Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
File:                     TEaPGBJltNlsooNaPlcMJnkDXf8.mft (raw, json)
Hash identifier:          +m9Dqa0ywx9d2EhdW80yJbgX6KwLOLi2QMzGi7tEhk4=
Subject key identifier:   44:F9:97:6B:BE:8E:9C:0D:A9:11:97:EE:BF:8A:92:7F:87:6C:5A:AE
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Certificate issuer:       /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial:       01974E8E3ECB046D0C753F033E8D84D2CD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
Manifest number:          14B1
Signing time:             Sun 08 Jun 2025 08:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:34 +0000
Files and hashes:         1: TEaPGBJltNlsooNaPlcMJnkDXf8.crl (hash: vIJ0RMT5jczXWYvvSsQRmhSmmSCf5X9ze/BAghIrMp4=)
                          2: TlMdFyo8UfqJ-RDrKLDhrg_5XKw.roa (hash: xU0L/Ky30tv9qoqHoWWKteKnPJXzN1H+V1CKVuBw5jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:3e:cb:04:6d:0c:75:3f:03:3e:8d:84:d2:cd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Validity
            Not Before: Jun  8 08:00:34 2025 GMT
            Not After : Jun  9 08:00:34 2025 GMT
        Subject: CN=44f9976bbe8e9c0da91197eebf8a927f876c5aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:62:b0:1c:c7:ce:47:bc:a7:f8:4a:e8:2b:04:
                    26:d2:19:db:67:7f:2a:0c:a3:e6:96:00:ae:a9:6e:
                    5d:a2:0b:50:bf:97:f3:4b:f0:43:14:52:ca:52:c2:
                    14:0b:93:2a:9e:71:90:fa:c2:4f:b7:af:28:39:3b:
                    a0:4a:a1:6b:d2:10:89:ec:cb:76:e1:22:de:4b:93:
                    b4:4b:91:d3:26:1a:81:5e:a1:e4:00:88:aa:01:09:
                    3e:3f:d1:3a:c6:aa:53:8a:36:9e:7b:71:2e:54:d3:
                    20:b3:98:c4:84:54:36:99:9f:fd:27:59:6b:52:f5:
                    e7:0a:83:27:f3:1e:ff:f7:0f:03:27:c3:53:fe:61:
                    5f:c4:1c:72:45:37:8b:a7:28:4f:18:c3:e9:b7:39:
                    83:63:71:e8:fd:0b:3c:98:5d:b9:f4:78:b7:b5:20:
                    54:08:64:a9:6a:f9:51:31:14:b5:b4:9a:f7:0b:8a:
                    ac:a5:45:c1:be:3b:3b:55:e9:a3:36:3e:dc:2b:1e:
                    d3:19:4f:8c:b3:f5:4a:cf:4b:fc:75:08:46:26:0d:
                    6e:da:78:17:10:97:42:45:b9:6b:77:9c:17:bf:1f:
                    51:c6:4e:76:dc:de:96:d8:d0:b3:60:52:bf:07:e2:
                    f9:19:fa:e0:bd:19:80:f0:9b:dd:8c:d8:19:f5:97:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:97:6B:BE:8E:9C:0D:A9:11:97:EE:BF:8A:92:7F:87:6C:5A:AE
            X509v3 Authority Key Identifier:
                keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:dd:37:15:1b:36:66:8e:22:a3:b5:0f:17:cb:d7:24:9f:9f:
         dc:a7:95:52:b9:4b:a3:4e:33:18:ab:d8:2b:2f:9d:aa:05:8e:
         dd:c3:6f:27:1e:14:5b:0f:ae:d1:9b:ad:de:94:64:cd:a5:0b:
         f8:40:d7:a6:d0:80:a9:00:da:b1:e2:90:db:bc:68:4a:08:e2:
         12:12:ed:a5:41:d3:4d:7f:bd:85:f0:5c:f1:98:f7:07:8c:a5:
         dd:09:dc:53:e4:0f:2d:d6:68:73:72:5d:1e:94:0f:0d:95:3a:
         8a:71:4d:74:b1:e9:27:87:bb:9d:e1:32:15:9b:e4:f3:c2:52:
         db:b7:9e:fa:d9:bd:a9:a5:cf:48:1f:fa:8f:28:c4:be:c3:a7:
         aa:a8:65:4b:f0:57:42:25:8d:e9:a1:c6:eb:e9:77:0a:bf:65:
         5d:ca:7d:aa:40:90:6c:bc:1c:ad:e6:63:73:8b:fc:b2:c3:26:
         87:fa:70:a8:61:0d:78:7a:10:2d:0e:63:f3:62:79:d6:dc:d4:
         3a:da:4c:6d:a5:d5:ad:44:42:1e:55:9c:f3:bb:66:8d:31:d0:
         83:0d:0e:93:12:49:f2:ee:08:df:93:dc:9a:66:06:aa:3b:2b:
         c8:95:21:7e:c1:3b:52:fd:c1:c1:77:38:7e:53:b2:b2:a5:24:
         92:df:f3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:04:49 2025 by rpki-client