Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File:                     Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier:          D0yZXC6K4hO4LRwUGJXaXuoNqCT/uYU7LShZ7mKeCb8=
Subject key identifier:   1E:AE:9A:6E:1E:A1:61:CA:15:69:96:B0:DA:89:22:37:FE:6E:93:7B
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer:       /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial:       0197586D419F1155F205CB4754B4E7AC2D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number:          1581
Signing time:             Tue 10 Jun 2025 06:00:44 +0000
Manifest this update:     Tue 10 Jun 2025 06:00:44 +0000
Manifest next update:     Wed 11 Jun 2025 06:00:44 +0000
Files and hashes:         1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: i9n+S8yCivnUE3s1Dp50L8Djyp4e/zj2P2m78t3o8v8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:41:9f:11:55:f2:05:cb:47:54:b4:e7:ac:2d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
        Validity
            Not Before: Jun 10 06:00:44 2025 GMT
            Not After : Jun 11 06:00:44 2025 GMT
        Subject: CN=1eae9a6e1ea161ca156996b0da892237fe6e937b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:b6:01:60:49:4e:53:5e:29:90:2c:2b:49:
                    aa:be:6d:20:1b:a9:5b:b1:48:41:fd:c7:eb:9b:28:
                    1d:82:4f:93:89:e4:13:84:95:01:ef:f7:a6:84:91:
                    14:da:d2:fb:c4:ca:b8:07:0a:80:e6:28:08:38:dc:
                    80:06:0d:ba:7c:7f:8f:3e:4b:51:6d:dc:ed:1a:21:
                    ae:7e:48:87:d9:c2:e8:6c:00:76:5f:b8:ee:2c:b1:
                    ec:28:e6:d1:7e:cd:f3:08:47:0c:a3:9c:82:ce:93:
                    8e:74:21:26:78:e3:42:94:0a:e2:4c:bf:11:a0:9f:
                    fe:5c:98:06:f8:f5:60:11:2a:a7:ee:d8:5f:a2:45:
                    52:0d:e1:f4:b3:5a:af:65:7b:72:78:21:7a:7f:83:
                    d2:d9:97:46:59:e8:51:e0:2d:d3:38:63:93:94:c7:
                    ae:92:a9:75:e7:94:73:2e:9f:9e:22:e7:20:f4:8d:
                    89:56:9f:94:bd:4e:e9:05:b8:c4:c7:60:91:04:78:
                    a6:1b:da:81:c1:32:ab:a8:e6:31:f3:0e:bd:a2:22:
                    c6:fa:41:2a:05:34:45:56:59:f8:33:09:90:c3:96:
                    14:8a:82:8b:0b:a0:e3:94:33:56:30:12:14:96:82:
                    bf:e0:1b:39:55:37:b8:30:6b:82:71:e8:fc:68:3d:
                    61:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AE:9A:6E:1E:A1:61:CA:15:69:96:B0:DA:89:22:37:FE:6E:93:7B
            X509v3 Authority Key Identifier:
                keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:06:9c:ff:8c:6d:78:21:77:87:55:ee:31:7f:96:cc:f6:
         ca:9b:e2:08:34:d5:41:ef:9a:fc:34:98:d5:5f:61:6a:0d:29:
         7e:8c:ad:86:50:a4:71:09:84:78:b7:9e:c3:dc:35:bf:5b:d8:
         0e:84:bb:f1:2c:1b:bd:f5:3b:6d:7b:ee:3e:58:fa:e2:fa:23:
         b2:a9:dc:3e:90:1e:1f:f4:5f:55:14:3d:42:35:a7:fc:ba:5e:
         fb:30:1b:15:60:c4:90:5f:0c:68:cd:41:4c:97:8f:98:7b:0d:
         62:a9:fe:11:c1:51:c3:27:70:eb:cd:18:4c:0e:e8:9a:9e:1f:
         86:1e:fd:c9:93:43:3f:51:d1:c7:69:51:41:61:c9:9e:f2:0d:
         17:fc:5c:24:9e:f9:70:bb:d6:8d:34:31:2a:15:5e:03:5b:62:
         08:b8:df:c7:66:1a:e2:f5:ed:56:98:8b:b2:bc:48:64:ac:4a:
         45:51:56:b1:a6:99:d0:35:3f:a8:5a:cf:93:b7:8a:51:1a:c0:
         5c:4f:f7:69:09:d1:66:eb:a3:dc:6f:db:d5:5b:29:70:a9:23:
         c2:d1:bf:94:ee:fa:fc:1f:dc:66:94:dd:5d:62:d8:6a:7e:20:
         3e:dd:c3:86:5d:f2:b5:83:96:bd:31:41:fb:e3:08:f1:76:61:
         26:02:2a:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYbUGfEVXyBctHVLTnrC2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmZmYjk5MDZlZWJlYmExZjViMWE1NThlZWQ2MzcyZjY1
M2NlODYwHhcNMjUwNjEwMDYwMDQ0WhcNMjUwNjExMDYwMDQ0WjAzMTEwLwYDVQQD
EygxZWFlOWE2ZTFlYTE2MWNhMTU2OTk2YjBkYTg5MjIzN2ZlNmU5MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7C2AWBJTlNeKZAsK0mqvm0gG6lb
sUhB/cfrmygdgk+TieQThJUB7/emhJEU2tL7xMq4BwqA5igIONyABg26fH+PPktR
bdztGiGufkiH2cLobAB2X7juLLHsKObRfs3zCEcMo5yCzpOOdCEmeONClAriTL8R
oJ/+XJgG+PVgESqn7thfokVSDeH0s1qvZXtyeCF6f4PS2ZdGWehR4C3TOGOTlMeu
kql155RzLp+eIucg9I2JVp+UvU7pBbjEx2CRBHimG9qBwTKrqOYx8w69oiLG+kEq
BTRFVln4MwmQw5YUioKLC6DjlDNWMBIUloK/4Bs5VTe4MGuCcej8aD1hEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6umm4eoWHKFWmWsNqJIjf+bpN7MB8GA1UdIwQY
MBaAFE5v+5kG7r66H1saVY7tY3L2U86GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUt
OWM3MmUxNTdhYmIzLzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUtOWM3MmUxNTdhYmIz
LzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNUGnP+M
bXghd4dV7jF/lsz2ypviCDTVQe+a/DSY1V9hag0pfoythlCkcQmEeLeew9w1v1vY
DoS78SwbvfU7bXvuPlj64vojsqncPpAeH/RfVRQ9QjWn/Lpe+zAbFWDEkF8MaM1B
TJePmHsNYqn+EcFRwydw680YTA7omp4fhh79yZNDP1HRx2lRQWHJnvINF/xcJJ75
cLvWjTQxKhVeA1tiCLjfx2Ya4vXtVpiLsrxIZKxKRVFWsaaZ0DU/qFrPk7eKURrA
XE/3aQnRZuuj3G/b1VspcKkjwtG/lO76/B/cZpTdXWLYan4gPt3Dhl3ytYOWvTFB
++MI8XZhJgIqcQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:09:18 2025 by rpki-client