Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File:                     TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier:          yNPMO1n1VMa008GbpOdNpmoJxA8T5S4lk9Pg5yi+V8A=
Subject key identifier:   DB:7A:C7:07:6F:5E:67:D6:DB:1E:A3:D7:05:6D:0B:BB:01:B5:83:9F
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer:       /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial:       019769CF2F001C88B8B3D278D85F53A660FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number:          0682
Signing time:             Fri 13 Jun 2025 15:01:15 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:15 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:15 +0000
Files and hashes:         1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=)
                          2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: OGDi/zC8fuzXJnhXzzh2MGG9Sr1RlNhOV10YitZ/eHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:2f:00:1c:88:b8:b3:d2:78:d8:5f:53:a6:60:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
        Validity
            Not Before: Jun 13 15:01:15 2025 GMT
            Not After : Jun 14 15:01:15 2025 GMT
        Subject: CN=db7ac7076f5e67d6db1ea3d7056d0bbb01b5839f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c8:06:69:2a:7e:61:f2:10:79:0f:23:82:ef:
                    a3:76:00:67:e1:49:e0:fe:e1:e3:b5:89:b6:19:24:
                    bf:a3:a5:7f:45:09:fd:b6:d3:39:7d:ef:1c:d9:d1:
                    e5:59:d9:69:cf:42:59:e2:1e:6b:89:bd:d3:1f:dc:
                    b8:6e:f9:99:56:4c:ea:2f:bb:09:57:34:50:84:f2:
                    4d:fc:42:5c:9e:61:e4:c7:15:f4:19:06:e7:4d:aa:
                    96:ec:ec:87:12:d4:c8:e3:1a:e0:27:7b:27:c6:0e:
                    bf:8f:70:bd:96:d5:2e:d7:96:60:c7:58:48:e8:ed:
                    8e:39:89:12:2b:02:09:31:36:74:e7:f6:b0:e6:7e:
                    ff:18:69:bf:d1:7b:f9:63:f6:54:85:c9:a9:38:cb:
                    21:e0:42:1c:0e:53:72:40:66:e4:97:2d:20:b8:32:
                    c7:53:be:f9:f6:1d:da:37:93:cf:24:13:23:27:dd:
                    2d:17:b1:47:01:05:d7:cc:41:20:11:b3:66:62:78:
                    06:fe:83:06:33:cc:28:6d:44:c1:3c:f1:c1:fb:37:
                    2c:b9:cc:62:9c:63:f8:65:3b:c6:30:ab:12:3d:69:
                    bc:39:7c:80:4f:76:b7:d9:d5:1c:da:b7:cb:46:ba:
                    5d:10:24:52:92:52:8d:b4:17:67:e2:3e:e1:39:48:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7A:C7:07:6F:5E:67:D6:DB:1E:A3:D7:05:6D:0B:BB:01:B5:83:9F
            X509v3 Authority Key Identifier:
                keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b9:30:82:4a:e4:c9:dc:b0:81:2f:2d:7e:e7:6e:02:04:8a:
         a4:6d:4e:66:c7:7c:62:cc:76:42:35:46:fa:1e:c6:db:3f:37:
         2c:02:6c:2c:6a:06:fc:25:01:f4:a1:0e:6f:3a:6c:6b:82:14:
         cc:a5:3f:11:07:85:69:89:37:c2:aa:4a:ff:60:d9:dc:02:b6:
         e8:82:9b:32:44:78:f9:08:42:23:14:66:93:ed:a6:92:87:af:
         45:78:89:d4:1d:b8:04:91:bc:81:f3:fd:68:cc:24:7f:af:4b:
         33:93:35:e1:ad:90:67:2e:06:41:e5:90:8e:ff:d6:b1:b0:1f:
         f6:56:78:55:23:5c:42:7d:4e:a9:3a:42:49:ac:f2:a6:6c:56:
         fb:db:0b:85:85:d1:5a:eb:75:42:35:1c:e1:3e:7f:73:58:26:
         f4:ee:cb:f9:6a:67:41:36:d3:b5:de:7e:64:91:c3:a0:e0:b9:
         64:49:9c:aa:47:3f:9c:e1:c4:e0:4b:2d:c4:89:2b:9c:56:38:
         81:48:8b:bd:0a:76:ba:cc:65:90:9d:2e:66:1c:85:91:ac:5e:
         d2:84:99:8d:1b:af:92:ba:32:23:f3:0f:17:a1:37:4b:11:9d:
         81:6c:16:3f:48:a8:bf:fa:3f:96:3d:52:47:68:2f:b0:a1:37:
         e3:16:c9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:44 2025 by rpki-client