Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
File:                     TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft (raw, json)
Hash identifier:          cxCPDtGYYt+QP9LlXZnk8BfqZgyI/jhyKShqHC7cA0k=
Subject key identifier:   0D:1F:7D:68:87:FB:8B:FC:5D:20:5F:21:B0:63:8C:BB:EC:7A:1E:11
Authority key identifier: 4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
Certificate issuer:       /CN=4e42466070ff8c3cc967da48e14da12df71b2671
Certificate serial:       0197469E7BAB8711D6633D196EBFC5393B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
Manifest number:          157C
Signing time:             Fri 06 Jun 2025 19:01:20 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:20 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:20 +0000
Files and hashes:         1: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl (hash: arDmv1ParZRzUwBomtq88J04hfPeCZdHkEfYxXCaNBw=)
                          2: Vn0PoWq91day6d--kuy39s7CP5U.roa (hash: daOIdL4b5N4GukWwie8JBBD3OBe/sdcGSiKd1pWKhtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:7b:ab:87:11:d6:63:3d:19:6e:bf:c5:39:3b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e42466070ff8c3cc967da48e14da12df71b2671
        Validity
            Not Before: Jun  6 19:01:20 2025 GMT
            Not After : Jun  7 19:01:20 2025 GMT
        Subject: CN=0d1f7d6887fb8bfc5d205f21b0638cbbec7a1e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:69:c6:7b:53:5a:0d:b9:22:23:10:24:61:
                    37:00:32:ee:a7:44:0a:68:6d:6d:06:09:c8:4c:0b:
                    3c:e3:d7:c0:18:69:14:71:eb:05:82:cc:a1:06:2b:
                    1a:95:96:fd:35:82:4d:3d:c2:52:95:1f:44:6e:98:
                    da:13:bc:25:77:7d:99:32:c6:e1:22:20:86:18:e0:
                    d2:91:59:82:4d:f9:34:89:3f:5b:cc:d9:a2:3d:93:
                    41:3f:77:39:79:b9:43:b3:b0:0f:9e:d9:b3:e2:66:
                    88:88:d5:c6:f6:6d:85:92:b0:0d:df:15:81:8c:01:
                    83:a3:c1:be:da:89:d2:38:4a:62:3e:7d:80:54:58:
                    28:b2:37:c3:f0:33:52:5b:5a:b2:ed:c9:41:da:6e:
                    b3:1d:4c:c7:2b:ff:df:6f:cd:5e:1c:50:80:3f:8f:
                    0e:5c:e6:d8:c8:05:1b:8b:49:9c:94:bc:03:61:75:
                    ef:39:c1:3b:57:7a:7f:7c:14:a0:56:09:eb:9a:e5:
                    5b:ea:df:47:5e:74:4e:41:f9:3b:b3:b5:50:a7:80:
                    dc:3c:be:cd:7f:04:42:ab:5d:8e:75:77:39:f0:80:
                    94:e6:31:bb:ff:49:66:31:6b:74:c2:15:9b:4f:d0:
                    75:da:67:3a:40:9d:96:88:52:f2:9f:37:2f:e2:30:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1F:7D:68:87:FB:8B:FC:5D:20:5F:21:B0:63:8C:BB:EC:7A:1E:11
            X509v3 Authority Key Identifier:
                keyid:4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:51:5f:6a:f4:4e:e6:8c:e9:5e:4f:39:90:83:a8:8c:b4:68:
         e8:e7:92:71:ba:ab:74:c7:cc:34:43:f8:33:6c:0b:53:51:28:
         d6:b4:61:cc:99:b2:23:aa:35:bb:9a:66:fd:7c:04:3d:f4:b9:
         fc:6c:1f:17:66:3f:a6:63:c4:3c:4a:67:ea:cc:a2:16:75:1a:
         86:ed:74:6e:f3:0e:4f:59:c4:6b:bf:55:f0:b5:96:c8:3b:76:
         29:90:47:5e:0b:78:a7:22:1e:3e:4e:21:3f:e6:60:57:f8:84:
         8f:6a:28:76:c0:20:1c:3e:56:ad:8c:07:a0:b0:fc:63:18:65:
         4b:53:84:77:35:3c:bc:f4:a2:98:64:14:69:ed:a6:9d:62:fc:
         18:f4:b1:2e:4a:02:9f:57:36:59:6c:63:fb:97:d6:5b:c6:7b:
         c6:99:c9:ee:24:9e:8e:95:09:79:f6:74:66:c0:2f:b9:f6:9d:
         2b:0c:75:9e:7d:e1:7f:b0:65:8f:e3:2c:ce:ab:37:33:83:4e:
         3c:2e:d8:d2:10:b1:61:db:4b:df:e7:6d:7b:7a:11:f7:5a:8f:
         b0:15:33:7e:50:13:37:f0:a0:0c:1a:0f:bc:d2:8a:42:bf:a8:
         5b:96:d2:f6:88:a2:28:0b:40:08:c5:02:5b:71:ec:25:06:37:
         ec:14:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:43 2025 by rpki-client