Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File:                     TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier:          7sruEFi9ISKzvbocghBkJ1R6OWircko+uslM1azrAaE=
Subject key identifier:   7F:46:32:0E:E7:26:BE:A0:69:5E:E2:F5:8E:DB:4A:13:B5:1C:A6:D2
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer:       /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial:       01974D0E1FF3DD703625D8D39D24335658D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number:          1588
Signing time:             Sun 08 Jun 2025 01:01:00 +0000
Manifest this update:     Sun 08 Jun 2025 01:01:00 +0000
Manifest next update:     Mon 09 Jun 2025 01:01:00 +0000
Files and hashes:         1: IF7POYmH2s6_XyYc1YSgmRclBfU.roa (hash: vkWkPszh+VD/raa/NYL5vb45rCVCasfYYp1M1TBPCxY=)
                          2: JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa (hash: Cf4mCXc4k2uDXgbB44mtC61vJtEhAxi4CrnAuvkGzGk=)
                          3: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: tTMAqmd9VKo3soW1P6coZn9F2ojF+m7AQdk1zMxvW4U=)
                          4: aC7DUlOCYd4ZrOlGrZ-OMdQYyBE.roa (hash: gIed90T8oX8NcIFpqOYwduIUaAgChpM53a4QzPH0Bg8=)
                          5: mkB4SicZVGVWHTxw9oi0-PVxn0E.roa (hash: 2wDNVFd31otqzR0DUqjmHU5P99370PEDq5aHd3jA9Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:1f:f3:dd:70:36:25:d8:d3:9d:24:33:56:58:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
        Validity
            Not Before: Jun  8 01:01:00 2025 GMT
            Not After : Jun  9 01:01:00 2025 GMT
        Subject: CN=7f46320ee726bea0695ee2f58edb4a13b51ca6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ad:2f:48:69:a8:50:a4:01:28:10:c5:4d:5f:
                    dc:1f:de:e8:c4:69:d3:07:1e:02:35:42:a1:1c:c6:
                    8f:c5:53:f0:1d:2c:ab:b6:e9:09:7f:93:0d:c9:2f:
                    b6:6f:d7:d4:54:f3:c5:e6:8c:c0:0e:a8:f9:a7:71:
                    0e:49:61:5e:06:b3:b1:46:cf:bf:90:ed:58:fa:f2:
                    e5:c6:83:87:6b:bc:36:3f:9e:be:bb:f4:ac:8c:b7:
                    fa:d4:6a:6a:02:88:d8:af:39:7a:91:6c:cf:d1:97:
                    ef:25:84:21:01:f7:22:84:c3:35:38:1e:33:d9:37:
                    94:03:66:74:53:9e:2f:e3:85:97:1f:be:c3:74:56:
                    88:78:ea:59:e8:d8:49:01:7c:5f:93:c0:93:11:1e:
                    a6:d3:b2:45:35:39:cc:10:9b:90:41:b1:46:f2:5a:
                    b2:44:48:a1:7e:2d:2f:50:3d:37:24:ff:b4:1a:5e:
                    38:28:72:d9:97:14:ae:c1:5c:b5:24:f7:23:ec:c0:
                    70:3a:1e:6d:bf:c7:e5:64:3f:34:f8:38:13:00:5d:
                    d9:29:74:c4:0b:94:d7:23:44:f1:e3:c6:51:62:ac:
                    5b:fb:5c:75:cf:48:d6:73:79:bc:4e:c1:b2:e9:80:
                    49:2d:92:89:24:7b:50:47:6d:85:fc:de:e7:05:9f:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:46:32:0E:E7:26:BE:A0:69:5E:E2:F5:8E:DB:4A:13:B5:1C:A6:D2
            X509v3 Authority Key Identifier:
                keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:31:71:0b:05:59:6b:ba:5c:db:d9:61:99:a2:3c:5b:09:7b:
         c0:65:9c:62:79:e9:ec:5b:80:87:4e:c8:ca:bf:a7:13:9a:97:
         ac:7a:f7:d1:7f:40:37:50:53:7d:e6:84:0a:5e:1f:2a:83:58:
         25:69:8a:44:c2:d5:12:ba:24:06:92:75:e5:eb:68:1a:62:2c:
         73:f3:48:01:38:18:33:35:11:1c:23:00:17:76:09:64:a7:a6:
         a8:47:ac:af:c4:59:5d:72:88:12:16:15:9e:ee:a9:37:16:db:
         04:b9:0e:25:09:52:fb:24:c3:a7:0f:9e:2a:5c:d7:88:29:89:
         9c:ad:29:94:2b:14:60:e6:ed:c6:72:8c:b3:e7:80:ee:40:75:
         13:40:a4:25:18:6c:dd:01:21:77:72:18:48:20:82:eb:d7:7a:
         42:40:05:ea:bc:2e:be:02:45:63:a1:d2:e0:29:6c:ed:54:8c:
         09:89:f6:10:c6:59:eb:22:b6:63:a3:32:12:fc:22:90:b1:d5:
         3d:38:b7:e9:58:46:cf:55:38:39:c8:73:35:ba:c2:50:68:80:
         d5:91:b9:7a:3b:1d:f2:d2:6e:77:0a:97:95:74:38:0b:69:99:
         53:cb:bb:78:37:de:ad:e8:b3:1e:7e:2d:1a:e4:3f:d4:0f:fd:
         33:27:de:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:39:26 2025 by rpki-client