Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
File:                     tKW-MwcSDmXjxBZcnI50jBwSp6I.mft (raw, json)
Hash identifier:          pL0UQIviGSN3wfRjtvNp4ROoqM0c1LmWH5BwjhlSlgc=
Subject key identifier:   12:70:86:DC:F6:DF:0C:90:CF:25:22:79:D3:F8:F3:61:C5:C8:B4:4E
Authority key identifier: B4:A5:BE:33:07:12:0E:65:E3:C4:16:5C:9C:8E:74:8C:1C:12:A7:A2
Certificate issuer:       /CN=b4a5be3307120e65e3c4165c9c8e748c1c12a7a2
Certificate serial:       019885453EE2F40BE5129AEC6353CD06E91D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
Manifest number:          0570
Signing time:             Thu 07 Aug 2025 16:02:44 +0000
Manifest this update:     Thu 07 Aug 2025 16:02:44 +0000
Manifest next update:     Fri 08 Aug 2025 16:02:44 +0000
Files and hashes:         1: pHJ5oRo1kF5oiX8KeKirS42gdJI.roa (hash: pWmX7zoUYI3ChoG1HELYfAkOPLPYyR79PMNSLK6H1B0=)
                          2: tKW-MwcSDmXjxBZcnI50jBwSp6I.crl (hash: ubH5DRM/8EeCXgGS/ayD7bk/74A/KXW/Zu1avClJEBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:45:3e:e2:f4:0b:e5:12:9a:ec:63:53:cd:06:e9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a5be3307120e65e3c4165c9c8e748c1c12a7a2
        Validity
            Not Before: Aug  7 16:02:44 2025 GMT
            Not After : Aug  8 16:02:44 2025 GMT
        Subject: CN=127086dcf6df0c90cf252279d3f8f361c5c8b44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:8c:9d:55:5e:72:ff:2c:9d:05:e6:1d:09:
                    3a:70:f1:26:3f:48:32:fd:49:83:fd:47:8d:7e:35:
                    93:16:c9:0e:27:ad:59:33:e7:de:d4:cc:da:2c:73:
                    4d:1b:a0:8e:7d:2d:b9:18:b8:e4:98:2f:8d:c2:ff:
                    03:b3:ec:3e:25:03:55:82:a7:29:f5:da:3b:f0:13:
                    78:a4:49:04:e9:6e:e2:e2:ab:f2:f4:10:b6:13:8d:
                    d1:24:f0:bb:61:88:2b:e2:e2:37:32:d0:d1:8e:45:
                    47:c1:f2:c8:68:b0:6a:c6:fc:81:ac:d7:34:a5:3c:
                    35:e0:b9:46:ee:08:c2:a0:7a:c4:aa:fe:b3:ba:12:
                    bf:c7:d9:95:eb:63:a2:69:bd:78:3f:b1:c5:11:71:
                    e1:2d:0d:6f:17:b4:02:37:c9:99:94:c4:f9:a1:e2:
                    c1:47:c6:75:d5:04:9d:7e:f3:af:61:58:53:61:60:
                    bd:b9:c8:d7:a2:8f:f2:dc:2f:f3:38:c8:2e:48:60:
                    77:83:a2:de:83:ed:ed:6f:46:f1:fe:6e:42:8d:d3:
                    44:5b:09:6c:9a:05:ee:36:ea:03:90:57:26:74:09:
                    48:2b:01:bd:57:7c:66:a5:6b:0a:6f:8b:49:ee:d4:
                    06:1c:9e:3a:ef:33:d7:fb:bf:b7:ee:3a:52:58:8f:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:70:86:DC:F6:DF:0C:90:CF:25:22:79:D3:F8:F3:61:C5:C8:B4:4E
            X509v3 Authority Key Identifier:
                keyid:B4:A5:BE:33:07:12:0E:65:E3:C4:16:5C:9C:8E:74:8C:1C:12:A7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:32:a4:19:98:59:04:69:50:bf:73:da:1b:84:8d:d3:4c:
         ad:88:bc:3a:f1:6e:6c:23:30:ba:ff:81:ee:13:1d:83:81:4b:
         7f:31:98:29:08:4e:5e:08:6a:b6:e0:5d:35:d8:7a:79:84:47:
         db:f2:41:9c:0f:2b:34:7b:4b:f8:fc:41:bf:9a:f2:a2:2e:e5:
         c9:ce:67:e6:e6:53:46:23:c3:05:d9:64:eb:5d:d5:e1:56:dd:
         c3:d4:14:5b:72:e8:8a:cf:f8:15:e9:82:76:8f:7f:af:3e:e6:
         83:ac:62:28:14:c2:92:39:8f:2f:7a:90:ff:ba:39:90:58:ef:
         a7:43:87:80:be:3a:01:fd:49:6f:4a:98:18:63:cf:f6:f9:98:
         0a:c9:e5:9e:28:86:e7:4a:34:f6:27:13:18:bf:a0:6c:98:1c:
         d4:f2:c1:0f:53:c6:58:5c:05:17:61:7c:8e:31:d7:ed:7f:93:
         eb:02:f6:d4:8f:46:a1:89:af:b5:76:44:96:ff:ab:5b:44:9b:
         53:5d:37:34:9c:5b:d3:c9:72:4a:f7:70:3e:76:3e:bc:71:9b:
         0f:78:7f:93:a4:e2:4c:4f:56:74:a4:28:b7:a7:33:87:c2:fa:
         2e:56:e3:5b:f4:38:83:e5:7b:d9:c0:f1:20:5e:15:32:33:41:
         72:1d:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:45:09 2025 by rpki-client