Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File:                     TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier:          GRYho2HHIkTtWk/muvmKKxDsi30CYzZiSzX3H9Szs4M=
Subject key identifier:   92:B7:31:6E:6C:32:C0:26:B0:9B:03:05:69:8D:C1:39:2D:DB:59:D2
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer:       /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial:       0199FBEAB1C38B6B39A24E817D93B9A2F019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 10:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:26 +0000
Files and hashes:         1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
                          2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
                          3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: MbkZy7L10lJxejr9mT6xe8jO9nEYC52okiZgH+4oLhc=)
                          4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:b1:c3:8b:6b:39:a2:4e:81:7d:93:b9:a2:f0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
        Validity
            Not Before: Oct 19 10:01:26 2025 GMT
            Not After : Oct 20 10:01:26 2025 GMT
        Subject: CN=92b7316e6c32c026b09b0305698dc1392ddb59d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:06:51:af:ac:30:8b:d9:07:83:0c:18:b6:
                    6b:2d:48:32:fc:54:32:c7:6c:0e:e6:3c:6d:46:be:
                    fa:f2:f8:fb:19:ba:66:96:8b:96:1a:a2:e6:45:06:
                    22:1f:f3:b4:d2:5a:29:f8:c2:e4:09:4f:92:ac:65:
                    ae:0f:64:71:76:c6:c9:64:14:82:bf:a1:f7:21:bb:
                    18:7a:b8:0c:ab:50:6f:c3:5c:7b:ff:6a:4e:cb:7e:
                    91:a1:2a:ef:00:43:2d:e6:e8:a6:d9:9c:6d:a4:b6:
                    6d:94:03:58:83:f7:6e:99:f2:10:33:73:d9:5a:63:
                    2e:62:70:7e:55:da:7d:f5:3d:63:ed:1c:8e:5d:67:
                    ff:e7:c6:f2:23:c3:a1:9e:f6:a7:5f:a7:59:aa:dc:
                    dc:cb:a4:b5:e1:ad:c8:c2:8d:1b:04:6a:71:d3:19:
                    7d:b6:2b:13:9d:13:84:cc:fa:cc:65:57:0d:90:70:
                    7e:6d:06:5d:40:96:81:75:75:fe:94:56:4f:a3:14:
                    fb:79:eb:38:e2:f4:c6:ef:c3:b6:34:f9:ca:40:04:
                    d3:14:06:4a:29:3a:a0:c2:f8:b0:26:31:01:96:75:
                    f0:01:b2:a4:cb:9d:3c:a4:87:98:ce:de:84:12:9c:
                    5f:ee:a2:b7:f7:a9:65:70:45:c4:59:0c:6d:8a:10:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B7:31:6E:6C:32:C0:26:B0:9B:03:05:69:8D:C1:39:2D:DB:59:D2
            X509v3 Authority Key Identifier:
                keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:08:71:7a:fc:30:62:bc:53:10:4e:60:f0:ea:28:2d:33:49:
         1b:5c:b7:95:73:ec:54:ab:0f:e2:07:9e:3c:1e:06:3b:79:23:
         66:45:56:07:b1:28:47:c9:1a:e3:4e:50:28:cd:c7:90:08:58:
         e2:e3:d6:2e:30:74:43:be:c9:92:20:6a:46:19:3a:a2:e2:e2:
         bb:f2:5d:39:86:e1:39:71:3b:2e:a4:85:5d:5c:d6:fc:cb:d2:
         ff:74:7b:8e:85:16:20:46:ea:fa:12:eb:08:58:b9:92:d9:e8:
         e3:4a:ef:0c:7a:59:ec:46:91:c7:12:63:71:ca:45:4d:6d:2b:
         67:52:c1:c7:2b:1a:76:e0:f2:82:03:83:33:ad:0b:e4:32:7c:
         97:05:0a:31:45:79:fd:40:29:f1:4c:03:2c:23:e5:fa:f9:4c:
         a1:e7:7c:6b:50:78:de:e5:69:cb:74:30:83:6b:6c:27:b9:06:
         3b:8b:c8:ef:61:5d:69:be:ca:5c:e3:a9:f5:43:9f:a3:ff:c2:
         24:5f:d3:7c:13:e9:94:3f:4b:20:25:0f:bb:67:f0:3f:ea:2d:
         97:0a:b8:ca:2d:75:99:77:35:ec:47:1e:72:6f:fb:2a:83:0f:
         97:35:5a:ea:a9:2c:ee:21:19:9c:2f:62:4e:0f:2b:f8:a5:50:
         56:f3:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:33 2025 by rpki-client