Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File:                     a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier:          lJgZE6k1/koJYShdIiiyrVYIz/URuPMnpi5P+mWHGaw=
Subject key identifier:   F2:4E:F0:C7:EE:23:A2:8D:E3:6D:94:F7:E9:3C:82:1B:15:F4:10:B8
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer:       /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial:       0197B7B32D0B0CE14774114F13811C2DF4FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number:          0434
Signing time:             Sat 28 Jun 2025 18:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:02 +0000
Files and hashes:         1: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: 1ISYiXb5qF9MTxHwxFRsS7b2On+ux80E51+jcr5jbL4=)
                          2: br9nNW8HTMSPThu0IYs9YJPit9M.roa (hash: +GZtKTMjwkIHJlC7o9X+rvG+Xi3NBXRyc3GslA3d0UQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:2d:0b:0c:e1:47:74:11:4f:13:81:1c:2d:f4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
        Validity
            Not Before: Jun 28 18:01:02 2025 GMT
            Not After : Jun 29 18:01:02 2025 GMT
        Subject: CN=f24ef0c7ee23a28de36d94f7e93c821b15f410b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:47:df:3e:12:3f:62:45:84:f5:57:3f:a7:
                    15:ac:6c:66:55:d8:e4:fb:05:06:70:f1:90:7b:d5:
                    b7:95:12:5b:7b:bc:1f:28:c9:95:7d:aa:01:ce:11:
                    4b:6d:74:57:62:85:c3:d6:66:31:32:40:60:a4:f3:
                    0f:82:5c:a4:10:6c:e6:cd:ac:a2:18:bd:ad:e0:a0:
                    29:45:57:67:06:9c:3e:51:d6:51:a8:97:31:1e:2a:
                    b0:c3:95:06:39:95:41:88:f4:f9:d8:14:97:0d:fb:
                    37:14:80:10:f9:09:8c:db:4c:73:66:a7:21:d5:f6:
                    4d:29:f6:47:09:e4:89:7a:fc:45:da:a6:44:31:ec:
                    25:fa:c1:1f:f9:d0:43:f9:40:4c:ab:88:b4:23:1d:
                    b5:e9:d1:51:92:44:bd:c3:dc:3f:2a:18:d2:ce:cf:
                    01:51:23:01:56:90:84:8e:50:f6:77:93:c0:37:66:
                    52:19:9c:ce:39:f6:94:26:52:67:db:dd:9f:73:cf:
                    2f:64:10:31:76:20:f7:22:ec:fb:09:ab:cf:27:98:
                    b4:60:dd:70:46:8b:0f:37:ac:44:79:18:73:01:0f:
                    b3:67:e6:c4:f6:b4:36:7a:d6:1d:e2:78:20:e1:19:
                    a1:b7:6d:f5:f9:f2:c1:1c:c6:f0:8c:73:e0:0f:3b:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4E:F0:C7:EE:23:A2:8D:E3:6D:94:F7:E9:3C:82:1B:15:F4:10:B8
            X509v3 Authority Key Identifier:
                keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b9:bf:1d:a9:0a:87:59:91:66:6d:ec:62:2a:37:00:6a:d6:
         66:61:ff:48:ce:32:bd:6b:8d:2f:4b:8d:db:83:fc:bf:60:d6:
         5e:54:60:d9:c0:5c:e8:1a:5d:90:85:ee:3d:e2:d0:13:4c:c2:
         91:5b:6a:56:51:73:bd:c7:e4:ff:59:66:c5:1b:41:11:fb:79:
         79:3e:d1:0d:da:35:bf:22:87:47:b5:5c:37:63:b4:a3:93:88:
         79:d2:03:08:e3:71:3b:74:7a:4b:1f:ca:d5:01:c5:1e:1d:bc:
         60:69:b9:5f:5b:eb:be:e2:0e:dd:0a:fd:51:45:49:3c:68:b7:
         12:06:85:42:b6:ae:fe:a5:34:3e:3d:38:1e:46:70:f7:94:a6:
         8b:fd:59:90:eb:d7:60:19:a7:98:d6:b4:63:df:96:dc:d3:3a:
         1c:5b:0f:82:66:75:ca:d5:0f:b7:4b:80:94:da:10:b5:99:da:
         45:c0:3b:44:98:17:6c:66:40:6c:26:e8:e9:85:c1:ab:a6:6f:
         79:3b:94:82:db:54:d3:4c:f1:1c:f0:d2:92:af:a0:c5:71:93:
         ae:d2:97:40:62:2c:05:03:b5:32:93:d9:15:a1:f9:e2:56:5c:
         bb:f4:f2:67:dc:f6:44:73:b7:15:54:cf:b0:0c:2b:6f:2a:be:
         18:45:6d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:32 2025 by rpki-client