Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
File:                     TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft (raw, json)
Hash identifier:          qYeLYIoa1sBpTq5eKESGnGZofYvGvIfLNRimF8MrhPo=
Subject key identifier:   B4:08:BD:CC:EF:EE:48:BD:66:A6:BF:92:7F:E3:DF:51:15:1C:F5:38
Authority key identifier: 4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4
Certificate issuer:       /CN=4de43a56cbf6afe4356896e0dff529c1796944b4
Certificate serial:       019850B123E4EA85FAEA255A1C962950BC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
Manifest number:          07F1
Signing time:             Mon 28 Jul 2025 11:00:42 +0000
Manifest this update:     Mon 28 Jul 2025 11:00:42 +0000
Manifest next update:     Tue 29 Jul 2025 11:00:42 +0000
Files and hashes:         1: TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl (hash: l6W8GXcHsSCWVjH1G/RFk3yRMTE71pp+HTNyg7m63nQ=)
                          2: ysLU-tIMB584lIEbHQSL8JGKsnE.roa (hash: Uif1kdpiVYKXIEf5r/9WzjR7N7gNIDgEDehCMCiuiNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:50:b1:23:e4:ea:85:fa:ea:25:5a:1c:96:29:50:bc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de43a56cbf6afe4356896e0dff529c1796944b4
        Validity
            Not Before: Jul 28 11:00:42 2025 GMT
            Not After : Jul 29 11:00:42 2025 GMT
        Subject: CN=b408bdccefee48bd66a6bf927fe3df51151cf538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:40:93:62:f8:b9:4c:c9:2d:c9:3d:89:0d:
                    97:80:9c:19:5f:72:7a:c5:35:09:3e:fe:26:44:50:
                    a7:86:1b:52:80:99:14:17:56:8f:2c:ef:5b:38:b3:
                    be:65:fe:5e:60:9a:60:0c:26:63:23:63:6f:10:02:
                    dd:2f:48:27:61:0a:ff:0e:c1:d4:72:5c:be:c9:f9:
                    0f:56:1a:ad:b0:a2:87:9c:d3:1d:3b:38:1a:31:d4:
                    b4:83:27:d0:e0:03:a8:1d:35:47:63:6d:1a:3e:34:
                    ed:96:89:ed:a3:06:50:6e:af:fb:6d:1b:a1:e3:76:
                    ea:ff:25:44:91:b2:37:ee:31:0a:79:4e:af:e3:50:
                    2d:cd:91:f8:3e:f5:75:85:b1:04:ec:55:96:7d:01:
                    e0:42:17:c0:79:1a:67:b5:d7:03:53:e6:2b:c0:88:
                    7f:3b:35:e6:11:2e:e4:fa:ab:a2:22:15:01:94:c4:
                    b3:7f:54:ab:84:bf:e0:6e:36:79:3e:71:7a:5b:84:
                    77:68:22:3f:fb:c1:be:19:a9:02:1a:96:98:e9:ae:
                    da:f4:57:72:ed:cd:7f:0e:72:51:8e:00:e1:70:cb:
                    2b:13:57:5a:0f:c3:04:df:6c:2f:d4:cf:63:0b:ce:
                    cd:e3:34:dd:bb:1c:7a:e5:0b:a5:2f:ee:18:c1:ef:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:08:BD:CC:EF:EE:48:BD:66:A6:BF:92:7F:E3:DF:51:15:1C:F5:38
            X509v3 Authority Key Identifier:
                keyid:4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:a2:b2:16:42:88:05:5e:c8:4c:4c:70:df:92:ce:60:c3:
         ed:90:fd:81:72:39:f4:3f:87:8d:0f:ff:c8:21:7f:a1:7a:66:
         13:fa:31:80:a4:fb:cd:cf:24:c0:42:0f:d8:33:5e:55:eb:1e:
         f4:2a:02:c3:6e:f8:e0:55:2a:03:7d:dd:95:fb:e9:62:e9:a1:
         82:15:4d:02:95:4f:70:3d:1e:9d:bd:72:29:f3:f5:fa:14:74:
         4f:4d:53:c0:71:66:95:ca:ac:5d:22:f1:93:f8:ac:94:c4:9c:
         5f:44:36:fe:a1:e0:8f:20:c0:f5:76:44:92:d4:63:a2:4a:bb:
         c5:d7:1f:94:cf:74:5f:37:55:04:4a:7e:7a:6f:43:cb:1c:ba:
         ca:65:37:44:e6:fe:d9:d3:6f:f4:a1:40:ca:b2:b0:fd:8f:b1:
         20:bc:55:44:3f:a6:bb:05:74:dd:73:2a:21:1d:6b:e0:91:1f:
         85:ac:f0:e9:07:63:b0:51:c5:b9:0b:4f:b5:a8:7b:bc:eb:e9:
         0b:70:51:76:f7:12:1e:de:19:52:9a:63:ec:ce:bf:50:00:4b:
         c9:e8:0a:d4:3c:8f:eb:b7:c4:81:75:6e:87:a5:dc:20:56:62:
         91:d9:04:37:d0:a4:56:d1:de:51:d4:2f:b7:87:e7:a4:e7:91:
         ac:9e:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:24:23 2025 by rpki-client