Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
File:                     RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json)
Hash identifier:          zSabLSDCQXJju6IP/eQCTIMGfwqf6upH/3obGD6Tav4=
Subject key identifier:   6B:E6:9D:58:3B:1E:99:15:BE:F0:24:36:6B:CB:93:BA:E4:13:FE:F9
Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
Certificate issuer:       /CN=4534cab4450404862b201fe733f2c70a6bf52924
Certificate serial:       01984A09D03BFA4F0AE9804047A6B486C517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 04:00:13 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:13 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:13 +0000
Files and hashes:         1: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: DLGoVPzhivqfdUg+hfZafiNt64x4j6yM0qQjZ7buv1k=)
                          2: t9aRg7EBYi_eHqwtU6HeqBVRtO0.roa (hash: guaRd+4F8a2eF9Z9YS8nsI0hSSMT45GD3G3ESCtdqNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:d0:3b:fa:4f:0a:e9:80:40:47:a6:b4:86:c5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924
        Validity
            Not Before: Jul 27 04:00:13 2025 GMT
            Not After : Jul 28 04:00:13 2025 GMT
        Subject: CN=6be69d583b1e9915bef024366bcb93bae413fef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:b3:f0:d5:b3:b0:7c:c8:7c:6b:05:8f:43:
                    5c:c5:5c:b7:a8:45:02:83:64:b0:4b:f6:b0:f7:f9:
                    a1:25:1b:6a:fd:70:35:de:24:b4:b4:c9:ed:22:a1:
                    94:6b:22:e9:84:64:8e:19:75:59:c2:3f:6f:87:12:
                    bf:85:87:7b:75:b5:1d:cc:d7:e0:e3:7f:9f:91:47:
                    a4:3b:60:a0:94:2a:b8:c4:11:e7:83:32:35:27:4f:
                    db:f2:85:79:a2:d0:3e:e9:fa:85:e0:e9:4a:a4:93:
                    ba:f3:05:ac:5b:28:cd:5d:6b:a5:f9:bb:c2:68:1c:
                    00:dd:c5:80:d5:0a:83:1b:f4:70:86:d7:2d:11:10:
                    98:f0:2d:e6:24:4a:8e:ab:be:a1:b2:c5:79:eb:f6:
                    58:a9:dd:35:0a:c4:2a:33:a4:ca:c6:1c:93:37:66:
                    c2:a2:bf:5f:b9:5f:06:dc:ab:bc:2d:b1:01:f6:75:
                    3b:e1:2a:d8:10:b2:ce:81:60:02:7d:7b:8b:2a:61:
                    97:c8:0f:9b:a1:ee:1b:1a:2a:91:5e:d0:d4:1d:71:
                    3a:4f:9b:38:8b:5b:b8:48:9c:86:03:e7:f8:08:75:
                    e4:fb:b2:df:ae:38:82:f9:eb:04:0d:5e:8e:2b:67:
                    1f:cf:c4:cb:ce:04:35:40:9b:38:8a:9a:3f:af:85:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E6:9D:58:3B:1E:99:15:BE:F0:24:36:6B:CB:93:BA:E4:13:FE:F9
            X509v3 Authority Key Identifier:
                keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:71:36:34:49:d6:9a:2d:70:4d:97:bf:22:35:9b:ec:eb:93:
         00:35:c1:cb:24:a8:6a:be:f2:60:d6:42:9b:97:0d:9d:9b:8d:
         aa:2f:fd:bb:a3:51:26:98:14:a1:81:26:27:03:33:fe:61:e6:
         0f:04:a2:43:f6:94:ac:77:6c:c1:0c:5d:14:5f:d2:e9:e9:3b:
         2b:1f:70:13:18:76:80:a8:6f:91:f1:7c:ac:d4:9f:e5:10:94:
         4e:13:10:b8:b3:56:d7:aa:76:22:d4:da:09:d9:5d:47:84:67:
         31:07:c0:f7:e5:e7:06:94:f8:62:55:4f:2c:53:35:bf:a1:12:
         f0:04:33:3d:d8:03:b3:9e:4a:7f:7e:85:46:51:83:4b:58:c8:
         82:dd:2f:ac:e7:a3:0c:3d:09:3d:a0:5d:e8:3b:2b:86:04:8f:
         3f:ac:2a:3f:b1:17:2f:15:8b:73:89:d2:c4:5a:4f:95:51:b0:
         b8:fc:38:7b:7b:c5:3f:eb:8d:72:b2:50:e8:46:a1:6f:62:57:
         5e:14:f8:e4:15:d7:31:35:8f:51:c3:26:c5:0d:9d:66:ea:10:
         43:0d:d1:3e:0c:77:d8:c0:8d:b8:6a:2a:29:a7:ba:13:ba:e0:
         e4:9c:81:85:1d:a8:e1:74:36:89:67:18:8b:ca:1e:39:d7:a8:
         03:e8:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:36:01 2025 by rpki-client