Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
File:                     TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json)
Hash identifier:          XY73L8bctuhECm3eWWXQamlHeHVFEEJ5Ag8Nfn3jgpM=
Subject key identifier:   5B:23:AE:36:22:C4:AA:C1:FB:15:19:D3:AA:01:6B:B0:90:5C:10:4F
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Certificate issuer:       /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial:       019770E34914B34F8A7CAF7873D82F24356A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
Manifest number:          159D
Signing time:             Sun 15 Jun 2025 00:00:32 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:32 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:32 +0000
Files and hashes:         1: RJXW4LBK4fFR7-qXARrAfcS6HVM.roa (hash: nADRNIhqhtAZRzc6jlM5uns21XppYQB+SgxQZjcIenk=)
                          2: RSXmGPfQ8mX6WcSR6Z2ZB6u7-VY.roa (hash: 9JPv5cClAHFEamsto3OfYBSv6xhBQ5Y12w+jE6Rhs80=)
                          3: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: PIiaQsqwYcsqdSO4Dn9Yb1YUbD4NpykC2a89ZAMN/qU=)
                          4: pPV-duHwP_qg6dqtHXTIMJzGTZk.roa (hash: alNCRojVtM9rfP6fgcCwPL9ZC8lIXb9OD5QPFguw90Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:49:14:b3:4f:8a:7c:af:78:73:d8:2f:24:35:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
        Validity
            Not Before: Jun 15 00:00:32 2025 GMT
            Not After : Jun 16 00:00:32 2025 GMT
        Subject: CN=5b23ae3622c4aac1fb1519d3aa016bb0905c104f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:94:8b:38:e7:f5:f0:0b:3a:e4:dd:a4:ad:
                    a5:23:1d:75:65:28:03:da:9a:39:19:5c:3d:de:35:
                    4b:de:df:87:1d:2a:93:79:75:09:02:77:83:d1:71:
                    78:45:cd:b6:e1:22:59:23:03:b5:02:d0:9e:6e:d7:
                    d5:73:e5:b1:0f:da:dd:58:dd:a5:c8:a4:ac:8e:16:
                    14:90:27:4d:ac:91:f0:66:9f:c8:3e:98:d2:f1:0e:
                    9e:0f:ab:2a:73:b6:f2:77:86:a1:32:fd:0f:84:5f:
                    d1:88:1e:43:1e:25:a7:77:8e:d8:9b:91:dd:a8:1d:
                    20:ba:62:52:21:a2:2a:40:98:9f:ba:6a:0c:74:8d:
                    f7:de:be:bf:4b:2f:a8:54:32:cd:2c:f4:b9:c8:97:
                    da:50:a9:aa:a1:cd:ac:e9:f1:80:09:2b:66:3c:bc:
                    14:19:b5:67:0a:1d:fb:00:c3:49:da:51:17:fe:d0:
                    57:1e:52:d7:b2:91:9e:8c:25:ea:63:2b:55:b4:19:
                    b2:bf:71:80:ea:85:13:5a:db:56:5f:fa:86:60:cf:
                    07:31:2f:de:49:03:9e:72:6b:3a:42:5a:6b:fb:6a:
                    6b:38:04:45:f7:bf:04:ae:4f:a9:fc:c6:b0:30:16:
                    77:49:b9:e2:95:48:c2:1d:7b:a1:ba:24:cf:fb:d7:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:23:AE:36:22:C4:AA:C1:FB:15:19:D3:AA:01:6B:B0:90:5C:10:4F
            X509v3 Authority Key Identifier:
                keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:27:d8:b3:be:cb:47:09:d0:22:98:7d:f3:48:fc:9d:57:c1:
         86:8d:50:1d:46:c3:68:11:85:7d:4d:fa:96:f6:af:a6:8c:b9:
         37:5c:c5:be:a4:ff:d8:4e:54:c1:01:39:2b:ca:72:5b:c3:ba:
         0c:4a:36:03:37:9d:49:81:07:a6:7a:67:2d:50:f1:e1:94:54:
         f3:a8:01:7e:d5:ff:55:b5:ab:29:9f:f7:5d:45:bf:2d:2c:51:
         22:b6:c7:24:21:2d:42:aa:b3:68:46:d6:32:85:34:fc:6c:02:
         78:48:9c:13:5a:23:04:9e:55:3d:41:d3:3e:87:2f:24:7b:ba:
         b1:52:ab:ca:75:c7:3d:39:62:03:46:5c:73:ab:89:dc:0e:d4:
         64:51:74:af:7c:25:9f:c0:61:0f:e0:76:33:f6:60:b0:fd:72:
         0c:ff:44:05:07:34:e1:25:6f:03:e1:dc:25:05:e3:58:b0:00:
         ac:d3:be:9b:34:9e:5a:59:33:77:74:0b:ca:9e:7f:2d:0c:33:
         a0:ba:8e:24:63:82:4f:c0:1c:4b:a2:d3:b3:6e:fa:8a:33:86:
         46:75:bd:b7:6e:c5:35:28:86:3c:23:48:14:18:e8:3b:59:c9:
         55:d9:f0:78:af:61:5d:ac:cd:a1:20:3e:3c:09:e7:49:66:67:
         ce:02:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:56:52 2025 by rpki-client