Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File:                     a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier:          ouijGsrog587cP3Y0Wdm/k9zUVxNWRI15JAwYk2It2w=
Subject key identifier:   92:02:D3:A6:39:48:B8:A3:47:A7:4D:5C:FE:96:10:65:90:1D:77:2C
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer:       /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial:       0196BE92CEC32FAB15B39AE08FB97D293012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number:          03B3
Signing time:             Sun 11 May 2025 09:00:14 +0000
Manifest this update:     Sun 11 May 2025 09:00:14 +0000
Manifest next update:     Mon 12 May 2025 09:00:14 +0000
Files and hashes:         1: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: mHRNHa0Wv+CZ3IEIj27+bca03dy7geEDLvndepIDfdU=)
                          2: br9nNW8HTMSPThu0IYs9YJPit9M.roa (hash: +GZtKTMjwkIHJlC7o9X+rvG+Xi3NBXRyc3GslA3d0UQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:92:ce:c3:2f:ab:15:b3:9a:e0:8f:b9:7d:29:30:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
        Validity
            Not Before: May 11 09:00:14 2025 GMT
            Not After : May 12 09:00:14 2025 GMT
        Subject: CN=9202d3a63948b8a347a74d5cfe961065901d772c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:ce:c6:cb:4b:92:8b:23:b7:14:bc:8f:79:
                    44:1b:f4:b2:0a:99:ee:46:7c:e1:a9:3b:cb:dc:fa:
                    7f:fa:3b:ec:f3:e8:6d:6c:c8:41:95:94:7b:10:42:
                    cb:77:aa:00:a8:83:4f:03:d2:55:0c:f5:1d:af:06:
                    0b:95:74:95:5c:34:9b:f3:52:5a:d6:05:29:28:3f:
                    2d:55:1c:e9:a4:40:17:0a:21:d7:00:aa:a2:a4:b5:
                    cf:a7:2d:17:ac:1a:b4:f7:b5:44:0c:6d:32:b5:ba:
                    e0:49:44:67:43:96:ea:bf:fe:b4:9b:8c:99:83:84:
                    8b:f0:2c:25:e6:54:dd:44:5b:8a:1c:b4:7e:58:3d:
                    70:d5:c9:4b:85:8b:2f:54:a8:5c:4e:7c:43:e3:74:
                    1c:03:62:75:1e:3b:7c:7f:f6:f0:9a:80:b0:5c:30:
                    5b:d3:d2:e1:5a:7f:96:6a:a9:4b:1f:3a:4e:4b:e6:
                    63:3f:b8:25:3c:36:b0:1d:11:58:15:95:45:76:3e:
                    53:2b:74:56:8a:35:b7:f0:8c:9c:4e:96:bc:3b:33:
                    d2:c4:1d:9a:0b:1e:45:a8:2d:a0:47:6a:96:d7:15:
                    a3:19:22:53:63:18:34:e2:8a:c2:0b:03:19:80:1b:
                    93:e6:57:e4:7c:d7:68:ce:48:9a:46:c6:a7:3c:b8:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:02:D3:A6:39:48:B8:A3:47:A7:4D:5C:FE:96:10:65:90:1D:77:2C
            X509v3 Authority Key Identifier:
                keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d1:69:e6:ec:f0:1f:bf:a2:6c:7d:d7:7f:88:83:b8:16:72:
         03:e0:73:92:dd:df:07:f9:f5:6f:fb:f9:ef:df:42:61:e1:85:
         6a:75:ad:87:98:15:a7:a7:23:04:d5:75:bd:7a:3f:f7:b0:2e:
         a4:7a:ce:38:49:ef:1c:dd:86:31:b6:69:c1:a8:f5:bf:67:39:
         c5:bb:d9:0e:a1:e3:3e:0c:13:c5:15:79:ac:62:1d:c6:53:46:
         e5:d8:23:90:7f:0e:8a:3b:b2:67:6f:05:e4:5a:a0:2c:2c:b9:
         cb:37:f2:17:25:d4:0a:a1:6c:4d:5d:0e:4b:61:70:e8:17:27:
         82:a9:b8:19:fa:41:c7:94:0b:58:92:07:74:1f:e7:6d:4d:a2:
         77:97:14:06:69:cd:d8:e2:98:5d:1e:87:e1:db:fa:dc:82:55:
         ee:93:6d:f5:5f:29:3f:50:6d:cf:b8:37:af:61:fd:ea:b4:49:
         99:55:4e:0d:2f:af:80:87:48:05:04:a2:98:98:3b:0e:74:b5:
         c2:86:ab:1d:8f:97:8a:ef:ed:06:57:60:88:78:13:cc:04:10:
         80:47:2b:5c:40:d3:86:9b:f0:b6:c1:e9:80:92:39:06:a7:79:
         d4:b8:b3:b8:ad:d9:3e:8e:31:06:a4:48:b3:b5:46:b2:fa:5c:
         62:47:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:03:34 2025 by rpki-client