Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File:                     TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier:          zkXYUeG/t630aUYeT+FLTenUAfLorp7BTIuewg33IYc=
Subject key identifier:   2A:60:E3:BA:D0:B0:A4:92:A2:04:41:43:48:BA:AD:A7:3A:72:8B:62
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer:       /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial:       0198350324850023A81B85179D7C5694D66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number:          15F6
Signing time:             Wed 23 Jul 2025 02:00:54 +0000
Manifest this update:     Wed 23 Jul 2025 02:00:54 +0000
Manifest next update:     Thu 24 Jul 2025 02:00:54 +0000
Files and hashes:         1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: XWNV37AJDbBZanIod0umlVbPGm3nVnJ8yxML7Rdgem8=)
                          2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:03:24:85:00:23:a8:1b:85:17:9d:7c:56:94:d6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
        Validity
            Not Before: Jul 23 02:00:54 2025 GMT
            Not After : Jul 24 02:00:54 2025 GMT
        Subject: CN=2a60e3bad0b0a492a204414348baada73a728b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:38:54:2d:b1:1c:f7:ca:e9:f7:f8:7a:61:
                    21:69:04:09:fc:3c:b6:e1:14:28:98:49:72:8a:79:
                    e8:fb:2e:e8:e8:38:35:fb:c2:d5:38:01:c8:e0:34:
                    d0:e1:bb:20:e1:e5:eb:36:2f:7f:63:dc:8a:4c:d7:
                    ec:5c:b9:26:1e:17:db:e0:93:b9:62:c5:50:e5:f3:
                    17:c9:a4:29:49:28:21:9c:11:9c:56:af:2a:53:88:
                    86:3a:ea:a1:19:4c:66:70:79:e5:f4:e9:09:14:4e:
                    92:39:a2:0a:8e:11:ff:e4:1f:f6:ec:94:41:d0:33:
                    57:f4:db:4c:8e:af:2d:0f:3d:5c:a0:fb:65:d3:46:
                    69:2b:53:bc:83:ab:c7:99:08:fd:66:0a:0b:27:4a:
                    42:0a:8c:47:b2:e9:1d:f0:28:83:77:d6:20:39:fa:
                    19:c3:fb:82:91:ac:6c:99:57:49:d1:da:d3:2b:7e:
                    4d:70:6f:af:ef:8e:62:8f:7e:08:7e:13:b5:7f:0b:
                    65:99:79:e3:16:b4:06:7c:c7:74:16:7c:1e:88:77:
                    42:86:b5:04:b5:52:04:8e:38:5d:72:e7:be:8d:b6:
                    58:c7:89:d0:d6:21:c8:8d:6d:df:a6:97:fb:30:cb:
                    4e:76:97:b2:41:88:05:48:18:c1:b4:22:b3:c6:98:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:60:E3:BA:D0:B0:A4:92:A2:04:41:43:48:BA:AD:A7:3A:72:8B:62
            X509v3 Authority Key Identifier:
                keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:ac:2a:4e:12:d3:a4:33:65:6d:6b:88:69:26:b8:8c:16:
         b7:5f:d0:cc:bc:24:38:4b:0e:43:65:1f:4d:d9:eb:94:b0:49:
         12:13:11:4f:4c:7d:fc:f2:3c:d3:5c:13:c1:cc:75:85:11:cd:
         94:af:9f:1e:22:4f:33:d4:2d:c3:ba:18:61:38:8c:4d:4e:8f:
         92:2f:e1:a6:58:be:00:9e:b8:30:c0:ab:aa:8e:2e:4f:58:cb:
         48:5b:87:63:d5:70:b2:a5:8f:9e:6f:82:a6:9a:ca:04:aa:07:
         1e:bb:cd:ab:5d:f4:a9:fd:67:de:e6:91:a9:64:0e:e6:7c:38:
         d3:9c:ed:78:f7:04:1c:17:f8:6e:de:f7:a3:ae:b3:f9:78:28:
         ab:b2:81:b6:06:44:84:d1:6c:8a:7a:75:a4:f7:74:08:e7:30:
         7e:06:05:2b:ca:20:41:30:d2:6f:88:df:fa:2d:9e:ea:5f:70:
         57:eb:7f:6b:b2:2e:5c:37:2f:81:f8:c5:f7:b7:14:2b:71:f6:
         a7:17:ff:cb:74:4b:d6:89:ea:d8:20:b3:7d:a8:32:44:bf:1f:
         08:f7:00:38:9e:46:2e:45:f3:6f:fc:85:37:46:80:70:3e:f6:
         20:3a:91:21:b9:32:34:8a:0a:b7:18:12:9f:d2:93:d4:d9:58:
         3d:68:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:25:04 2025 by rpki-client