Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          tFCx2IwFPe9FBZgabFKKNr4y15NKuqB7ux+1qL7MnI0=
Subject key identifier:   59:50:26:62:27:34:9F:FF:9A:68:58:3C:94:15:97:8A:FE:0D:9D:69
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       0197485560AA161CD2119A306B1D281CB3A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          063C
Signing time:             Sat 07 Jun 2025 03:00:44 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:44 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:44 +0000
Files and hashes:         1: CmDicAfDfoz93maibb20vLFeJSE.roa (hash: T8rIp3ZOIEv2U6cB/WhgBqnN/oGzchfMmPBfz5rrS5E=)
                          2: D2t0G5l-no81p6rarPw2-EpQMYw.roa (hash: Ao7GMS7CFmzAFJghE2/XSbtoAU6qWDBHEwHUCZKTHwY=)
                          3: DGY9DRUJrYLpsverneGppUeA19c.roa (hash: BCikbUDAbYpSarrQzlAQJBis5jeq62TU6gwB+aPdaEk=)
                          4: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: s1MNOomzUSi3vWNw2KRotmluq+qOi9fHg4NDFTd5A30=)
                          5: wVkI_Szt3pr4XGdNEoWckhxFxCk.roa (hash: g7wpqUCSc32Jx8X0zDboKVFnJQIoCmmZncv7BRTwxHA=)
                          6: yZi5kswzr7A4DzlGCWa5weE8ZXs.roa (hash: Anf6GmhoZMZWxPMhTL0WiBitC7uHDJE3iNPWcCU2CB0=)
                          7: yaeBzALTksFutDMDSo14HWi1pcc.roa (hash: TCSIw7g3HWASSSDxcMQYHErKzGbepcCJReN+FTRV2MI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:60:aa:16:1c:d2:11:9a:30:6b:1d:28:1c:b3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Jun  7 03:00:44 2025 GMT
            Not After : Jun  8 03:00:44 2025 GMT
        Subject: CN=5950266227349fff9a68583c9415978afe0d9d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:3a:b4:ec:58:e9:79:f9:f6:c9:ce:13:ef:
                    d3:b7:8e:4f:48:7e:f1:34:8e:1f:e0:c1:75:19:55:
                    5f:a1:4c:08:6d:c7:53:03:0d:74:53:5b:f5:8f:80:
                    a0:89:f9:45:d6:fb:a3:f8:68:92:52:31:ff:dd:fb:
                    36:50:fc:7a:46:83:e9:53:5f:50:7e:9c:d5:91:dc:
                    36:99:57:1b:41:4f:52:be:02:53:a4:75:ad:84:9f:
                    73:6d:e2:99:14:e2:40:86:22:f3:de:ba:d8:b0:42:
                    b7:fe:10:35:f7:b0:65:a0:1d:22:47:8e:40:60:71:
                    6e:ca:b1:4b:a4:ff:ab:b7:93:ae:7f:6d:70:17:c1:
                    18:9f:a8:56:1b:9b:49:d7:47:9a:a6:bc:9b:41:7b:
                    e6:e4:bc:4d:8d:0f:dd:e6:aa:3e:af:72:2b:59:30:
                    5d:7e:6b:0e:4b:27:2b:f3:7a:1d:12:b6:c0:79:35:
                    c7:e1:c4:9a:ab:f0:06:0f:8e:cb:fd:01:08:49:4a:
                    04:7d:ce:cd:e5:9f:1a:b2:3a:13:d1:f4:3f:8e:a4:
                    5f:02:ac:a1:4e:a1:af:c2:67:2a:f6:ee:6e:8f:e1:
                    96:84:f4:16:f4:f2:4b:e9:e4:65:79:3e:4c:84:66:
                    25:96:cf:26:cf:24:2f:c7:e1:ad:73:83:6d:e0:d2:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:50:26:62:27:34:9F:FF:9A:68:58:3C:94:15:97:8A:FE:0D:9D:69
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:64:85:94:a1:40:a4:ed:a2:9a:2f:d1:ce:65:11:39:65:45:
         cf:b4:2c:20:6d:d2:b7:94:3d:e5:cf:2d:94:20:ab:50:c9:50:
         cd:65:d2:e9:87:62:d8:4a:85:e3:15:a3:1f:6a:8e:f3:a6:1a:
         7a:83:ef:75:d8:c5:bf:e0:82:e6:de:e4:8b:68:d4:8b:34:00:
         0e:94:de:0c:1a:22:7c:85:20:26:23:ab:59:4f:28:c2:32:1b:
         a1:0c:d6:74:65:77:01:14:94:82:44:3b:24:f9:83:e9:23:16:
         9c:fa:03:7c:43:ab:d9:7d:d2:91:11:cb:ab:e6:48:7d:c5:bc:
         95:7b:37:b6:a3:8e:c9:53:11:9a:33:d0:4b:33:5d:90:74:36:
         b6:b3:87:4a:ea:12:d5:a7:0f:bd:b9:79:d1:1d:8c:56:23:89:
         82:a4:cc:7f:62:07:15:61:b5:49:16:f8:ea:8a:c1:16:26:d3:
         34:01:3e:e5:22:b7:4a:11:b5:cb:8b:27:1f:a7:2e:29:6d:c1:
         66:06:9a:a6:6a:ea:d7:67:cc:a7:f2:ca:0c:8f:13:47:c8:8f:
         50:82:62:de:02:39:8a:21:fd:8b:2e:ea:85:58:70:31:a2:00:
         fc:46:21:44:d5:c9:54:ad:c9:28:4c:2a:c1:f9:f8:57:4e:76:
         c1:c1:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:02:59 2025 by rpki-client