Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
File:                     Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json)
Hash identifier:          OKNTr/3/G/NFXH8NCIeXraa8+gMFGxru+HwNjIOP+MU=
Subject key identifier:   09:06:7D:9F:8A:C8:28:1D:E6:F1:66:81:B8:AF:49:06:57:C5:6C:50
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Certificate issuer:       /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial:       0198D697EAAB0F987A75C206C368864F7DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
Manifest number:          1663
Signing time:             Sat 23 Aug 2025 11:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:16 +0000
Files and hashes:         1: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: SEoEEr2JNAGbVpEBEKgCpjuFArRj3IiwID5cNUjYEj4=)
                          2: sPL5rUlzKx5_eiK0H41Atshaecg.roa (hash: gZZ6IxCmuB2B723uD8tUyKBaH66Mb5llFLuK/jyTEBM=)
                          3: wgOqnnsWlsLcY-e3U904w3g_rl0.roa (hash: Ww7qe8WtK5P+D80awiXawU9bPGz6ArE4FuPa1FSF2jU=)
                          4: wub3ojVvtYVNr5_D3zKLLbWF2_M.roa (hash: 0Ivv/JEf+s+UoAgsprFNMguw897KPBdxp9YKz2VJrNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:97:ea:ab:0f:98:7a:75:c2:06:c3:68:86:4f:7d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
        Validity
            Not Before: Aug 23 11:02:16 2025 GMT
            Not After : Aug 24 11:02:16 2025 GMT
        Subject: CN=09067d9f8ac8281de6f16681b8af490657c56c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:a9:42:58:73:07:15:44:0a:cb:21:f3:c5:
                    b1:91:6b:89:62:c1:f3:ba:76:dd:f4:24:d3:4f:5c:
                    37:04:a8:ab:70:b9:80:e4:03:89:f3:eb:de:ae:f4:
                    1a:ad:0e:0f:e7:d9:ad:05:3a:56:4b:07:aa:62:24:
                    dd:cb:c0:35:5c:ce:6f:74:31:ea:27:12:60:c3:76:
                    21:19:c2:1d:45:e8:3a:15:aa:2e:90:25:b5:6a:31:
                    48:ea:d1:d7:82:c7:f5:99:13:53:9c:23:80:99:07:
                    4b:8f:d1:eb:ff:0a:c1:10:a2:bc:17:9f:81:49:77:
                    0b:6b:80:c9:09:51:94:6c:2e:9f:a4:5a:51:e6:4d:
                    a4:7d:41:39:be:8f:48:3f:1a:32:05:69:d0:b7:9a:
                    6f:6b:17:4f:c6:fa:a6:29:ef:4c:3b:3f:d6:67:d3:
                    b7:ce:d4:2c:4e:88:eb:24:63:4e:5d:9a:30:1e:1c:
                    0f:3d:97:94:b7:30:66:dc:a3:45:ad:0b:4e:6e:08:
                    bf:8b:3c:0d:8b:28:cc:d0:d8:63:f8:e4:ca:f4:f3:
                    a4:4b:9f:cc:5a:eb:90:4a:94:68:bd:42:c4:4e:7f:
                    03:ca:bf:d4:8e:7e:4c:e8:09:c0:c5:1c:ef:b4:71:
                    73:66:db:0c:c4:f6:9a:6c:f0:1a:12:5f:8c:04:01:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:06:7D:9F:8A:C8:28:1D:E6:F1:66:81:B8:AF:49:06:57:C5:6C:50
            X509v3 Authority Key Identifier:
                keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:49:26:fc:fe:c6:55:26:1f:92:61:18:56:0c:b5:d9:72:db:
         2f:72:27:f5:d2:7b:30:47:63:ed:58:89:d7:50:f6:2d:68:81:
         e7:52:33:28:b1:49:7d:45:ae:3e:81:1b:c1:f2:2f:a2:75:8b:
         6a:eb:9f:29:0c:43:c3:90:34:8f:fc:df:81:6a:4d:9f:68:1f:
         ec:cc:33:ad:a0:dd:d5:1f:3f:43:77:46:82:7e:cb:74:b8:3d:
         79:74:80:18:77:b7:6e:e2:58:a2:b3:71:81:be:72:67:ee:08:
         2e:fb:b0:f1:7c:e2:9b:33:e0:ca:76:93:cf:75:d7:fe:53:31:
         66:c2:26:7e:e0:e3:6e:a0:dd:01:35:a1:08:7f:a1:c1:d5:3a:
         00:bf:89:89:59:00:ae:8f:34:66:59:ad:e5:f5:d2:4d:6f:a6:
         e6:15:20:76:73:60:b4:b3:62:09:db:1e:1c:e0:41:e9:bb:b6:
         cb:d2:60:39:b2:fb:6d:4c:d5:85:90:c0:df:07:1a:56:90:1a:
         a1:55:e7:69:63:0f:5a:4a:72:90:8a:7a:12:44:d2:a9:7c:f2:
         ef:36:90:8d:e1:56:3b:a4:d7:2f:f2:fd:c5:ea:8a:92:59:d6:
         4c:17:72:0e:df:74:55:4d:ca:3e:58:41:a3:7c:0a:8e:ae:c4:
         51:72:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:15 2025 by rpki-client