Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
File:                     Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json)
Hash identifier:          BOr/JLvNVblPkDn0VkMo+mmctv6NxTZZSn/MRNywm+0=
Subject key identifier:   96:49:1D:21:1C:EA:81:5A:A1:33:A6:EE:28:A0:B5:85:4E:FF:54:3B
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Certificate issuer:       /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial:       01988D3412A3C6337C14E7ACA9CF40DDABB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
Manifest number:          163D
Signing time:             Sat 09 Aug 2025 05:00:56 +0000
Manifest this update:     Sat 09 Aug 2025 05:00:56 +0000
Manifest next update:     Sun 10 Aug 2025 05:00:56 +0000
Files and hashes:         1: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: XfrmpxNO2tcs8hbRxr2gtVhpHMQyeusYR1lWR7D/74k=)
                          2: sPL5rUlzKx5_eiK0H41Atshaecg.roa (hash: gZZ6IxCmuB2B723uD8tUyKBaH66Mb5llFLuK/jyTEBM=)
                          3: wgOqnnsWlsLcY-e3U904w3g_rl0.roa (hash: Ww7qe8WtK5P+D80awiXawU9bPGz6ArE4FuPa1FSF2jU=)
                          4: wub3ojVvtYVNr5_D3zKLLbWF2_M.roa (hash: 0Ivv/JEf+s+UoAgsprFNMguw897KPBdxp9YKz2VJrNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:34:12:a3:c6:33:7c:14:e7:ac:a9:cf:40:dd:ab:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
        Validity
            Not Before: Aug  9 05:00:56 2025 GMT
            Not After : Aug 10 05:00:56 2025 GMT
        Subject: CN=96491d211cea815aa133a6ee28a0b5854eff543b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:e0:6b:e2:89:21:82:2e:69:06:c7:ee:1b:
                    6e:43:45:4b:d2:05:2e:c9:f9:16:ad:65:ef:6a:f9:
                    f4:5c:e3:04:08:b3:d2:58:6e:33:a3:66:6c:0a:40:
                    e9:fb:f8:35:c1:64:e6:8f:0a:5f:fb:62:78:06:cc:
                    09:ae:a3:e7:82:b8:e8:d8:87:2d:9a:c9:5e:c6:f0:
                    e4:b7:13:8a:96:cf:9d:e4:bc:20:f5:75:52:65:52:
                    14:96:4a:75:1f:88:87:9c:b5:af:1a:36:ca:60:47:
                    c8:9c:dc:c1:5d:48:27:4e:04:b8:4d:87:e2:ea:97:
                    2f:bd:78:ee:3c:fb:93:67:1a:0f:de:53:07:1e:f1:
                    58:35:47:44:00:cb:59:ad:ae:81:a2:80:42:a2:2f:
                    39:d5:ee:e4:29:f8:dd:b5:a5:af:3d:17:0e:47:b2:
                    5f:88:ca:4a:e4:d4:13:76:44:09:cc:89:17:e7:18:
                    49:16:1e:d7:85:ee:73:5e:dd:f1:7c:df:d5:6e:66:
                    de:dc:a8:ab:cc:9d:0a:81:43:1a:6d:f7:ac:c8:f4:
                    97:12:15:1b:58:31:a4:55:c6:ea:28:61:aa:a3:9a:
                    e6:b3:7b:9d:d2:eb:90:e0:39:db:9f:17:b0:da:96:
                    3d:40:c3:02:0f:20:29:da:a8:04:1e:f5:fb:0c:98:
                    a5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:49:1D:21:1C:EA:81:5A:A1:33:A6:EE:28:A0:B5:85:4E:FF:54:3B
            X509v3 Authority Key Identifier:
                keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:14:a1:73:b6:72:09:6e:14:1e:c3:52:a9:41:95:aa:2c:4b:
         2c:e5:10:e3:d7:c5:85:ac:03:c5:0a:65:26:b0:bd:4d:cc:d9:
         32:d7:7c:8e:6a:01:c0:77:f1:7f:25:c0:dd:13:f0:41:e4:63:
         7b:e6:7d:21:1e:53:12:53:1e:b7:18:e1:10:58:f6:44:4e:0e:
         92:30:69:b7:94:96:e3:d3:35:c0:b8:c4:e7:93:5e:8c:ce:1e:
         86:b3:92:e4:ff:f2:1f:da:00:4e:29:ab:87:55:58:a3:d5:8e:
         cf:58:51:1a:ef:a2:92:1b:8c:a7:a3:17:7b:9f:2e:29:14:5a:
         2e:cd:af:3b:3e:48:84:56:d0:81:bb:a1:bb:ca:ce:7e:ea:4a:
         70:65:5e:31:ba:c5:26:dc:7e:18:3e:5d:f7:dd:12:f5:5c:04:
         43:bc:6a:0e:f5:09:59:9f:8b:f1:46:a3:de:ff:a6:b3:6e:45:
         38:32:97:f4:5a:8f:6e:36:ff:1e:b2:42:7e:57:56:37:5f:bd:
         29:d5:04:63:2f:a5:76:b1:ea:8b:0f:56:06:75:8b:b6:87:3d:
         cc:ca:3c:3d:24:38:64:6f:7a:ff:99:6d:ee:25:71:4b:a7:28:
         fa:2a:b3:3e:d3:fb:c6:9f:58:3f:0d:ef:60:9a:14:13:6e:d3:
         2c:31:ee:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:55 2025 by rpki-client