Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          /ghcdDwuHxLE2HJsGSXGQ/BU17Yuz/udyNSeS6/LPPk=
Subject key identifier:   97:74:80:5E:0E:F9:DE:A3:D5:AB:76:1F:19:3E:AC:FB:7B:50:DF:63
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       0197462FF48AA2FEA8D36CE95F0FDFFC95D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 17:00:37 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:37 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:37 +0000
Files and hashes:         1: HhltdqvEvMp1haFhX3fIv16Ni_Q.roa (hash: NacxfWEhGCqjQzcJPOYmDDogo7Rv0RM9x208Jen3m0s=)
                          2: sI2dGOEr8nZk6D1YNbEa7wlaZyM.roa (hash: kx5EWM4e9UqILncO7G7gUfdu6rl4RFiOFynpDnpX02c=)
                          3: sxbnQp-HZOAWEFzphM2K1lCVnVg.roa (hash: kEKMwrabqx6d8HV9sni4rJcCg8Olec1gaFW1f6LNEvE=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: /mQB8xIa4rQEapkaScKDZ8c+lIflY0AWNxLlyx0Vbio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:f4:8a:a2:fe:a8:d3:6c:e9:5f:0f:df:fc:95:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: Jun  6 17:00:37 2025 GMT
            Not After : Jun  7 17:00:37 2025 GMT
        Subject: CN=9774805e0ef9dea3d5ab761f193eacfb7b50df63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:17:46:17:31:ca:e5:0c:bb:75:b6:b0:d2:
                    ac:d2:25:cc:12:eb:94:32:1f:0f:1f:0c:0b:dc:78:
                    68:a4:10:5b:e7:44:a5:5b:ef:fd:26:36:2a:a9:5b:
                    82:c0:07:59:ce:b7:2a:37:50:5d:a4:4e:fa:1e:3d:
                    f5:76:57:ca:e8:db:45:67:01:aa:4c:14:7e:59:ec:
                    34:6f:43:de:97:77:2e:3b:21:e5:49:38:48:a3:64:
                    21:d1:3e:78:83:a5:6e:5b:be:65:2a:b6:3d:87:67:
                    c3:16:50:88:4f:10:9b:0d:93:2e:2c:d0:25:10:d0:
                    59:02:df:9d:85:8a:0a:36:4c:fa:90:79:a1:10:48:
                    5d:0e:38:be:ed:2d:ad:2f:84:c3:42:6f:a5:bd:8f:
                    6d:c5:f7:4d:ba:65:c7:f2:2c:f3:ef:69:37:68:30:
                    13:51:81:0d:b7:ab:2e:db:77:3d:18:05:c5:b1:17:
                    c0:b5:4b:00:b4:18:16:ab:18:e8:b4:7e:c6:a4:b9:
                    09:99:09:7a:df:ca:44:e2:2f:a6:58:50:f6:6f:73:
                    77:35:27:5b:99:2d:03:62:12:d4:1a:9d:82:99:1a:
                    55:1b:98:dc:61:98:fd:a6:14:6b:04:af:1b:47:65:
                    bf:28:24:25:a8:23:b2:2a:76:97:27:29:ac:55:74:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:74:80:5E:0E:F9:DE:A3:D5:AB:76:1F:19:3E:AC:FB:7B:50:DF:63
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:94:11:a4:c4:39:e8:45:d7:2a:1b:a8:e2:a7:8b:73:b7:1a:
         56:fe:bd:e8:b2:32:d3:74:a5:63:12:12:86:80:ae:4a:73:f8:
         08:38:54:33:17:4f:be:7e:7c:3c:6f:be:97:73:da:a3:d4:a6:
         bf:7c:dd:59:28:90:35:53:b8:ca:28:49:2a:fe:6f:cd:c9:31:
         ae:ba:67:60:6b:36:ae:5c:5a:61:97:f0:f5:ac:03:01:6d:bc:
         ae:1d:64:87:35:b4:e3:42:44:80:95:0c:ae:cb:f0:75:e2:e9:
         f1:54:1c:be:03:81:ae:d8:24:72:1f:f6:46:87:6a:b8:b1:f9:
         b5:33:e5:ba:93:1e:57:51:01:d4:2d:d3:ff:57:e9:1a:15:6c:
         d2:3f:36:de:ea:4c:80:f9:f0:c7:60:73:66:7e:1f:33:60:7f:
         47:06:d5:8c:e3:b5:60:6d:bd:3c:66:1c:6a:d5:8a:84:bf:7a:
         ee:d7:3c:cd:cb:e1:67:f3:8c:f1:18:d3:50:e8:bd:33:d7:b7:
         8f:c7:01:bb:89:bb:09:b3:4e:b7:ea:81:56:45:5c:9b:c2:fa:
         2c:76:fc:ff:50:3b:a1:0c:bd:18:5c:4c:1e:13:1f:e3:19:05:
         fa:84:ca:3b:1b:f0:de:63:73:64:ea:a0:c6:8a:5a:7b:0f:6b:
         cd:26:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:19:30 2025 by rpki-client