Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File:                     T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier:          Msrz9dxB9xe8D7trnKC2jddDkNByQBh3SYwh1nAuGYM=
Subject key identifier:   2B:C6:BF:E7:16:3C:78:55:A9:2A:2C:0C:C8:AD:2D:3E:47:67:AC:4D
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer:       /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial:       0197B632E60D148DAA2F2F159DFCE41E4946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number:          0557
Signing time:             Sat 28 Jun 2025 11:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:18 +0000
Files and hashes:         1: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: NUjEluaUTWXSThiCrw5+2d6HrpimFa5qlOFmUM2Fppw=)
                          2: q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa (hash: ol9vwFP2kye7kweAuJ86LI17vpYzbBP1gC/LI4vVUEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:e6:0d:14:8d:aa:2f:2f:15:9d:fc:e4:1e:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
        Validity
            Not Before: Jun 28 11:01:18 2025 GMT
            Not After : Jun 29 11:01:18 2025 GMT
        Subject: CN=2bc6bfe7163c7855a92a2c0cc8ad2d3e4767ac4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:72:4d:ed:46:ea:0e:3b:51:d9:39:03:96:2e:
                    c6:86:76:8e:f3:32:fd:8d:64:9c:95:f4:6c:c5:b6:
                    02:fe:ae:79:d8:e1:a4:d1:23:0f:fe:70:2e:8c:92:
                    d7:da:d6:f2:31:6f:6c:c2:43:a5:eb:67:ae:e1:57:
                    b6:50:31:fe:c4:de:c3:ed:71:53:98:57:75:b2:52:
                    fc:38:8d:79:0b:05:c0:36:07:77:a2:9b:2b:13:15:
                    cd:7c:85:a8:c4:46:d6:7e:04:06:21:88:ae:cb:3b:
                    a8:19:f0:f2:9c:8d:16:ea:f8:2b:75:8b:1f:5d:ef:
                    f3:f4:86:0c:5c:80:d1:c7:77:73:da:48:33:70:a2:
                    d8:93:25:6a:d5:ab:f7:9f:0e:82:ce:15:0d:d6:b4:
                    2a:fe:9e:65:6b:15:af:fe:6f:ea:30:bc:bf:9e:5e:
                    14:d2:7c:42:04:88:51:eb:da:cf:80:d6:73:12:bb:
                    c4:ea:b4:e6:bc:d3:82:8e:59:c5:2b:a4:ae:7b:13:
                    f3:2f:b4:9d:45:58:84:c1:42:3b:f1:d5:f2:06:fc:
                    0b:70:83:d6:9c:8a:d0:60:93:38:ac:62:e3:7d:c3:
                    d3:44:55:71:6f:f5:21:4f:61:72:43:4b:5f:06:b7:
                    22:54:71:fa:5e:14:d5:9c:3e:bb:b5:a6:b4:3b:0c:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:BF:E7:16:3C:78:55:A9:2A:2C:0C:C8:AD:2D:3E:47:67:AC:4D
            X509v3 Authority Key Identifier:
                keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:22:66:ac:6f:02:e8:cd:a5:ee:5a:5d:96:10:ca:22:ad:0f:
         5f:45:4e:de:df:d5:60:2a:0b:71:b4:dd:19:a2:ca:a3:dd:c1:
         ef:29:ea:f1:08:d2:b7:6f:52:75:33:d9:9b:68:08:a9:ac:f5:
         ff:aa:57:20:c6:da:d9:db:1f:ac:c8:fd:d1:5a:b2:a0:a3:63:
         9f:da:2d:77:31:a2:ca:7b:6e:a0:e7:56:c6:66:ee:ef:5a:3f:
         ce:98:87:d4:9f:24:9c:10:08:5d:32:73:81:fe:e3:65:cb:8c:
         0c:b4:cf:6b:1d:73:27:3d:e5:6d:97:de:17:5d:23:71:f8:e8:
         0d:e6:71:3c:04:0f:42:94:d2:76:88:48:42:3f:28:61:76:36:
         62:52:49:09:c6:fd:70:c8:b3:3f:db:d7:ae:e4:ca:18:d3:b2:
         c9:8f:a6:ab:ee:ce:de:cc:79:c1:ce:96:8b:f5:af:1c:20:9c:
         3c:c3:3e:df:79:60:e2:42:39:61:97:50:e8:98:8d:7a:e2:64:
         d5:ee:8c:eb:41:24:2f:53:08:95:63:44:84:df:e7:1a:66:b3:
         6b:67:8a:bb:2c:1b:51:17:36:eb:37:18:16:83:cd:5f:0b:35:
         93:ac:8a:58:90:74:02:a2:3f:3a:e2:7d:e4:9a:1f:69:08:97:
         40:5a:ab:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:45 2025 by rpki-client