Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File:                     tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier:          2wyxEepLVrkC9lp1IPnfWOc88Hcgl2rSL3dQd8iGhNE=
Subject key identifier:   D9:87:C4:89:23:DB:6A:A8:86:70:02:F7:67:8C:EE:21:A4:77:8A:27
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer:       /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial:       01974D4481B984DA639E19711AA19DEF7A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number:          158C
Signing time:             Sun 08 Jun 2025 02:00:24 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:24 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:24 +0000
Files and hashes:         1: NwHU4_RRdYlU4XyGWZgPG7ScoJI.roa (hash: ipL8tImvWhn17uYEp5lsF1Z56RqnWb9jmUuXddwpoFg=)
                          2: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: +KCvFx2amXt7t7WE5fLuLHtAFXuKJwtcHj6HCosSMw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:81:b9:84:da:63:9e:19:71:1a:a1:9d:ef:7a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
        Validity
            Not Before: Jun  8 02:00:24 2025 GMT
            Not After : Jun  9 02:00:24 2025 GMT
        Subject: CN=d987c48923db6aa8867002f7678cee21a4778a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:4f:85:0e:17:88:91:2a:e8:d3:5f:27:58:
                    f2:c4:de:fe:38:44:c0:86:cd:c6:8b:fd:55:b9:d1:
                    96:7c:3a:75:81:e1:42:f9:23:fa:7e:8f:0a:ef:d5:
                    47:29:50:27:ab:1d:fd:2c:ec:31:9a:1c:65:cf:51:
                    d2:80:b8:36:49:b7:83:1e:36:41:5e:e8:d5:c1:25:
                    d3:ee:21:9a:1c:65:fd:6b:5b:07:ae:30:1c:93:13:
                    b5:8a:a6:7f:83:00:1a:a1:29:f0:98:66:6d:51:9c:
                    78:f4:45:1f:c8:28:25:82:fd:da:43:ec:32:89:a3:
                    83:48:dc:8b:83:a7:6d:3d:0e:6e:4c:19:20:1a:5f:
                    b2:8c:31:a0:e2:8c:bb:b7:79:6c:63:52:4a:81:47:
                    6d:93:98:bf:f4:f2:4e:15:cf:62:cc:82:98:39:c5:
                    90:0a:c6:14:6d:77:af:06:6d:bf:5d:54:23:a2:af:
                    79:07:31:f2:0d:54:bf:03:f3:51:4a:e2:a7:32:c5:
                    14:fd:03:04:c8:b8:2b:0f:6d:5a:c2:94:8b:2c:75:
                    c9:20:dc:c2:f1:3c:38:43:d2:9f:3f:7b:5c:b6:c7:
                    d8:ae:c6:15:56:96:95:f1:cb:18:e3:0f:f3:4c:c6:
                    96:8a:7f:de:2c:01:2b:30:00:39:9b:a7:92:2d:b4:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:87:C4:89:23:DB:6A:A8:86:70:02:F7:67:8C:EE:21:A4:77:8A:27
            X509v3 Authority Key Identifier:
                keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:30:38:af:21:61:fd:d5:e7:60:5e:f6:cc:f7:10:a0:46:d6:
         98:b2:58:4f:5d:1f:17:99:a5:03:7a:d6:05:14:8d:4a:11:53:
         97:9f:a0:64:40:c5:b4:33:a8:b5:d5:5a:0d:24:9e:79:7f:9c:
         07:5c:2f:90:a0:be:c5:14:a2:4a:e9:c7:de:cf:82:25:5a:f7:
         8a:dd:7d:70:37:ac:71:62:2f:76:6b:24:93:d8:cc:cb:fb:f1:
         8d:e8:bc:23:0d:3c:5c:59:3f:6e:1c:b1:6c:57:f5:77:c9:8c:
         13:a2:ab:9f:48:a7:8c:cd:54:69:0e:cb:11:a1:ec:05:58:1d:
         96:b4:8a:f2:d4:05:5b:91:d8:24:01:91:5c:b9:aa:de:07:27:
         1a:f9:7b:67:ba:db:28:9e:e7:01:be:b1:d7:bb:57:c2:4f:b6:
         66:e0:26:37:99:4b:9f:55:42:d7:32:ac:b5:14:eb:ef:a2:43:
         ad:f4:4d:5e:53:b5:15:34:57:37:c0:ba:ee:b2:d3:73:b6:65:
         e2:84:0c:77:01:eb:66:ab:89:fb:f2:10:a7:21:b4:eb:92:75:
         f8:c8:7a:0f:10:ab:b6:60:6d:75:05:58:70:44:41:7a:ea:b2:
         1c:43:c8:71:ea:0f:f8:a0:08:36:e2:62:dc:02:40:29:c4:83:
         5b:c2:ee:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:42 2025 by rpki-client