Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File:                     TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier:          ilc+lpCr8cvEgLakoOMfPldJR7jOgJBWxkSGJ+GqMkc=
Subject key identifier:   13:3C:A5:C4:F9:23:57:18:C6:F1:0E:73:3B:2B:71:BE:08:7B:0D:AB
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer:       /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial:       01974BC44D7D9791A9040E022E9267B10C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number:          1584
Signing time:             Sat 07 Jun 2025 19:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:45 +0000
Files and hashes:         1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
                          2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
                          3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
                          4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
                          5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: z9Q0UKYV1pP3V6+IwcEYwXgJJZ9te00wjzBVyauODPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:4d:7d:97:91:a9:04:0e:02:2e:92:67:b1:0c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Validity
            Not Before: Jun  7 19:00:45 2025 GMT
            Not After : Jun  8 19:00:45 2025 GMT
        Subject: CN=133ca5c4f9235718c6f10e733b2b71be087b0dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:ed:b9:5c:84:33:d3:30:fb:bb:44:65:7c:
                    5b:16:9b:57:aa:4c:aa:fc:1d:71:a8:40:04:3a:13:
                    3a:08:11:26:4c:e8:28:07:30:75:9c:5a:b4:1f:21:
                    bb:d5:d5:6f:da:3b:32:7b:59:4a:e0:90:2d:9a:5f:
                    1e:14:24:df:ab:97:9b:ae:85:0f:3e:fa:09:00:1a:
                    7f:00:db:fb:c8:6a:a3:f7:ad:cc:59:d3:f6:4e:5e:
                    61:74:64:95:44:d9:ec:b7:3c:cf:03:fe:04:75:b9:
                    cb:1d:dc:07:00:05:9d:af:4b:d5:b0:2d:8a:73:e7:
                    23:2f:1d:50:4a:43:a3:8f:f9:0a:de:f1:42:d0:fe:
                    1e:7e:c3:9c:66:51:20:88:96:28:2d:12:38:42:a4:
                    1e:12:f5:db:e2:4c:ba:ff:74:30:df:bb:fe:6e:01:
                    a2:39:74:fd:f3:83:5a:16:96:00:66:80:c7:aa:b4:
                    68:03:b4:68:4a:63:15:9c:7b:c3:85:cb:ee:21:b9:
                    67:26:fe:e5:bf:6f:b0:51:30:a4:d3:9d:16:50:97:
                    36:ae:5c:18:5f:8e:d4:13:13:99:f6:87:c7:78:eb:
                    50:76:86:76:ea:4f:b2:ac:1a:05:ce:92:cb:8c:67:
                    e0:4f:22:66:35:df:f6:b1:26:c7:5b:f4:2b:35:10:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3C:A5:C4:F9:23:57:18:C6:F1:0E:73:3B:2B:71:BE:08:7B:0D:AB
            X509v3 Authority Key Identifier:
                keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e1:41:c7:cc:f8:0d:dd:c5:d7:86:85:a4:f0:6d:69:79:0f:
         db:d0:48:17:20:46:fe:80:96:4c:c2:ff:8f:bf:bf:d8:47:36:
         0e:b3:10:f7:f8:89:9a:2e:f3:cb:01:8f:2f:8d:71:d6:27:96:
         07:9d:9f:08:35:ec:8b:38:93:46:58:4f:00:b1:af:5b:89:cc:
         b1:ae:e6:a2:e5:e0:84:9d:15:c8:a0:59:d0:cc:49:3f:7e:02:
         ef:1c:1d:38:d5:b3:d9:29:e6:79:b3:38:0e:91:e7:63:9f:a6:
         4e:84:02:24:ef:03:14:7c:bb:5a:2b:6d:a2:8c:48:cd:32:98:
         17:df:78:9d:74:e9:8c:fe:f6:ab:42:af:e0:6e:ab:c9:59:c7:
         62:79:f3:24:ba:71:85:ec:0b:8f:e0:4d:d7:74:79:9e:e6:5d:
         5c:e5:da:62:89:63:25:62:f5:99:85:dc:d4:a2:55:0b:44:14:
         23:55:43:0f:c0:38:84:77:10:e4:ea:6c:c2:8e:74:51:a9:5a:
         fc:be:af:06:de:30:05:a1:8d:74:dd:ba:99:84:88:99:8f:de:
         75:f1:86:31:29:1f:df:59:09:e3:62:24:91:e9:49:61:7d:6c:
         f2:87:5d:c9:42:2a:c3:c5:a3:86:4f:ce:3c:8d:8a:e1:83:ed:
         a8:b8:1a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:44 2025 by rpki-client