Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File:                     TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier:          16Tx1Ai4FAuI0ocpWOO4qO511+GWGonhHKzoKUDcats=
Subject key identifier:   33:EE:60:65:70:4D:7C:DB:8F:0E:99:28:DA:BE:9A:BE:AC:66:13:A1
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer:       /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial:       01976D3D51E160F542A94448FD00146F06BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 07:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:24 +0000
Files and hashes:         1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: 90BI4iAMeSxZTLSaoL4CKzyGH8iWvKk5X3f69VHMzbM=)
                          2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:51:e1:60:f5:42:a9:44:48:fd:00:14:6f:06:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
        Validity
            Not Before: Jun 14 07:00:24 2025 GMT
            Not After : Jun 15 07:00:24 2025 GMT
        Subject: CN=33ee6065704d7cdb8f0e9928dabe9abeac6613a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:88:c0:18:d1:03:61:ce:11:e7:aa:02:ae:
                    a3:53:83:c6:42:78:df:98:7d:cb:83:19:f2:1c:a1:
                    70:fa:ee:a1:96:17:f1:aa:43:ea:b9:32:eb:3d:22:
                    ce:d6:88:b4:d5:0d:ff:39:e5:77:b0:62:4c:64:04:
                    2a:47:f1:8f:d6:8f:84:40:ff:85:93:9e:ec:77:9d:
                    71:ae:1f:b7:f9:97:2c:2b:08:88:c7:c5:2a:b2:11:
                    93:93:1b:99:07:5b:63:75:d7:f7:fc:ca:10:b6:95:
                    38:8e:0a:f4:e5:a3:5a:a1:8d:a9:60:c2:f4:e9:43:
                    e5:95:55:dc:f6:fe:e2:3f:98:76:a7:76:59:67:7a:
                    34:8b:b1:11:38:c2:20:4d:e8:33:16:9e:92:45:10:
                    3a:2d:00:37:be:19:32:ea:4e:3f:e0:20:96:64:7e:
                    b1:1d:59:3d:c2:ea:cf:df:16:e0:01:15:31:75:26:
                    1a:d8:e2:e5:d5:b9:9d:14:d9:24:bd:fb:d6:d0:07:
                    5f:51:13:45:07:33:b4:bc:79:72:87:fd:df:d5:02:
                    d5:13:1d:ef:8c:7f:4e:e1:f9:31:92:2a:b1:78:9d:
                    97:5c:56:f9:dd:51:40:df:53:23:94:e2:2b:2d:31:
                    5a:0e:58:e4:b6:3d:38:fb:3a:22:b3:34:7e:c0:42:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EE:60:65:70:4D:7C:DB:8F:0E:99:28:DA:BE:9A:BE:AC:66:13:A1
            X509v3 Authority Key Identifier:
                keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:50:aa:c0:9d:96:e2:c3:65:8f:c5:f5:b8:74:a5:f2:46:f8:
         4f:16:73:c6:90:ec:03:fc:1e:1b:d7:a9:a6:46:d4:78:ac:e4:
         9f:86:da:64:a9:e2:c4:10:f1:5b:9a:e5:dd:0a:05:9e:69:78:
         0c:48:72:ef:be:ec:04:2e:63:38:4f:dd:3f:2b:3f:21:d0:dc:
         db:46:e7:c4:57:1f:e7:ca:41:c4:ad:c2:d0:f7:17:4c:b7:b8:
         93:ed:fd:72:6d:b8:b4:4e:87:46:86:42:b5:1e:98:61:bf:98:
         fa:11:74:0f:c9:58:02:72:6a:aa:d9:73:71:63:15:e8:ca:ef:
         c9:0d:6a:39:fb:1b:c3:37:1d:00:bf:df:8c:20:82:ad:fc:68:
         13:9f:c4:b8:aa:7e:8e:85:68:d4:9b:99:ee:33:7a:fd:58:43:
         28:41:b0:cb:d7:50:2e:3b:0d:3a:ed:5d:c8:6b:b8:88:a3:3b:
         1a:fb:69:dc:34:69:ea:de:43:9d:e3:d2:67:5c:e8:4c:2c:d1:
         36:54:d2:d6:29:7b:cd:fc:2e:52:cf:f3:96:64:dc:5d:b5:51:
         ed:0a:7d:c8:26:9e:43:eb:41:2a:6a:b1:9d:a8:4d:9e:1e:89:
         0f:59:8e:95:09:b3:ec:e2:df:90:a1:98:ce:77:db:48:95:5f:
         27:7f:6c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPVHhYPVCqURI/QAUbwa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMDRlMGE3MThhNjEzOWE5YzY1ZjBkNDg4NmJiODI3MTRk
YTY2ODIwHhcNMjUwNjE0MDcwMDI0WhcNMjUwNjE1MDcwMDI0WjAzMTEwLwYDVQQD
EygzM2VlNjA2NTcwNGQ3Y2RiOGYwZTk5MjhkYWJlOWFiZWFjNjYxM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvviIwBjRA2HOEeeqAq6jU4PGQnjf
mH3LgxnyHKFw+u6hlhfxqkPquTLrPSLO1oi01Q3/OeV3sGJMZAQqR/GP1o+EQP+F
k57sd51xrh+3+ZcsKwiIx8UqshGTkxuZB1tjddf3/MoQtpU4jgr05aNaoY2pYML0
6UPllVXc9v7iP5h2p3ZZZ3o0i7EROMIgTegzFp6SRRA6LQA3vhky6k4/4CCWZH6x
HVk9wurP3xbgARUxdSYa2OLl1bmdFNkkvfvW0AdfURNFBzO0vHlyh/3f1QLVEx3v
jH9O4fkxkiqxeJ2XXFb53VFA31MjlOIrLTFaDljktj04+zoiszR+wEJ5PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPuYGVwTXzbjw6ZKNq+mr6sZhOhMB8GA1UdIwQY
MBaAFE4E4KcYphOanGXw1IhruCcU2maCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YWZlYWItMDJiOS00ZWJkLWJmYTIt
OGU4MGI0OTZhMDNlLzEvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YWZlYWItMDJiOS00ZWJkLWJmYTItOGU4MGI0OTZhMDNl
LzEvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslCqwJ2W
4sNlj8X1uHSl8kb4TxZzxpDsA/weG9eppkbUeKzkn4baZKnixBDxW5rl3QoFnml4
DEhy777sBC5jOE/dPys/IdDc20bnxFcf58pBxK3C0PcXTLe4k+39cm24tE6HRoZC
tR6YYb+Y+hF0D8lYAnJqqtlzcWMV6MrvyQ1qOfsbwzcdAL/fjCCCrfxoE5/EuKp+
joVo1JuZ7jN6/VhDKEGwy9dQLjsNOu1dyGu4iKM7Gvtp3DRp6t5DnePSZ1zoTCzR
NlTS1il7zfwuUs/zlmTcXbVR7Qp9yCaeQ+tBKmqxnahNnh6JD1mOlQmz7OLfkKGY
znfbSJVfJ39sow==
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:30:59 2025 by rpki-client