Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File:                     TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier:          +DR4FrrmdQlOgaEeV00ruSY/ui1s+LgX0QpcipwY9VM=
Subject key identifier:   13:2C:10:D8:CA:29:2C:D3:09:2B:85:B7:67:78:97:04:DE:EE:91:89
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer:       /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial:       0197BE5B641DAAB6DB343E88B1CD108228C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number:          15BB
Signing time:             Mon 30 Jun 2025 01:02:29 +0000
Manifest this update:     Mon 30 Jun 2025 01:02:29 +0000
Manifest next update:     Tue 01 Jul 2025 01:02:29 +0000
Files and hashes:         1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
                          2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
                          3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: XyDY6cSnQdPo60mYeHat81KXQfSXJUKsEfEx8uFkJvs=)
                          4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:be:5b:64:1d:aa:b6:db:34:3e:88:b1:cd:10:82:28:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
        Validity
            Not Before: Jun 30 01:02:29 2025 GMT
            Not After : Jul  1 01:02:29 2025 GMT
        Subject: CN=132c10d8ca292cd3092b85b767789704deee9189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:16:71:d8:3e:86:3b:1b:8f:3f:43:1b:18:b4:
                    92:a6:06:a2:a7:9d:16:64:be:17:4f:39:ac:d3:57:
                    f8:ef:f9:a2:06:fc:4a:d8:b6:41:87:1d:42:55:cf:
                    96:8f:8c:a0:47:c8:9f:a2:29:29:94:77:73:26:6e:
                    16:6c:42:70:71:46:1f:9e:7c:27:0b:33:6d:3c:38:
                    4e:5d:8b:77:87:0a:d2:f3:82:0a:df:01:33:7a:fe:
                    29:50:8c:4f:e9:a2:6c:82:79:e3:ec:99:27:78:23:
                    32:47:62:ee:80:d8:ac:c0:ca:fc:0c:72:47:be:00:
                    dc:c3:2f:95:46:dd:0d:ac:16:7f:b2:9e:57:2e:5c:
                    98:5a:a6:7a:80:be:16:64:0b:4a:95:ee:b6:ca:e6:
                    44:3a:cd:37:bc:69:25:c9:48:2e:ac:60:d6:36:06:
                    4d:8e:3a:3a:8b:50:31:d7:14:6c:61:35:a4:3b:94:
                    9d:84:18:9c:7c:7e:0f:c5:0d:12:e3:13:a9:a2:8d:
                    61:fa:d1:26:26:03:8c:63:50:da:e0:a2:c2:24:06:
                    73:30:1e:b4:04:e5:09:a2:be:93:fe:5f:31:75:13:
                    89:d9:cf:34:4f:fa:87:0d:44:76:a5:70:dd:57:8e:
                    bb:8d:50:1d:ea:33:31:05:cd:80:8c:f3:a9:88:59:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2C:10:D8:CA:29:2C:D3:09:2B:85:B7:67:78:97:04:DE:EE:91:89
            X509v3 Authority Key Identifier:
                keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:29:31:d1:88:95:ba:cd:11:5c:bc:24:7d:7f:47:6f:84:
         d6:ce:1c:46:07:08:f3:8a:02:fc:a9:79:ad:29:e2:10:c7:a4:
         a5:88:ff:a8:57:fc:5a:13:52:61:fa:eb:d4:e2:60:60:97:f7:
         1b:52:6c:01:13:4a:fa:05:9e:e1:95:8a:ac:68:90:75:55:f4:
         d5:ce:34:22:15:e7:65:7a:a9:6c:8d:2f:ef:be:66:17:ed:2e:
         5a:81:86:ce:ab:ce:08:c2:8f:41:11:0c:e3:66:f2:4b:16:e3:
         a0:37:d9:cf:98:ed:b2:40:56:68:05:56:3f:37:40:2b:a6:f2:
         0a:dd:db:52:3c:50:e1:62:2f:19:85:ba:c7:08:09:44:aa:62:
         0b:7b:e3:18:15:5d:2d:78:41:da:60:34:b1:34:13:cc:e6:d5:
         3f:e6:63:ee:9c:f4:db:31:00:bc:ed:fb:54:79:00:f6:4c:31:
         51:ea:7f:15:14:33:ab:65:01:6a:c8:4c:70:93:3e:dc:bc:d2:
         03:6e:c4:a3:3d:9b:fa:aa:06:27:c0:53:3a:f9:8a:e5:58:2f:
         02:3c:05:e1:10:e6:dd:96:82:5a:6c:ee:35:55:98:a8:8c:18:
         28:74:4e:d3:08:3d:f5:3a:e6:68:aa:b6:3c:ae:56:01:dd:a6:
         25:72:bc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:31:31 2025 by rpki-client