Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File:                     TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier:          w/MOpKaG443JydrzAyjqsQBCVhEhrKPhqp9C/ump1KA=
Subject key identifier:   A0:F5:0A:18:43:48:9B:D6:93:31:76:62:7E:DE:E7:5F:06:B5:C8:AF
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer:       /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial:       019A50E2BDCD41979778CEF2CB3C694A86B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number:          1710
Signing time:             Tue 04 Nov 2025 22:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:28 +0000
Files and hashes:         1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
                          2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
                          3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: KhOabQbo66Xp0d7l5IHr91lJbU8vSEsI4ZWEpyHqocY=)
                          4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:bd:cd:41:97:97:78:ce:f2:cb:3c:69:4a:86:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
        Validity
            Not Before: Nov  4 22:00:28 2025 GMT
            Not After : Nov  5 22:00:28 2025 GMT
        Subject: CN=a0f50a1843489bd6933176627edee75f06b5c8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d3:0d:68:f4:33:61:89:cf:10:5c:bf:d8:36:
                    0c:92:52:56:42:60:2d:89:e7:2e:2a:e5:03:52:43:
                    81:1c:41:66:7a:4c:44:d3:ad:72:87:1a:cf:6b:5f:
                    b3:4e:80:94:db:ad:2b:ae:5d:36:c6:c4:c3:64:c0:
                    07:6b:80:70:bc:87:04:59:47:85:c3:0e:75:31:cd:
                    f5:16:14:74:22:d1:be:1f:63:f2:4d:80:4b:38:ac:
                    24:8b:ed:64:fe:84:a5:c6:ed:85:7f:4b:28:b5:12:
                    5c:66:c3:b1:66:00:7b:01:e6:91:82:99:d0:da:4a:
                    e5:3c:66:cc:0d:a9:4a:b3:d9:d9:7f:75:db:6d:2b:
                    85:24:15:8b:50:4d:6e:33:a7:24:0e:b7:5b:86:dd:
                    7e:52:37:45:25:6b:15:ce:22:c6:e4:2b:50:b7:f5:
                    d7:3e:60:99:4f:1c:c5:04:de:9a:1e:bd:8c:0f:d2:
                    b4:a9:c9:f3:a8:0f:a2:57:78:13:f1:f4:e7:29:46:
                    df:26:5a:79:6b:50:a9:f4:6d:65:64:6e:ce:94:4e:
                    9b:07:5f:16:15:b3:da:f2:63:53:49:7f:d8:40:31:
                    65:4b:0b:88:b7:ed:bb:f7:0d:d9:6f:7e:27:4f:82:
                    a9:13:e3:ab:e7:8f:b9:03:8d:cc:f9:4f:b6:51:32:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F5:0A:18:43:48:9B:D6:93:31:76:62:7E:DE:E7:5F:06:B5:C8:AF
            X509v3 Authority Key Identifier:
                keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fe:0d:8a:11:04:18:0e:68:43:10:69:96:c9:96:4f:80:65:
         69:df:3c:8f:f3:31:47:90:ab:53:32:2c:a6:7a:a7:03:80:b7:
         6a:bc:89:46:b3:6b:b2:25:17:9f:89:eb:97:35:4e:59:91:4f:
         0d:23:74:bf:43:66:5e:85:65:55:8e:cc:ac:41:83:8e:98:cc:
         62:b1:bc:6b:b0:00:b9:94:13:70:82:74:b5:e3:e4:1d:12:ef:
         68:5d:10:49:4a:a6:35:37:56:e6:7a:51:02:21:1e:8d:fc:7a:
         73:1f:d2:fc:1f:a0:83:b3:31:ea:bf:99:73:0c:d5:c0:60:52:
         4d:44:3f:53:80:14:83:2b:c7:b1:ac:5e:f3:94:c7:d4:07:c2:
         73:f3:3f:b4:42:f9:f9:c8:d2:33:e6:97:53:f9:ac:80:ec:fd:
         b4:d2:c4:a4:48:45:56:d8:ba:2a:6d:11:b3:17:1b:b7:ba:21:
         71:de:3b:15:c8:d8:86:3e:05:1a:9a:cc:53:b2:94:1c:e2:7d:
         27:66:78:6d:7d:5f:f7:74:e0:69:5e:39:8a:41:73:94:17:d8:
         c1:59:15:f1:fd:98:92:0d:b2:4c:5a:1c:67:99:12:7d:e1:15:
         b5:ea:07:f3:54:8f:13:0d:da:d8:d6:3f:35:3f:02:9d:93:c8:
         30:44:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:21:52 2025 by rpki-client