Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
File:                     tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json)
Hash identifier:          iNizI79991r9kcomww2BLM3EoE53NG4ztNkVVx5WRF8=
Subject key identifier:   36:58:05:6A:88:5C:87:D2:9F:C0:68:16:96:55:89:7D:C3:80:A1:99
Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
Certificate issuer:       /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Certificate serial:       0197CB030A01A4464694E0655341A06ABAD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
Manifest number:          0439
Signing time:             Wed 02 Jul 2025 12:01:03 +0000
Manifest this update:     Wed 02 Jul 2025 12:01:03 +0000
Manifest next update:     Thu 03 Jul 2025 12:01:03 +0000
Files and hashes:         1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: W2vZN+vaqArsCo1VUyBYb+c5sDIB89n/YhVWi/d0N6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:03:0a:01:a4:46:46:94:e0:65:53:41:a0:6a:ba:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
        Validity
            Not Before: Jul  2 12:01:03 2025 GMT
            Not After : Jul  3 12:01:03 2025 GMT
        Subject: CN=3658056a885c87d29fc068169655897dc380a199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:2f:ea:d5:6b:26:a5:24:a7:9f:1f:15:91:
                    0f:ae:40:b9:d1:4f:d2:cd:56:68:15:a6:77:c8:e0:
                    ee:08:51:11:1c:5a:1f:2a:b5:57:47:20:3e:48:f8:
                    06:56:2d:fd:0b:d8:66:35:72:be:57:02:5d:27:8e:
                    60:c3:c3:52:8a:77:8f:28:d2:f3:d5:92:c5:5e:3e:
                    b4:07:29:9d:c7:da:58:4c:af:6d:74:5f:6b:19:56:
                    ce:23:47:b2:dc:62:eb:63:6a:ae:e3:c4:f6:e0:9d:
                    94:9c:d9:24:cb:a2:63:b1:2f:96:14:fe:23:cb:f0:
                    db:b0:59:69:24:1e:09:37:31:bd:8f:7b:02:3f:0f:
                    5d:d5:19:b5:9b:3c:6d:f6:66:ee:0b:f5:88:1b:aa:
                    f2:de:a1:36:4f:78:36:b7:e2:ef:62:08:83:88:62:
                    24:ba:b5:57:86:0d:ac:16:f0:e0:94:e3:82:ba:9d:
                    7c:7c:e6:94:07:2a:ba:ae:ff:8d:47:ee:1a:03:c2:
                    9a:63:4e:bd:92:88:24:b3:07:39:30:71:2c:a6:0b:
                    83:e5:f8:f8:f3:c5:0c:5a:99:7e:c1:b5:96:b7:e1:
                    be:6b:ad:e7:86:bf:51:04:18:d9:64:ca:47:82:a6:
                    dc:fa:d3:ce:f5:e3:dc:75:02:4a:da:1a:37:4c:2d:
                    07:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:58:05:6A:88:5C:87:D2:9F:C0:68:16:96:55:89:7D:C3:80:A1:99
            X509v3 Authority Key Identifier:
                keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b2:6f:09:12:77:52:b1:1a:2a:77:43:ae:09:41:7f:55:cd:
         65:ca:19:51:c5:fc:8c:ee:7a:92:06:b7:31:9a:e3:e0:58:84:
         33:f8:45:0f:ad:c8:e4:e9:72:9b:6d:3e:62:8c:67:74:77:74:
         3b:c8:66:07:99:ae:7f:4f:63:75:11:fe:95:f2:a2:e8:01:0e:
         c8:95:62:2d:25:52:7e:8d:b6:86:33:11:5f:9a:7d:3d:48:0a:
         73:2f:f3:ca:9c:d7:03:23:e6:73:c9:b5:b9:cf:f5:a9:e1:41:
         66:d5:c1:39:72:18:de:31:89:92:4c:a5:4b:13:bc:f8:ee:9d:
         ba:03:f0:34:b6:9a:4d:8d:18:b6:8d:70:69:5c:cb:b6:25:8a:
         64:2a:be:e2:cf:23:db:61:6a:7c:69:4e:4b:2a:a2:8b:92:72:
         d8:37:b6:ad:e6:54:c5:8f:31:e3:22:27:db:4f:53:87:4d:55:
         13:4a:44:fe:28:95:b7:8d:ec:29:68:b0:9f:4c:89:7c:f8:a9:
         c8:27:5e:8b:dc:ae:97:83:d8:ae:0a:54:4d:d5:f7:6e:94:56:
         22:b2:57:4d:d5:1e:dc:0d:1b:aa:3f:8c:c6:0f:ae:2e:ec:71:
         4b:84:de:32:f8:17:2b:7d:10:29:ce:3a:96:4f:fd:7d:b6:a6:
         2b:72:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:35:25 2025 by rpki-client