Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File:                     TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier:          ZSw9u+b2fOmHltcXhMaim3kljmFtzt4FVltKXjFTnro=
Subject key identifier:   22:7E:0E:CE:BB:31:D2:AF:49:79:72:93:B3:E3:1A:79:E1:89:B8:DA
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer:       /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial:       01987E2EBB0B447E18415C15122D90B8DB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 07:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 07:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 07:00:48 +0000
Files and hashes:         1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: uN4HQYgQOSTjAxXc+H7QMDHEC1xo/8lKorxLkl2620k=)
                          2: duQK_L6CU_XoLOUwAAqGbBQ_c-w.roa (hash: c1e0IDxT38pGihwSE7PrZG6hwT/3gvgX+OwTOhT9gWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:bb:0b:44:7e:18:41:5c:15:12:2d:90:b8:db:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
        Validity
            Not Before: Aug  6 07:00:48 2025 GMT
            Not After : Aug  7 07:00:48 2025 GMT
        Subject: CN=227e0ecebb31d2af49797293b3e31a79e189b8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:c9:c7:05:ce:12:06:f8:8b:3a:4f:b8:5e:
                    89:a9:6d:f6:58:f4:1e:37:e7:2e:f4:81:39:de:a1:
                    a7:f1:0e:1f:a7:ee:00:7f:36:57:e7:62:76:8d:9c:
                    c3:15:85:94:ae:42:5e:72:51:e7:a2:21:9d:1f:7b:
                    b0:06:ad:2c:53:51:23:1f:69:7e:2f:4f:8a:d8:6a:
                    55:cf:6a:b3:93:a8:65:59:92:a1:22:df:ec:39:c3:
                    d2:61:d5:cd:4c:ed:93:c8:d5:91:9e:b3:87:de:e0:
                    b4:ab:17:a8:cd:de:d1:bc:64:7c:db:9d:1e:0c:57:
                    67:87:09:09:32:0a:b9:1b:83:54:e8:c3:ed:3d:f3:
                    68:d0:f2:26:85:9f:ca:58:8b:db:8a:27:ad:17:12:
                    22:e7:97:67:23:41:b8:b4:58:9c:cf:e9:39:01:ab:
                    72:07:20:c1:5c:ac:b7:16:cc:00:57:3d:f0:b5:ca:
                    51:4c:8c:e9:9d:2f:45:e2:61:0f:bc:1f:06:14:f7:
                    8c:af:fe:9b:78:99:a4:f6:39:45:26:75:63:5a:c2:
                    0d:4d:57:b4:0b:1e:5b:5c:d9:fd:64:1a:71:20:3a:
                    79:6c:15:18:89:e4:a5:f7:c5:ee:ee:40:29:20:b1:
                    9d:db:d9:7c:be:79:6f:cd:1f:38:ef:67:d1:54:28:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7E:0E:CE:BB:31:D2:AF:49:79:72:93:B3:E3:1A:79:E1:89:B8:DA
            X509v3 Authority Key Identifier:
                keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b2:a3:ce:8a:cc:a1:32:bf:2c:70:18:6d:35:d5:d9:25:79:
         3f:fe:ef:ff:27:1b:2f:63:44:6a:08:d4:49:8e:5b:40:3f:ea:
         31:11:f3:71:cb:eb:ed:93:b5:42:a7:f7:af:c4:fe:ee:97:d7:
         1b:80:b6:70:1c:1d:26:a4:a0:f7:1f:a9:4b:25:55:f3:d7:09:
         f1:d8:51:64:fe:7d:87:b8:9f:63:ee:26:e1:e4:81:4a:30:a2:
         f4:84:5b:f4:bf:7f:32:8e:e1:65:05:f4:34:da:c0:d0:43:bc:
         8d:f9:d2:51:95:69:7f:67:b3:42:6e:6b:1b:5b:c8:9d:f7:54:
         05:03:0d:93:57:50:ed:b6:a8:97:1b:82:9d:ec:c5:6d:06:e2:
         1f:e1:f4:bd:df:e2:e5:50:5e:d8:7a:50:14:39:38:38:d3:17:
         07:45:86:23:66:6d:3c:1d:d6:ad:3f:94:e0:ea:f6:53:e6:45:
         d7:31:c1:45:f6:80:ee:e4:72:2a:07:07:58:06:c4:9c:dc:a7:
         6f:e9:cb:7a:9b:cf:ba:03:c0:50:ba:f3:78:4e:61:68:96:0e:
         99:5b:43:8e:85:1c:57:4c:fb:65:4e:e0:07:af:c2:f3:a8:44:
         b6:00:86:9e:88:93:1e:e2:0c:70:19:0f:ce:66:9e:5d:e4:f6:
         36:26:f4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:40:19 2025 by rpki-client