B1:28:DA:F9:D3:77:31:05:2B:58:E1:BB:13
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer:       /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial:       0198D4E0C317508CCDB760F81ED4922FB426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number:          073E
Signing time:             Sat 23 Aug 2025 03:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:36 +0000
Files and hashes:         1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=)
                          2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: TJK+q8Ca1kRBtCvzsh6Qm5Lw9GkCT0Rx+oX8qO64km0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:c3:17:50:8c:cd:b7:60:f8:1e:d4:92:2f:b4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
        Validity
            Not Before: Aug 23 03:02:36 2025 GMT
            Not After : Aug 24 03:02:36 2025 GMT
        Subject: CN=e799ee4ecebd92b128daf9d37731052b58e1bb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:25:e1:39:47:ec:4d:78:4e:08:50:36:29:
                    97:83:a8:92:d3:b9:ff:e0:5d:5c:a4:1c:34:89:4e:
                    4c:0b:5f:b8:a4:0c:a8:67:7d:c0:72:f1:70:ad:e6:
                    84:60:12:cb:c5:e4:32:54:bc:08:8c:78:3b:e2:70:
                    4c:23:10:a8:a5:97:e1:87:19:64:24:4a:1a:db:10:
                    6d:d7:a4:55:ec:94:85:7a:d7:fa:31:d4:0e:80:fa:
                    89:c2:53:c7:ec:0a:9d:16:9d:45:c5:00:e8:f9:d1:
                    61:2e:fa:bd:10:7f:e0:5f:0a:e1:4f:9e:22:93:99:
                    46:b7:3c:5a:b1:66:f2:94:d8:08:62:dd:d8:1d:22:
                    aa:c6:bd:8b:01:2f:dc:1a:02:0d:4d:7c:57:0d:80:
                    97:f3:30:52:2e:4d:12:3a:3d:ef:c6:e0:0a:36:73:
                    11:50:79:38:2f:8e:5b:6a:1f:26:6f:11:c7:ab:9e:
                    b5:df:50:a9:61:61:a6:ad:83:3e:75:48:06:89:84:
                    31:a6:35:2f:fa:29:5e:a6:b5:73:62:52:79:9f:28:
                    87:9f:b1:86:8d:73:f3:75:d1:6a:98:25:16:50:4f:
                    02:05:47:b8:36:1b:72:64:59:2a:b8:22:1a:3b:66:
                    7a:c6:aa:b8:2b:d3:ce:10:37:2b:12:df:ac:e0:7e:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:99:EE:4E:CE:BD:92:B1:28:DA:F9:D3:77:31:05:2B:58:E1:BB:13
            X509v3 Authority Key Identifier:
                keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cd:4d:61:fb:b6:ef:dd:85:b0:33:67:5a:c8:0a:9d:32:f5:
         32:07:3a:fd:47:78:41:4e:1b:a1:c9:98:39:3c:45:f8:61:fe:
         36:96:5e:4d:59:cb:c1:23:77:1a:99:ce:63:03:4a:67:a5:81:
         c5:82:4f:d2:54:cd:e0:88:15:9b:ee:95:2f:0c:cb:5d:b0:e9:
         2e:05:01:f0:d9:b6:99:89:c0:f6:73:94:27:a2:54:01:33:29:
         db:d3:17:b9:ff:3c:5b:57:a1:c4:f5:d8:dc:46:0e:59:c8:ec:
         54:12:34:27:15:1a:c0:fb:da:b3:f3:f1:bd:71:4f:57:13:e3:
         11:b1:89:4b:53:6c:30:c1:ea:36:03:7c:3a:e4:a6:d2:65:37:
         e6:9c:45:c5:eb:32:69:65:2f:3e:65:c8:fb:b1:c0:c6:f3:fc:
         d5:69:24:ac:65:e8:4a:c9:86:4a:84:75:04:50:e9:11:0a:58:
         13:df:96:cc:4d:94:2f:3e:b7:95:0b:89:02:1e:7b:25:a4:b1:
         3f:0c:3c:9e:7c:24:74:e8:74:9a:1b:a8:f8:3a:e1:a1:da:f1:
         38:a8:3d:59:89:aa:f2:83:0c:94:21:f6:d2:c8:e7:3c:d4:10:
         84:27:7c:6b:f2:4f:4b:33:4c:93:b0:37:2a:62:9f:2c:b2:71:
         e1:b6:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:29 2025 by rpki-client