Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File:                     TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier:          h7sl04g7rC02LNtEcdXXRnCJpCv+lXHxvYGKMeadoa0=
Subject key identifier:   7C:24:A0:63:B5:F4:F5:17:2D:12:32:4C:A1:A9:AA:D0:69:8F:49:5D
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer:       /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial:       01974E57BBDE0A77E7F9CC8C90B0C96C1F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number:          09DA
Signing time:             Sun 08 Jun 2025 07:01:01 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:01 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:01 +0000
Files and hashes:         1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
                          2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: VDCWuHZzzeGxl7AVxorktGu8Zjxd7k6OHJTN6wuHWfc=)
                          3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:bb:de:0a:77:e7:f9:cc:8c:90:b0:c9:6c:1f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
        Validity
            Not Before: Jun  8 07:01:01 2025 GMT
            Not After : Jun  9 07:01:01 2025 GMT
        Subject: CN=7c24a063b5f4f5172d12324ca1a9aad0698f495d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:c0:bf:7c:c9:af:18:cc:6a:2f:46:6e:94:
                    06:ed:ea:d1:7e:1d:c3:49:a1:47:63:5b:05:93:bf:
                    13:e8:c3:3a:1a:a3:b9:3b:50:b5:57:c1:3c:da:ae:
                    5c:84:63:2a:e7:4a:2f:85:ca:55:c4:1c:27:4f:bc:
                    b6:84:e1:b5:64:e5:31:1d:15:ca:c4:15:5a:5a:80:
                    05:2a:bd:9d:12:45:3c:f7:0a:5b:d5:21:0f:d1:c4:
                    e0:9e:08:45:d4:76:14:24:9e:a1:bf:45:a6:94:f1:
                    1b:60:c2:15:fe:72:06:00:6e:e3:07:10:04:cd:b2:
                    07:e7:17:bb:7d:79:de:55:f4:92:dc:d8:70:3b:d3:
                    c3:65:2c:28:bf:c8:23:68:f4:cb:e1:57:f0:b1:72:
                    c2:00:27:52:e9:eb:8c:ba:c5:fe:30:69:ba:c3:40:
                    5e:75:7e:1b:b6:5c:59:16:88:29:6b:a3:a2:b7:33:
                    64:c7:93:4d:92:4a:74:d1:81:9c:0a:16:00:4a:4e:
                    bd:6c:ba:72:15:4b:f5:9a:26:a7:c0:4e:e3:31:0d:
                    51:2d:fb:00:b2:27:d5:0d:72:20:df:a9:f9:f8:c5:
                    a5:a1:cc:b1:f1:cd:34:72:f5:1b:0b:60:42:dc:4b:
                    b6:06:a2:9b:8f:99:7a:2d:44:59:ef:b9:a7:c4:3b:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:24:A0:63:B5:F4:F5:17:2D:12:32:4C:A1:A9:AA:D0:69:8F:49:5D
            X509v3 Authority Key Identifier:
                keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:83:c6:92:d1:3e:8f:f5:7b:54:84:d8:b2:4c:08:b4:01:f4:
         7d:c7:7b:93:19:62:c7:d8:b4:c3:aa:59:3d:3d:6f:2c:8f:29:
         73:4c:a2:62:4c:bf:81:19:63:2b:78:34:3c:69:50:eb:0f:00:
         97:0c:dd:39:27:b7:2a:ae:8e:30:a6:7c:7e:ab:03:10:ef:84:
         35:9a:00:b7:30:97:ec:2c:dc:e5:f3:af:a9:e4:4d:3b:ed:7b:
         56:2d:ec:62:40:48:41:5e:b4:17:8f:c8:1a:3e:0f:8f:01:96:
         96:0a:b8:27:3a:50:51:ce:3c:6d:30:44:92:9e:1f:31:84:08:
         b8:c5:9e:b4:e9:9d:d7:e4:37:6e:b1:e0:d4:db:82:52:1c:97:
         0c:c6:6b:b9:fe:fb:c8:8f:52:8d:2a:cc:b6:5c:93:75:af:49:
         b9:c0:8c:7a:7a:b4:f0:ee:ca:df:f9:92:62:cd:00:98:31:39:
         b6:81:7f:ca:1b:ee:5a:29:55:b8:e9:f0:f0:6d:e1:34:7f:07:
         4c:0e:86:10:fe:c9:0f:28:0c:49:6a:8e:58:d5:88:30:65:64:
         c5:f8:18:dc:cd:eb:55:20:d6:d8:ee:b3:7c:22:db:7a:a9:e7:
         f5:cb:3d:62:6b:f4:58:5a:15:9f:2e:a5:cd:cb:2e:e7:17:fb:
         3a:03:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:29:29 2025 by rpki-client