Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File:                     TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier:          7eoUGk0HnEMMV67zcwFHAcbr89uYWxIQztZs/0FIH4I=
Subject key identifier:   49:3B:53:F0:A4:67:6F:9B:DC:11:7D:AA:96:C1:8E:C7:D6:5D:BA:ED
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer:       /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial:       01963FF9925AF0F8BECB20399F4FA9B66981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number:          14F3
Signing time:             Wed 16 Apr 2025 19:00:42 +0000
Manifest this update:     Wed 16 Apr 2025 19:00:42 +0000
Manifest next update:     Thu 17 Apr 2025 19:00:42 +0000
Files and hashes:         1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
                          2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
                          3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: BRk5/sbX0E89UD2NZLqaIftCjHhZq+n2AHuCz4iZ5ZU=)
                          4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:f9:92:5a:f0:f8:be:cb:20:39:9f:4f:a9:b6:69:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
        Validity
            Not Before: Apr 16 19:00:42 2025 GMT
            Not After : Apr 17 19:00:42 2025 GMT
        Subject: CN=493b53f0a4676f9bdc117daa96c18ec7d65dbaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dc:93:45:40:3a:07:93:06:62:e7:76:a5:09:
                    d1:3e:45:03:9b:96:a6:2a:d6:c5:ce:a5:bd:0b:ad:
                    9f:f1:93:e9:1c:9e:ae:d9:f8:38:00:ca:d2:13:86:
                    a2:05:dd:5c:51:6b:ae:8e:8e:df:49:3a:bc:f2:f1:
                    2e:b7:9d:42:bb:19:75:97:a8:c2:53:a4:31:72:ee:
                    e1:8f:46:dc:2f:91:43:8b:18:62:21:ed:a9:fe:fe:
                    9b:84:5f:36:cb:76:f6:30:73:c6:39:8f:65:95:9a:
                    0a:fb:d5:86:06:e5:ef:32:db:56:27:88:0c:ed:42:
                    85:67:fd:df:8f:a8:34:56:c3:16:76:c6:7e:1d:90:
                    56:3a:dc:78:50:27:de:eb:e0:d5:01:ff:ad:b9:11:
                    c5:a2:74:73:5c:6f:73:85:39:61:d0:91:4c:88:19:
                    51:08:95:76:4b:3a:e8:0b:39:72:4c:e7:06:ea:58:
                    fd:2d:36:26:12:84:a7:ea:92:12:a8:d3:c6:e1:b1:
                    7b:2c:f6:0f:67:9b:67:d9:41:c0:11:08:77:27:98:
                    a8:46:b8:b4:89:b1:b3:a1:50:f6:67:d8:a9:aa:1c:
                    e6:b8:18:d2:03:50:bc:41:37:00:21:c7:e7:43:70:
                    1b:80:26:b2:49:2c:ab:e2:ac:99:d2:16:da:97:70:
                    83:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:53:F0:A4:67:6F:9B:DC:11:7D:AA:96:C1:8E:C7:D6:5D:BA:ED
            X509v3 Authority Key Identifier:
                keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1a:0e:1d:f7:6d:d7:04:52:76:7d:50:db:51:10:63:9d:1c:
         a0:0a:7c:94:80:92:a1:a7:9c:47:50:eb:81:a1:10:9f:2a:a8:
         fe:e3:9e:1f:9f:8f:dc:61:85:9a:45:da:3e:06:c9:fb:0d:4e:
         20:f1:55:3f:35:70:6b:00:a2:94:7c:a1:41:69:2d:4b:4f:de:
         72:94:6e:2d:a9:17:a5:88:ee:90:71:d6:21:d9:48:3e:9f:64:
         da:a7:65:4c:18:d1:36:e6:7e:db:f5:58:fa:6e:ed:85:67:6f:
         e3:45:00:98:80:c9:c7:93:25:1f:3f:b2:12:0c:54:90:dd:0b:
         b0:b2:b4:d6:86:47:c9:89:30:cb:07:5e:70:c2:3e:2e:fa:bb:
         06:24:45:99:9a:97:d8:26:82:49:63:42:e5:b2:20:e8:76:ff:
         a5:f0:e1:35:4c:b7:84:ef:f7:a1:04:89:8c:e4:15:48:b8:47:
         4a:3c:55:a8:ae:fd:35:c9:43:9c:47:e2:af:6f:8e:b5:27:6c:
         ae:a0:f0:27:a1:32:f3:34:b0:75:3f:ac:01:a7:3e:6e:60:df:
         b4:a0:a3:a1:8d:d8:7c:00:7d:f7:14:e0:d7:84:f3:69:54:5e:
         16:49:38:5c:22:5e:63:50:7b:88:8b:e3:0f:59:6a:b5:61:5c:
         48:dc:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:59:18 2025 by rpki-client