Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
File:                     TEaPGBJltNlsooNaPlcMJnkDXf8.mft (raw, json)
Hash identifier:          nOsy6n3llpkn+v1fWreoYYr7zZwxq6H4XfkYf0vs3WM=
Subject key identifier:   74:21:72:53:D2:FB:C6:09:5E:72:D0:F6:69:DD:F6:D8:1A:C5:2D:DB
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Certificate issuer:       /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial:       019640302F98904C7565E3A178B94B8431A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
Manifest number:          1425
Signing time:             Wed 16 Apr 2025 20:00:21 +0000
Manifest this update:     Wed 16 Apr 2025 20:00:21 +0000
Manifest next update:     Thu 17 Apr 2025 20:00:21 +0000
Files and hashes:         1: TEaPGBJltNlsooNaPlcMJnkDXf8.crl (hash: Vm8epRgvf9H+HsD51vWR27cgp52xouPObPwcCOOnybY=)
                          2: TlMdFyo8UfqJ-RDrKLDhrg_5XKw.roa (hash: xU0L/Ky30tv9qoqHoWWKteKnPJXzN1H+V1CKVuBw5jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:30:2f:98:90:4c:75:65:e3:a1:78:b9:4b:84:31:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Validity
            Not Before: Apr 16 20:00:21 2025 GMT
            Not After : Apr 17 20:00:21 2025 GMT
        Subject: CN=74217253d2fbc6095e72d0f669ddf6d81ac52ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:54:6f:f9:fc:d6:4e:80:8e:bd:49:10:29:fd:
                    1f:3f:e4:69:20:54:2d:2e:58:d1:17:c8:5d:e3:0b:
                    c4:d1:6b:58:3d:6a:bc:ad:ba:c0:b0:8a:96:7e:68:
                    30:9d:94:5d:d8:1a:c9:b3:fe:0e:e8:4e:af:98:96:
                    34:41:6d:d5:2a:00:d3:b0:3f:42:9e:af:bd:f4:9e:
                    ad:24:ba:5d:ea:76:1f:6a:da:10:d9:8b:97:a5:7a:
                    d7:b8:05:56:fb:89:bf:5f:b9:18:6b:a0:54:31:74:
                    3a:f0:8f:5d:8c:8b:b3:e5:0b:03:df:12:b8:03:29:
                    47:f8:7f:4f:ff:03:d0:bc:0f:6b:52:11:aa:64:ff:
                    aa:52:d1:13:cd:19:88:37:fb:db:7c:1c:77:49:dc:
                    71:3b:78:62:d4:04:49:3d:dc:f1:4e:8e:02:1a:59:
                    e4:c4:7d:90:ea:f5:8d:0a:a8:da:11:28:01:7c:84:
                    79:03:4b:61:6e:ea:11:24:03:f0:be:37:cd:e4:d9:
                    06:e1:28:17:6b:16:a5:1d:78:e0:4f:c8:cb:6c:80:
                    a8:ad:8f:e6:06:43:ff:71:c8:54:99:22:20:fe:36:
                    71:c6:5c:e0:79:d6:dc:42:eb:3f:d1:a6:11:7a:ac:
                    11:9d:7e:1d:17:40:43:0e:e4:bc:44:e7:e7:aa:28:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:21:72:53:D2:FB:C6:09:5E:72:D0:F6:69:DD:F6:D8:1A:C5:2D:DB
            X509v3 Authority Key Identifier:
                keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:12:fe:97:53:0d:c4:20:d7:4f:40:b5:92:45:24:8c:25:8e:
         c0:18:12:b7:3d:f3:ae:19:72:14:84:e8:ca:4e:92:5d:32:99:
         82:7c:96:7d:61:55:53:d5:9a:c8:1a:96:7a:ae:a5:15:77:47:
         80:32:68:b9:df:f5:04:17:d1:59:bd:3f:af:e9:6e:07:2e:a6:
         ba:2d:33:91:bf:7e:81:17:82:71:e1:d8:ca:33:25:ad:f3:5e:
         54:12:ef:f7:45:64:3d:6b:a7:3e:e3:fb:70:58:ff:bd:6f:4a:
         8e:32:9f:e4:3a:95:44:8a:c8:2f:66:81:e9:90:91:17:bc:de:
         a2:23:31:e0:78:31:84:69:36:a6:6a:be:43:25:e1:4c:5c:56:
         53:77:99:6f:a1:cf:0e:3a:bb:5d:78:a9:c2:19:27:3e:9c:f8:
         0a:72:1a:77:3c:d8:51:7a:7d:0c:40:7f:3f:c3:a1:5f:4d:11:
         cd:71:38:68:da:c3:fb:f3:ee:fa:2b:e1:36:b9:0a:19:5f:f5:
         b8:03:e8:9a:cf:7f:67:27:b9:b4:e4:76:5f:4b:c1:af:02:07:
         7e:68:23:e1:c4:11:7e:55:25:ef:e5:23:79:aa:0a:49:01:e5:
         6e:f2:f7:da:7c:56:46:89:40:69:ad:70:16:a7:74:74:c1:9f:
         24:c2:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:18 2025 by rpki-client