Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File:                     t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier:          Wv5AWYl3O8wt05KfENZr0hCiFfuaieR++IwEDY8Q01c=
Subject key identifier:   81:44:C0:80:8B:9B:52:CA:A4:C4:20:ED:D4:07:8A:9B:72:D4:E4:DF
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer:       /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial:       019749D5F934CFAF11E8E28F6149BF982ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number:          0EA6
Signing time:             Sat 07 Jun 2025 10:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:49 +0000
Files and hashes:         1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=)
                          2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: aWl40Dyzp2oa2TAanVHmQy4YyTa7GdSbtwbr+zhW8zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:f9:34:cf:af:11:e8:e2:8f:61:49:bf:98:2e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
        Validity
            Not Before: Jun  7 10:00:49 2025 GMT
            Not After : Jun  8 10:00:49 2025 GMT
        Subject: CN=8144c0808b9b52caa4c420edd4078a9b72d4e4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:a6:4b:36:3f:e3:dc:d3:d5:45:4d:bc:f9:
                    27:34:56:41:6b:dc:60:a1:82:b1:b8:a8:8b:28:a5:
                    79:73:fe:c6:88:52:e2:75:93:34:43:3b:54:86:40:
                    7f:6f:f1:b2:2f:28:c0:13:54:2a:8b:4d:2b:c3:ba:
                    eb:09:1f:e7:1a:81:87:0c:60:72:62:86:bd:5e:cc:
                    cb:b8:fb:27:75:70:01:0a:f0:4d:1d:4d:b5:5c:fc:
                    54:9e:36:bc:b2:22:5d:f7:c4:8c:77:0a:e4:26:29:
                    58:be:6c:8e:07:41:b3:cc:88:9c:34:f2:d0:8f:97:
                    dc:29:91:39:d5:56:55:25:7c:47:56:54:3c:91:f4:
                    27:96:32:1e:28:d3:ee:d0:15:7c:07:0f:87:12:b4:
                    f1:3e:9f:4a:44:0b:70:f0:4c:3f:86:3a:4f:86:d6:
                    04:30:a9:1d:ba:67:c0:ee:b5:73:8c:e7:3d:1c:3b:
                    20:2f:d5:b4:3a:07:9a:66:99:ae:a3:4d:fc:9b:68:
                    6d:61:32:d6:98:6e:03:3a:a7:f0:8c:55:9c:ec:8b:
                    1c:16:03:c6:06:20:00:4b:9d:5c:f8:38:6d:b8:ea:
                    6e:a1:0e:d0:96:63:57:8c:81:3a:6d:f5:b3:c4:89:
                    b6:b5:a7:b3:e0:5e:8b:36:71:f0:cb:d4:5e:6d:1a:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:44:C0:80:8B:9B:52:CA:A4:C4:20:ED:D4:07:8A:9B:72:D4:E4:DF
            X509v3 Authority Key Identifier:
                keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:64:9b:55:d0:99:c6:e0:68:7a:d2:62:c0:b2:a5:f6:be:b3:
         4f:c0:35:09:9f:9f:b6:88:18:ba:56:14:99:de:91:a5:11:c3:
         b7:8f:e7:0b:30:5a:c4:ba:b9:af:b4:3a:90:eb:00:47:9d:f3:
         92:e7:69:8e:11:52:e7:f5:ec:c5:d8:a6:b4:b1:84:e5:38:59:
         00:f5:cd:52:e4:ca:f9:57:2b:45:ce:4b:61:75:84:d7:37:75:
         54:d7:ac:55:d4:02:d2:8f:d2:6a:ea:e9:d3:c7:64:4c:7f:d9:
         a6:93:ba:b8:fe:26:47:4e:9b:73:1e:f3:39:7d:55:94:37:31:
         cf:b7:0a:1b:3b:85:3c:4a:bd:6d:db:7f:4a:9e:be:91:ee:c9:
         ca:d4:91:9b:13:b5:65:2f:e0:5e:52:5e:f4:68:5b:65:af:14:
         d4:f3:b7:ad:27:69:f2:a6:bf:28:bb:68:4d:2d:9d:6e:d7:07:
         4b:e8:ff:45:39:a9:d5:7a:bc:96:c4:10:41:6f:3b:a3:ac:1a:
         61:5f:09:b5:73:46:a0:2c:98:5f:59:50:f3:c3:92:30:cb:14:
         3d:6a:3c:02:86:62:95:9c:04:fd:da:9d:64:8f:33:d4:8d:30:
         87:b9:64:05:df:41:53:16:5d:40:06:b1:95:d9:f4:cf:57:da:
         33:af:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:10:20 2025 by rpki-client