Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File:                     ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier:          TLS+W1XLp0qZxUDommYPHj/eDLo72p5gfWMlRMKw9d0=
Subject key identifier:   AC:08:86:3F:64:D5:38:71:E5:64:C6:B2:D9:DD:AF:D8:78:21:56:48
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer:       /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial:       01975B370847A7741C9C8D5B57F6835B06D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number:          045B
Signing time:             Tue 10 Jun 2025 19:00:22 +0000
Manifest this update:     Tue 10 Jun 2025 19:00:22 +0000
Manifest next update:     Wed 11 Jun 2025 19:00:22 +0000
Files and hashes:         1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
                          2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
                          3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: 2nPNyVL553BVcdB+HscMtnEIPKtmZ7o9M0NOMdjKq8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:37:08:47:a7:74:1c:9c:8d:5b:57:f6:83:5b:06:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
        Validity
            Not Before: Jun 10 19:00:22 2025 GMT
            Not After : Jun 11 19:00:22 2025 GMT
        Subject: CN=ac08863f64d53871e564c6b2d9ddafd878215648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:30:e6:4d:9e:c5:65:e3:ed:d8:a2:58:55:
                    ea:ea:e5:80:85:69:0e:56:ae:85:19:96:a4:03:59:
                    be:bc:3c:e1:a7:b9:b9:ca:7c:61:14:75:49:c9:2f:
                    ec:6e:12:5b:2f:09:04:89:92:4d:b7:14:fc:11:7e:
                    1c:25:87:4b:73:60:94:13:43:1d:d5:8b:a3:d6:f9:
                    c8:0d:8b:6e:c8:68:3a:eb:c8:05:20:1c:4c:32:de:
                    c9:18:47:c4:e8:6e:f8:91:f0:e6:ce:f9:65:d7:12:
                    a6:2f:60:74:23:de:38:5f:3f:3d:9d:ff:72:8c:e6:
                    2b:29:88:a4:ca:e0:63:ec:1b:cc:78:26:2a:ba:38:
                    84:c8:d6:04:45:a2:18:63:a7:f3:85:8f:6d:80:56:
                    5b:c9:4a:7c:07:c2:32:8e:0e:0a:40:99:6d:80:4b:
                    70:fc:e2:d3:46:27:e2:8e:77:fd:23:71:2a:91:4f:
                    b3:0b:39:a6:1a:b9:0f:62:91:5c:4b:22:35:3f:e2:
                    0f:c6:a5:ef:7f:12:4f:3f:d1:a4:28:27:65:3f:45:
                    ad:61:a4:2f:6c:a7:8b:e4:15:9a:9e:dc:30:5c:38:
                    06:0a:05:e2:ff:8b:4c:af:a8:9e:c0:92:4e:d8:ee:
                    84:4f:72:4b:89:d1:40:2f:6d:04:f8:d6:14:29:b9:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:86:3F:64:D5:38:71:E5:64:C6:B2:D9:DD:AF:D8:78:21:56:48
            X509v3 Authority Key Identifier:
                keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:a4:4d:a6:14:73:83:e7:9c:44:d3:b6:2a:82:4e:50:48:
         8f:6a:e1:38:2c:8b:48:ca:59:76:b9:10:d4:19:82:a4:c9:48:
         09:4b:8d:c8:0e:81:0f:a1:fc:cf:75:3b:65:d6:0f:6d:76:10:
         32:06:da:84:5c:b5:f9:fb:de:95:6a:c5:88:83:75:27:82:47:
         4a:72:97:34:23:9a:b4:bb:c8:64:9f:60:f6:93:0c:29:cf:dd:
         60:e4:db:bc:47:96:58:ca:b1:ad:bb:c3:27:03:ed:3f:ec:5d:
         21:5a:85:f8:4a:89:49:bd:49:9a:76:b3:db:e6:4f:83:e0:6f:
         d4:4e:df:31:61:f0:da:79:e5:84:2b:89:94:93:55:a7:00:71:
         66:2e:7b:46:85:37:4b:c6:8c:3a:d0:02:47:22:77:58:01:b3:
         27:15:e4:31:27:ea:81:e8:e1:43:7e:e5:72:1e:ea:59:05:58:
         a4:0f:e0:99:bc:b6:58:25:04:4f:f8:d6:43:f6:d1:06:32:ab:
         25:3d:63:69:9c:aa:f6:44:de:d7:b0:42:eb:41:f4:a7:4e:2f:
         f2:08:7e:8e:96:5b:15:65:88:6c:a8:54:d3:53:bb:da:bd:4b:
         7d:dc:39:78:74:0f:0d:0f:6f:eb:bd:3e:b3:66:e5:39:42:4e:
         99:a6:47:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:05:08 2025 by rpki-client