Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File:                     T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier:          meQ+FlQds4QOQUU3nR8FcL8wD1TIv1kjlU2/sbRce30=
Subject key identifier:   1E:6B:0C:56:5B:35:91:8C:82:70:8B:08:F9:6C:79:98:F0:30:70:0E
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer:       /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial:       0196C871BE86A18911280ABB830316FFC122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number:          1539
Signing time:             Tue 13 May 2025 07:00:19 +0000
Manifest this update:     Tue 13 May 2025 07:00:19 +0000
Manifest next update:     Wed 14 May 2025 07:00:19 +0000
Files and hashes:         1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: jY05mNIjj8A2p9qOb9lR7oG046PlSmxhtlWhetA5uYc=)
                          2: kfsN1HfyfK-NQ9iZIGxx8I0iebc.roa (hash: 471clsXqk9Nk68jCHR5a7ma3NzbA1DO/nClDnuoSJLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:71:be:86:a1:89:11:28:0a:bb:83:03:16:ff:c1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
        Validity
            Not Before: May 13 07:00:19 2025 GMT
            Not After : May 14 07:00:19 2025 GMT
        Subject: CN=1e6b0c565b35918c82708b08f96c7998f030700e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:e4:f6:79:55:0f:61:0e:1a:1e:0f:a1:00:
                    4b:de:0b:ad:65:c6:06:82:ca:fc:07:e3:92:91:c5:
                    4c:ad:1e:5b:9f:bb:51:85:57:df:36:f9:0d:2d:87:
                    dc:fb:4e:22:58:2b:46:1d:22:8b:51:a1:f8:8d:6c:
                    e0:0a:fe:4c:fd:f7:92:49:a7:eb:9b:09:c6:ef:f7:
                    e7:ca:53:04:79:87:a6:46:7a:06:16:28:99:6d:0a:
                    9e:e4:27:c7:0a:37:12:cd:6a:c9:b0:90:a8:b9:cc:
                    af:b8:af:bd:56:5b:b3:fc:05:77:09:f3:b4:99:ed:
                    76:5c:b7:28:fe:10:e8:dc:f9:29:c8:6f:24:db:28:
                    ff:7b:d7:e8:e0:a9:3d:36:7a:59:bc:59:02:3c:e9:
                    60:1b:cc:b6:9c:64:c3:bf:9a:79:f0:46:34:16:79:
                    bb:e2:fa:f9:3c:bf:9c:de:8b:45:2f:a0:d3:b4:14:
                    a2:c1:f4:c5:01:28:01:d4:f8:a9:6a:32:a2:f9:16:
                    a4:4e:40:ff:88:4c:91:b4:e7:95:09:e5:e3:0f:48:
                    90:3d:9d:6e:ba:0e:af:21:25:ba:29:3c:89:c3:ba:
                    f5:70:5d:c3:7e:2e:66:43:39:45:88:1d:0d:4f:7a:
                    0e:5d:f4:ad:34:0c:67:44:c8:47:9a:d0:3d:5e:06:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6B:0C:56:5B:35:91:8C:82:70:8B:08:F9:6C:79:98:F0:30:70:0E
            X509v3 Authority Key Identifier:
                keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cf:06:90:b6:7c:a6:21:df:90:4e:fd:a6:97:36:5e:d7:83:
         d0:37:b2:c7:9c:6e:99:26:b9:11:3f:51:a3:08:89:17:8b:63:
         a6:71:0d:16:a9:49:e9:61:64:4e:02:35:44:03:db:7f:4f:e9:
         b0:ea:3d:bd:9b:e5:69:db:9c:b6:53:4a:34:50:78:57:d9:6c:
         9d:6a:3e:67:1b:ac:86:88:66:9d:f4:01:26:47:d8:5b:25:a9:
         03:35:1b:91:94:bd:7f:5d:ce:86:b9:8f:a8:53:59:27:d0:aa:
         a0:3a:3c:f0:26:34:d7:59:ff:51:13:88:5f:52:10:25:97:4a:
         18:11:d0:b7:7e:a8:3d:c8:11:53:f4:f5:ff:93:39:8d:fa:dc:
         2d:3c:0f:f1:be:5d:1c:4e:8c:e8:f8:65:aa:24:b9:75:91:d9:
         46:d4:2d:e8:08:5b:51:b4:06:05:ee:67:ad:6a:79:ac:5c:05:
         3a:82:b4:9f:19:30:0c:f6:b8:f0:e6:12:77:38:b1:6c:59:88:
         96:6a:6e:b6:a2:0a:9a:ce:7a:33:e8:64:aa:aa:65:fc:8b:c6:
         30:d6:fe:c2:4c:c7:cc:3d:0e:43:bb:42:9b:61:a5:48:36:fb:
         f3:44:db:e9:88:35:38:42:f1:a8:4f:3c:27:8e:5f:35:35:db:
         8b:24:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:24:34 2025 by rpki-client