Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File:                     tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier:          kg+L2Hp6xRAnHzoLRndkS8PQB007rCP/JQf4/czHVEk=
Subject key identifier:   FB:29:53:02:8E:87:93:B8:72:CC:73:0F:4E:32:C0:9D:A4:6F:E9:52
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer:       /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial:       019779E67662A300AFE67F9F407B045BBCDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number:          0480
Signing time:             Mon 16 Jun 2025 18:00:36 +0000
Manifest this update:     Mon 16 Jun 2025 18:00:36 +0000
Manifest next update:     Tue 17 Jun 2025 18:00:36 +0000
Files and hashes:         1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=)
                          2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: NXQtNtSjCSqh9V+p0ABzC9Vyd8Q4Criade5uZTgvtPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:e6:76:62:a3:00:af:e6:7f:9f:40:7b:04:5b:bc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
        Validity
            Not Before: Jun 16 18:00:36 2025 GMT
            Not After : Jun 17 18:00:36 2025 GMT
        Subject: CN=fb2953028e8793b872cc730f4e32c09da46fe952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:eb:d1:d6:eb:76:ae:0b:54:99:a4:de:b6:
                    8f:5b:d0:47:24:22:a5:76:26:64:6e:38:b6:c4:94:
                    bc:4d:39:f6:ac:48:77:f5:83:8f:29:5d:92:10:90:
                    1a:83:e0:54:7b:ae:9a:75:66:f4:12:5c:72:30:76:
                    44:e1:b7:4d:25:a4:c9:c6:fe:8d:55:b5:1b:5d:fe:
                    bb:ae:92:d7:6a:da:17:b3:e6:56:46:c2:8e:19:1c:
                    59:e5:ce:2b:90:9e:7e:d5:0c:28:f4:bb:20:5d:a6:
                    47:dc:40:80:2d:8d:f5:b3:de:28:3a:db:e5:df:6d:
                    a7:35:26:b9:c7:5d:bd:6a:d8:76:07:0a:be:b4:16:
                    a8:16:8d:02:a8:5b:bf:42:c8:77:1e:8c:0f:00:3c:
                    f6:8c:be:cd:44:0d:da:32:5a:00:cb:ff:0c:7c:a0:
                    9f:17:f5:00:eb:0e:cc:9d:b6:38:c5:d3:00:c3:94:
                    d8:25:6c:6c:0b:36:9e:a3:71:5e:3c:54:6b:b7:a6:
                    c0:53:c6:2d:f8:02:55:7b:34:fb:36:5c:53:c8:68:
                    45:ec:39:cf:b2:93:0d:37:ee:b9:de:9c:dd:e6:50:
                    72:49:25:56:5a:83:0f:13:60:0f:bc:2e:a0:d7:91:
                    d8:1b:72:2e:6c:86:a9:69:35:bd:f4:ef:f1:72:38:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:29:53:02:8E:87:93:B8:72:CC:73:0F:4E:32:C0:9D:A4:6F:E9:52
            X509v3 Authority Key Identifier:
                keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:36:82:4a:be:c9:d1:b0:71:03:28:47:08:ad:3b:13:07:
         21:9d:e6:d4:07:b8:4b:8a:b7:22:67:9e:53:cd:56:02:df:ef:
         56:63:bd:3d:76:de:40:c2:ab:df:f9:bb:2f:d1:5b:3d:ae:2a:
         5d:7f:05:bc:cc:b8:ed:6a:7d:87:36:82:f5:49:d1:86:6a:29:
         b1:e7:a5:5e:00:b8:3d:d4:c6:bc:d0:19:ea:3b:63:cd:d3:8b:
         72:0f:99:0a:53:ff:fe:4e:3d:d7:b6:c3:42:93:2f:5d:d0:10:
         4e:8e:66:aa:59:77:a4:38:10:32:44:54:7a:0a:ed:eb:c5:62:
         3d:50:fe:6e:28:4f:9d:74:8d:89:e5:33:9b:26:4d:ce:33:e0:
         34:3f:34:53:f3:1e:ae:fd:bb:65:ef:1e:99:90:62:51:86:bf:
         49:30:10:51:27:0f:0b:16:a1:f0:75:a7:6d:8c:8f:3e:1c:ab:
         0c:52:40:bc:b6:25:c2:21:d5:a3:aa:11:59:2e:fb:33:ba:54:
         ca:2a:cd:97:63:d6:c2:e0:25:6e:eb:2d:fe:44:9e:4b:aa:9d:
         5c:68:ee:33:17:cb:f3:06:02:de:ab:f7:9f:ea:9c:b7:d1:61:
         64:b4:86:69:a5:85:aa:df:5c:b2:b0:fc:9c:bf:c5:df:47:ba:
         ac:2e:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:11:08 2025 by rpki-client