Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
File:                     ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json)
Hash identifier:          9T3Of7bkHRovDai+1vL4dZqceEI7A2YYGhmFuddfVXk=
Subject key identifier:   5F:5A:FB:9B:54:EB:99:4E:85:32:FF:FB:D9:D4:ED:91:E6:72:65:62
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Certificate issuer:       /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial:       0197477974D7ACB294C1E1C71D80C960B3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
Manifest number:          12E6
Signing time:             Fri 06 Jun 2025 23:00:31 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:31 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:31 +0000
Files and hashes:         1: HROKUTUR5gMY3n6zglHSVCbZS_I.roa (hash: w0BOZ7icboJC4/TfINzPR6MRHeR0gZCuXliuxuy25YQ=)
                          2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: zQ5AH4ffQGFyfyJWQZqebWpWVDqeRnTl0ppNkg389NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:74:d7:ac:b2:94:c1:e1:c7:1d:80:c9:60:b3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
        Validity
            Not Before: Jun  6 23:00:31 2025 GMT
            Not After : Jun  7 23:00:31 2025 GMT
        Subject: CN=5f5afb9b54eb994e8532fffbd9d4ed91e6726562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3b:7e:8d:8a:ce:63:d4:da:a7:4b:89:a0:19:
                    ff:e4:aa:a4:89:5b:c4:3a:61:b5:91:d1:33:0a:17:
                    6f:30:6e:80:3d:f6:98:62:d2:75:58:09:56:40:48:
                    8f:6d:35:17:62:de:d8:34:27:eb:80:62:3d:1b:ad:
                    ab:dc:8e:f2:b3:da:75:67:d7:c7:68:53:5c:dd:f6:
                    77:d3:91:fb:02:b7:1c:60:30:30:26:04:10:3c:d1:
                    45:63:37:08:df:60:da:77:13:af:ba:f1:66:95:de:
                    98:db:78:0e:e1:a1:9c:57:4d:b9:94:1f:4d:e5:bf:
                    62:3a:7e:b3:0f:61:78:c4:11:76:6e:ae:00:46:75:
                    31:e8:51:20:54:87:9b:05:89:ca:4a:1d:a8:23:62:
                    f6:55:c5:15:5f:a3:20:91:9a:c3:1f:b9:cd:3c:0a:
                    0e:cb:18:36:1c:49:c7:64:dd:40:ef:80:85:42:d9:
                    ee:63:84:f9:07:e3:7a:09:83:2a:5a:81:de:7b:65:
                    8c:29:c4:7c:1f:14:22:ad:98:e1:db:3d:d5:52:a0:
                    1d:37:0a:69:a3:3d:ad:b3:60:dd:14:98:91:be:fa:
                    38:ee:94:10:c1:66:ff:b9:4c:c3:ec:d9:de:bd:cc:
                    2a:be:b9:a2:1a:4b:40:f0:8d:20:21:3d:dd:e7:58:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:FB:9B:54:EB:99:4E:85:32:FF:FB:D9:D4:ED:91:E6:72:65:62
            X509v3 Authority Key Identifier:
                keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:49:52:19:9d:bb:28:3f:c6:52:19:c7:98:ce:e6:6b:d4:2b:
         ea:4e:47:37:c4:eb:92:e6:97:3b:82:4d:8e:fb:06:a6:54:83:
         55:1a:5f:77:f2:a8:5d:66:98:4b:a4:cc:22:08:08:6c:60:1a:
         6d:01:09:83:40:09:d5:67:84:8d:06:62:c7:b0:3d:b1:59:77:
         6c:76:2a:11:ad:73:03:24:8e:3a:fd:c3:71:7d:1a:a5:dd:65:
         14:8b:4a:da:74:17:f6:00:78:0f:86:ff:72:ae:68:89:6a:14:
         80:2a:ab:cd:c9:d7:5c:ac:84:7f:4d:4e:d7:20:55:c0:83:b2:
         de:f0:41:41:39:fb:ed:cc:db:ca:3c:bd:49:e2:b7:a9:18:b7:
         6c:22:27:ea:bf:2e:79:2a:63:22:e0:e3:3c:f1:91:45:91:df:
         bf:11:93:95:b3:30:a5:ff:05:e0:99:a5:a6:cb:c2:e1:2a:c9:
         cc:56:4a:2f:7b:44:2b:80:4d:3f:ca:30:0f:91:c3:d5:04:ae:
         c6:df:10:45:8d:bb:d4:5a:bf:1d:9a:dc:42:50:0d:6d:e1:4a:
         13:4b:a3:76:e4:c6:da:98:c6:dd:e8:31:43:d0:53:b2:9e:82:
         aa:bf:d0:aa:d4:71:f6:9d:d3:d6:be:05:19:62:b1:c3:11:de:
         eb:3c:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:12:10 2025 by rpki-client