Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File:                     tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier:          5dHsBLqt7WE9K+q7oakHaGzCku5ZRvN4Pp1AgMhBKbE=
Subject key identifier:   51:89:4D:12:0A:00:CC:23:50:99:43:91:77:7C:83:9A:86:17:EC:CF
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer:       /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial:       0196A76642541581681662BF99A00668389B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number:          152A
Signing time:             Tue 06 May 2025 21:00:18 +0000
Manifest this update:     Tue 06 May 2025 21:00:18 +0000
Manifest next update:     Wed 07 May 2025 21:00:18 +0000
Files and hashes:         1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=)
                          2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: sjaWb8/op4zW8NUfZhKtHpT/CNZ3S07Lm6x0h+HFIug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:66:42:54:15:81:68:16:62:bf:99:a0:06:68:38:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
        Validity
            Not Before: May  6 21:00:18 2025 GMT
            Not After : May  7 21:00:18 2025 GMT
        Subject: CN=51894d120a00cc2350994391777c839a8617eccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3d:0b:3d:82:2c:4f:a3:28:65:e0:75:ce:66:
                    c8:ed:66:2b:ea:6f:86:a4:a1:33:cc:31:be:7e:72:
                    f9:d5:55:a1:74:37:cc:d6:97:33:cb:11:f5:28:56:
                    6c:c2:6b:bb:fb:5d:67:df:37:7f:59:16:32:c2:48:
                    4f:0b:9f:72:2c:34:22:12:fc:01:bb:8f:73:25:64:
                    03:95:b3:f6:bb:2d:28:57:ba:8e:25:d7:76:74:11:
                    5a:a0:11:ad:c1:f5:19:d0:38:c5:55:45:fd:c5:70:
                    f0:88:28:20:bc:8b:9a:49:52:5d:73:df:4f:c8:83:
                    76:28:38:22:56:f4:83:5a:52:88:04:3f:d3:a6:2a:
                    5a:b3:16:89:2e:04:b3:44:7d:98:53:35:48:81:2e:
                    c6:d5:03:9f:2f:6e:5e:e4:b8:31:e6:b4:f9:13:b7:
                    0e:d2:a0:41:25:7b:0d:dc:f2:8c:0c:8b:60:2d:ed:
                    5b:1d:c0:46:bc:74:1c:b1:7d:1a:71:fe:24:97:14:
                    d4:dd:35:b3:55:c1:4a:55:3b:52:ea:74:f7:14:54:
                    31:94:a7:32:b0:2c:9f:91:d2:ff:6e:ef:61:cb:e6:
                    46:e6:ad:d0:34:e9:e5:db:48:fc:1d:9d:41:d8:f8:
                    fc:33:e5:1a:3a:72:6d:e7:1a:64:6a:83:77:57:c7:
                    00:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:89:4D:12:0A:00:CC:23:50:99:43:91:77:7C:83:9A:86:17:EC:CF
            X509v3 Authority Key Identifier:
                keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d7:ee:b1:60:59:22:3d:98:e2:bd:b4:d5:30:92:8d:29:41:
         3a:d8:22:c6:0d:1b:24:e5:9b:35:7c:17:0e:ec:3b:dc:b0:31:
         88:65:0f:03:1c:39:a1:90:eb:1f:31:50:f7:c9:42:05:2a:04:
         b3:fa:90:e3:ec:59:8c:9c:8f:ba:ab:2c:17:25:9b:75:16:08:
         e6:71:b3:c0:a3:71:f7:3d:9f:ea:98:0c:a7:3f:68:4e:85:8e:
         83:0c:01:56:41:eb:c9:0d:43:5e:7f:6e:e3:0f:32:14:31:ad:
         99:a4:bd:9d:8a:0f:dc:30:c8:96:3c:eb:a3:d5:36:07:fb:68:
         1e:22:b6:b3:ec:35:e2:b3:d2:f4:c3:af:e2:72:7f:dd:a0:e9:
         72:28:29:9d:a2:fc:11:4a:a4:71:88:6b:5e:2f:ba:ae:f4:b9:
         9e:50:59:18:32:a3:e9:6c:7e:dd:b5:bf:69:1d:a0:18:77:71:
         f1:92:c1:10:43:1f:2b:8a:4a:9d:64:0d:dc:fc:7b:5b:78:da:
         d1:4c:f0:22:80:85:9a:14:36:2c:5a:07:9f:85:9f:38:63:dd:
         f1:01:33:80:e8:3a:b2:fe:b3:ac:34:c7:5f:b5:97:6f:59:a4:
         ad:3a:16:16:77:5a:09:92:93:fe:d2:a8:d4:ef:a5:6e:02:cc:
         84:2c:b1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:21:59 2025 by rpki-client