Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
File:                     TW8ORKf28MiMzpxG26jscuxhdSs.mft (raw, json)
Hash identifier:          xFSvYPbBTdW0WsJwSig5g4fxl4mVnDQ0a+ZavpuaOn0=
Subject key identifier:   C0:3D:72:C4:70:6D:79:A5:47:95:B1:54:E9:E3:46:76:DD:FA:FC:61
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Certificate issuer:       /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial:       01964F3585B28F811A0A947825AE3F6C44BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
Manifest number:          07B0
Signing time:             Sat 19 Apr 2025 18:00:29 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:29 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:29 +0000
Files and hashes:         1: TW8ORKf28MiMzpxG26jscuxhdSs.crl (hash: BLG2vitX34jbwfAjOpDJAdWTAm7BtfqasTWUB/ROjRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:85:b2:8f:81:1a:0a:94:78:25:ae:3f:6c:44:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
        Validity
            Not Before: Apr 19 18:00:29 2025 GMT
            Not After : Apr 20 18:00:29 2025 GMT
        Subject: CN=c03d72c4706d79a54795b154e9e34676ddfafc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:ef:17:38:4d:50:46:ea:54:ef:5c:4a:1e:
                    f4:62:2b:c8:15:87:96:23:43:5e:53:d6:d0:2a:f8:
                    8d:d6:af:88:3c:da:81:07:fc:f6:a8:0c:0f:2b:e5:
                    76:90:9b:eb:3e:43:c2:2c:a1:2a:a2:37:86:9b:ea:
                    48:bc:bd:6a:bf:8b:69:41:bb:b6:01:9e:13:c3:84:
                    36:7f:d5:a0:4a:96:cf:98:b2:94:01:bf:a1:ed:47:
                    0f:77:df:66:3b:5e:74:54:85:de:eb:c8:65:56:c3:
                    15:44:d6:c3:88:d4:66:9c:b6:33:70:a6:3d:7d:45:
                    a2:ca:5e:44:3d:4b:3f:d3:9e:43:e3:25:fa:8a:2f:
                    5c:3a:af:bc:22:ac:c4:11:26:16:6d:f4:d7:6c:4f:
                    9f:46:5d:01:87:d9:4d:c0:d5:b8:7a:93:97:21:e2:
                    27:02:23:e7:17:3f:56:62:9c:f2:7d:f9:13:0f:ad:
                    51:6a:e1:d7:df:ce:51:4a:52:8a:95:a7:7b:f3:c1:
                    65:f4:fc:22:5b:6a:67:d2:75:87:1b:d1:cb:91:da:
                    df:e4:22:73:bf:95:db:e9:b3:3d:74:54:aa:76:0d:
                    4c:0c:ad:5d:5b:fa:a2:7a:70:88:f7:cc:29:09:dc:
                    7b:83:84:08:77:94:c1:6f:65:21:85:1f:84:a9:b4:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3D:72:C4:70:6D:79:A5:47:95:B1:54:E9:E3:46:76:DD:FA:FC:61
            X509v3 Authority Key Identifier:
                keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1c:4e:e6:dd:35:00:10:39:11:ba:fa:3f:47:12:35:60:1e:
         34:ab:75:1d:d9:50:ce:ff:6b:8b:2a:23:ea:98:41:a2:fe:57:
         a1:8f:87:7a:04:44:4e:f9:6f:1c:4c:ea:00:36:39:a6:87:14:
         cc:72:9c:34:25:a5:a7:1c:e8:4b:65:84:3b:ac:cd:47:ec:93:
         66:a8:38:28:c3:9e:a6:8d:00:a8:2c:b1:b0:ea:e3:f9:9b:1f:
         f6:aa:78:76:42:f7:35:b1:11:42:3a:18:06:f8:78:22:81:7e:
         24:6e:30:8f:1c:6c:94:87:80:a2:48:79:47:a2:80:69:2d:ce:
         43:5c:c0:41:a3:e6:57:d2:7d:69:be:60:19:96:bd:5d:25:0f:
         69:49:9e:aa:a2:0a:ec:1f:b3:1a:28:40:85:ec:63:4a:20:81:
         da:b7:c9:9b:b2:c1:87:0a:6d:7f:28:61:2d:d9:af:b3:6d:30:
         9b:80:9a:fc:b3:30:93:35:66:1a:ac:ba:06:1b:e4:58:3a:95:
         0c:3a:06:be:35:e9:c0:c5:6a:37:a7:8f:64:50:1d:14:f6:7b:
         00:84:31:77:0c:ab:2f:3b:93:8b:a6:98:71:12:d9:20:9d:9f:
         cb:cc:3f:a8:31:93:8c:7e:7e:e1:4d:ba:09:e2:b9:4c:6e:1b:
         7a:4b:cd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:56 2025 by rpki-client