Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
File:                     TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json)
Hash identifier:          83+VzFtVoy1WGMm4SkjDj+9eMzEOucHgAvqpaM1stDY=
Subject key identifier:   16:87:75:4A:B5:98:9F:AF:23:2B:AC:43:7C:A3:E9:51:B4:B4:FC:97
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Certificate issuer:       /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial:       019746D4A9747EA9A20FFC0C382DA8121DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
Manifest number:          0323
Signing time:             Fri 06 Jun 2025 20:00:31 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:31 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:31 +0000
Files and hashes:         1: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: xU20cS9eg1vs6sZdRX07sibaGoN8KX8u9ntimnSzbs4=)
                          2: wqDhS7gdeGbdKyK4P2B2xid5RCk.roa (hash: pzt+fKb4dYAAFu+QRte1CXzAs8gCt6ejAy8RnTWXAJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:a9:74:7e:a9:a2:0f:fc:0c:38:2d:a8:12:1d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
        Validity
            Not Before: Jun  6 20:00:31 2025 GMT
            Not After : Jun  7 20:00:31 2025 GMT
        Subject: CN=1687754ab5989faf232bac437ca3e951b4b4fc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:c2:75:0e:e8:f4:df:ff:c7:03:e0:d9:d6:
                    3c:82:01:47:1d:02:bc:70:21:ae:0a:ff:5e:93:e0:
                    48:da:d1:3d:2e:b9:55:28:e9:13:92:7c:27:a6:41:
                    1b:1e:8e:4c:d1:4e:9a:fd:17:34:b4:c2:0e:b3:81:
                    7d:ff:7e:87:82:5d:62:16:62:6d:90:fb:1a:4b:6d:
                    78:df:ee:2f:4d:6c:6f:a1:12:83:99:08:90:a5:a4:
                    a6:60:8d:de:e3:2b:c7:3b:94:ff:87:bb:4d:c7:8c:
                    7f:4e:bc:ca:0d:43:02:92:11:a9:fb:49:44:e8:6d:
                    ad:fa:41:ef:2f:b1:72:79:d1:b3:c2:09:a6:d6:7e:
                    7f:eb:a6:3c:89:91:45:4f:7c:71:ef:96:4f:5d:3f:
                    c9:87:d3:57:94:5e:0f:55:11:b1:29:00:8d:f6:4f:
                    02:9f:0a:b2:92:bf:6e:5f:0a:db:5a:64:07:0f:ca:
                    4a:a4:0d:0d:7e:26:04:c2:d1:2e:c6:17:2f:d8:aa:
                    72:0a:6b:f7:a9:67:f3:d4:3f:a9:a8:ed:f8:0e:1e:
                    0c:c6:ad:09:eb:45:01:dc:16:2f:2e:ee:e5:45:b2:
                    eb:f5:31:54:47:9b:b5:7a:4e:66:a2:86:89:92:25:
                    03:a7:aa:75:0b:f1:01:b2:68:c0:1c:00:6c:1b:c6:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:87:75:4A:B5:98:9F:AF:23:2B:AC:43:7C:A3:E9:51:B4:B4:FC:97
            X509v3 Authority Key Identifier:
                keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ea:be:56:a6:c1:25:48:a9:88:b9:c5:2a:21:be:d7:48:c4:
         15:68:b2:bd:c1:f3:12:e4:b0:5d:ca:37:11:be:f7:49:90:e4:
         72:f1:33:08:5f:c5:dd:5b:7f:22:bd:9c:5e:e3:ce:bb:7b:f5:
         0c:f8:fe:cd:f8:47:a0:d1:76:7e:9b:e9:c7:ea:c0:bd:ab:48:
         61:ff:14:e3:eb:8c:91:af:ec:4e:c8:ce:1f:3d:c3:bd:ab:d0:
         f8:92:32:ac:10:02:87:79:7d:4a:84:01:1d:56:cb:cb:c9:e2:
         ad:69:c0:fc:c3:2a:91:28:a5:4c:fe:8c:78:17:29:9c:90:8b:
         b3:ad:ca:f6:d2:81:23:68:be:ce:e2:e0:d9:f6:ae:63:d0:95:
         89:03:74:a3:c1:96:c0:c1:4c:81:c0:81:37:14:18:cf:cd:4f:
         3e:d6:20:31:f1:a6:1e:f6:1c:9a:22:50:ba:80:69:d7:b6:eb:
         f5:26:3f:a4:dd:36:ed:85:3a:96:77:88:d5:e4:9e:84:87:59:
         81:b5:0e:57:27:3d:5a:40:46:ac:95:76:13:ee:0a:c3:51:f2:
         3e:d0:11:c3:19:96:33:c2:6c:61:64:65:4d:e1:c4:a4:5b:5e:
         45:f3:16:64:0c:e5:04:3d:e6:41:0b:84:8b:96:6d:ad:5f:63:
         4f:e4:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:15 2025 by rpki-client