Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File:                     tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier:          VYA8tJsqvSOWHHuadUcKvGbmaEC3wG+PCnbxGMzJfsk=
Subject key identifier:   9C:24:45:9B:15:A1:04:77:DC:3D:E0:A5:57:06:59:46:CE:26:15:54
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer:       /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial:       01976282EA60211AE5272F9CFB24CF1F5A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number:          1588
Signing time:             Thu 12 Jun 2025 05:00:36 +0000
Manifest this update:     Thu 12 Jun 2025 05:00:36 +0000
Manifest next update:     Fri 13 Jun 2025 05:00:36 +0000
Files and hashes:         1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
                          2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: DM4EAn5Ly1kBRhc5IwqSrre/3BvifEAjnK6GZTUsRMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:82:ea:60:21:1a:e5:27:2f:9c:fb:24:cf:1f:5a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
        Validity
            Not Before: Jun 12 05:00:36 2025 GMT
            Not After : Jun 13 05:00:36 2025 GMT
        Subject: CN=9c24459b15a10477dc3de0a557065946ce261554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:42:ac:fb:b8:3a:f5:ee:6d:bd:1b:88:19:
                    1d:50:82:12:d6:15:c4:4f:37:09:fb:fd:c1:c2:ab:
                    b8:32:15:d5:c6:a4:20:36:d4:fb:04:53:a7:d0:31:
                    6e:c1:7a:78:63:fb:92:79:20:50:ed:1a:59:ed:5e:
                    9a:a4:3f:e5:da:8f:26:27:61:06:33:d1:bd:30:bf:
                    ca:30:b8:9b:15:c8:f4:f1:a8:9b:ce:14:bd:85:c9:
                    af:c1:4b:54:af:f6:72:91:24:0d:0f:12:98:bd:a1:
                    4a:8e:34:46:38:41:d9:2a:b7:38:e4:4a:51:4d:65:
                    39:67:10:88:ac:90:1b:8e:e9:c6:b0:ac:53:20:48:
                    82:c6:e7:a1:4d:ca:bc:a0:1c:c0:0d:07:59:88:dc:
                    76:08:6a:02:08:58:db:07:bc:72:f5:81:30:bd:fb:
                    52:72:c9:f8:d9:46:c8:d7:26:9d:5b:83:c7:b5:b3:
                    f1:f3:3b:9c:6e:fb:b6:56:9e:6d:6d:2c:bb:3f:24:
                    8f:64:14:a5:5f:72:ad:5a:eb:b8:fc:fd:86:32:ba:
                    4a:d9:b0:d2:e5:29:68:0c:64:71:82:60:cc:a2:cf:
                    06:d3:4f:56:f4:a2:e4:e9:43:dd:84:1b:b8:47:9c:
                    09:43:46:f7:f6:41:03:21:0f:72:56:68:dd:45:f7:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:24:45:9B:15:A1:04:77:DC:3D:E0:A5:57:06:59:46:CE:26:15:54
            X509v3 Authority Key Identifier:
                keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:49:01:c2:34:f5:92:ca:f1:01:d3:39:7f:04:7f:a7:3a:04:
         8c:da:c9:47:71:90:e6:83:29:6b:cb:1f:01:e5:17:cb:af:d7:
         d3:50:63:12:e1:f5:ed:f5:e9:62:68:41:28:34:60:1e:dd:be:
         c6:26:77:0c:85:a7:fe:ac:fd:00:bd:c8:01:6f:d3:bc:72:40:
         5c:85:1c:ea:13:d3:32:e3:95:9f:57:07:5f:14:4e:76:d5:ec:
         33:51:5e:b0:2e:bb:0e:5b:bc:1b:2b:70:5d:bc:08:c4:50:3f:
         21:cf:4b:39:52:e5:93:d6:1e:2b:27:fe:fb:72:6b:ad:31:3e:
         9c:77:87:ea:0f:fa:ab:23:d5:1d:e9:2d:87:de:be:0f:ee:85:
         54:8b:67:1c:f5:30:8b:2b:21:a7:7d:2a:ac:37:78:1d:6a:73:
         ed:e3:e3:a9:be:fd:be:5f:a4:b5:24:f3:99:6f:ff:18:db:19:
         ce:3d:60:9c:c3:b1:72:ac:4c:55:0e:4b:1c:b1:2c:f2:f0:71:
         77:d0:80:0e:c9:47:b4:9a:6e:87:1e:3c:f2:83:6a:22:10:da:
         ae:2c:87:35:a3:a7:5c:1f:61:ef:19:e1:9b:80:30:77:4a:79:
         74:b3:f0:fd:c8:e6:20:34:d3:57:6f:42:fd:19:b4:bc:05:7f:
         2e:1b:e8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:31:16 2025 by rpki-client