Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File:                     TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier:          gFPYL3iH2+AET+EdKzxaEttFi4vS+2btztHb8K8nNI8=
Subject key identifier:   F1:E0:FD:BB:25:3C:63:94:B0:7E:FD:D9:C2:58:D5:2F:2C:4C:2E:8E
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer:       /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial:       019750EAB65C5D972C80DC32BA20D85ED0EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number:          90
Signing time:             Sun 08 Jun 2025 19:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:48 +0000
Files and hashes:         1: LpPDa_hMKwPOheYcHrNv5BDTWog.roa (hash: 2CoZfLFeobkKqc9qZWTYrYW94wPP5u5Zmz2xUC1WQvs=)
                          2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: Bkan/1EME04EenBH2CANi1TnkmrZ37/v6a+QX8rfaxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:b6:5c:5d:97:2c:80:dc:32:ba:20:d8:5e:d0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
        Validity
            Not Before: Jun  8 19:00:48 2025 GMT
            Not After : Jun  9 19:00:48 2025 GMT
        Subject: CN=f1e0fdbb253c6394b07efdd9c258d52f2c4c2e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:77:fe:70:67:d3:51:50:35:f2:a2:98:cc:d4:
                    7f:32:24:d1:5b:f7:f3:79:e7:2e:d0:3b:d7:e1:14:
                    dc:05:35:e7:8b:b2:5d:ad:d6:fb:9b:ab:87:f3:61:
                    39:c1:9f:ba:28:bb:10:51:5d:73:9e:0b:27:f3:4e:
                    ee:1e:53:f4:9e:f4:89:3b:69:3e:ec:0a:29:4e:c0:
                    a7:a9:1d:ff:78:82:f0:96:4b:cd:66:43:b7:a2:e9:
                    87:43:85:88:73:92:5c:97:9f:b7:10:4a:35:62:15:
                    cf:fb:da:a7:7c:59:91:94:4e:7b:ed:c6:47:d8:23:
                    13:54:3c:ba:71:e9:02:3b:32:5e:91:6e:af:76:4a:
                    84:47:13:b9:ca:ba:02:6a:d7:7a:0d:35:bd:7f:b5:
                    f1:39:48:c9:5b:05:28:ec:1c:8d:44:71:2f:0c:2d:
                    3a:65:6d:c7:53:45:b6:b6:2e:53:18:70:87:97:5f:
                    eb:7e:32:a1:45:f4:ae:1a:fa:bc:4b:3b:63:ed:99:
                    84:80:37:b8:4b:b8:3a:d9:53:af:3f:45:09:3f:80:
                    a1:0c:38:af:56:fd:8e:e3:34:90:4d:b7:bb:e0:a2:
                    fb:08:89:a2:d7:34:86:53:2f:c7:e2:89:af:59:59:
                    88:33:ca:17:81:bd:d5:cd:1f:f7:e7:b7:e5:67:f9:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E0:FD:BB:25:3C:63:94:B0:7E:FD:D9:C2:58:D5:2F:2C:4C:2E:8E
            X509v3 Authority Key Identifier:
                keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:45:48:ea:d1:26:b2:23:03:67:53:97:8b:47:eb:a9:e6:
         3a:4d:63:b0:6f:80:ee:4f:a3:e9:f5:9b:4e:7e:88:52:7d:18:
         22:35:f0:1b:03:14:b5:02:98:58:5b:d1:ad:b7:b8:99:a2:76:
         37:69:c0:86:74:0e:1a:20:44:b0:cf:79:14:2e:16:28:52:3b:
         56:1b:17:a2:0a:b8:f0:39:75:7f:0e:3f:d0:92:f0:06:da:92:
         42:93:53:13:ed:b3:35:ee:48:e0:0f:73:85:82:3c:e9:8a:1f:
         a0:d4:05:36:84:7b:3d:ff:e6:91:36:72:d0:85:b3:81:71:61:
         35:df:dd:fc:cc:7e:45:a8:e2:4d:9e:fb:5b:1a:16:4c:44:56:
         69:7a:85:c3:4f:32:db:a5:42:19:32:87:21:50:1d:d0:26:d9:
         af:11:c6:e3:b1:9d:79:c5:e0:bc:11:10:35:15:af:65:1f:22:
         26:cd:bd:9a:1c:8c:6c:10:d6:68:c2:21:a7:11:97:dc:51:61:
         4d:55:8f:11:78:19:11:8b:69:e7:2c:4a:9d:cf:4a:fa:87:38:
         27:48:30:c3:30:02:52:93:35:63:47:ed:11:2a:ca:f0:f0:af:
         39:4b:e2:04:8c:39:02:7f:86:9c:87:2c:a8:a3:ab:e7:bf:79:
         a9:b2:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:17:24 2025 by rpki-client