Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
File:                     TXfM16lEFd_GjMyodOlMLowiIC0.mft (raw, json)
Hash identifier:          cewIlxyuOuH/BQTzwPr+kbtRINrTCB6jHB/kZzKY6l8=
Subject key identifier:   E3:E3:D4:9B:A0:D9:73:FD:AA:64:B5:FF:65:FF:62:D8:A6:35:07:AD
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Certificate issuer:       /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial:       0197B8C5AC193E9A56494390473F69A346F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 23:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 23:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 23:00:51 +0000
Files and hashes:         1: JgzpPohbfVvMIcKTpIBaDGYyTbE.roa (hash: G+qmeF9FhBKU4LJ3ZbSw7iLKTabN9a1acVHHKbI2D6M=)
                          2: TXfM16lEFd_GjMyodOlMLowiIC0.crl (hash: UgDhD5ewBhv1DDFFo+AnQ2zymJbyJiC9W2JnmqsxXlk=)
                          3: WlzyMJALtky3UfCL3LeynZJn274.roa (hash: cFugyqePAm3Z5xloXfQbWqCEPWkm4mnJFuRR8A9Tn3Q=)
                          4: mn0eBW57NQIPiKHlN3VjBOCrBwM.roa (hash: Q9KukE1TFuxZdPyKM+3q4VKMJP4x9GkCYDXI40jMHbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:ac:19:3e:9a:56:49:43:90:47:3f:69:a3:46:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
        Validity
            Not Before: Jun 28 23:00:51 2025 GMT
            Not After : Jun 29 23:00:51 2025 GMT
        Subject: CN=e3e3d49ba0d973fdaa64b5ff65ff62d8a63507ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:26:1b:2e:31:31:dd:f2:78:03:ad:36:12:
                    ea:2f:37:1d:21:39:74:68:41:87:dc:39:2b:5e:12:
                    e2:5f:b2:3a:e5:19:dc:2e:e3:33:1c:02:9d:dc:b7:
                    8d:eb:84:be:31:6e:92:7f:30:f5:f6:6b:84:59:4d:
                    5a:d1:25:7a:75:1f:c4:49:4e:31:c2:0a:d7:71:d8:
                    b6:71:02:70:16:c7:be:b5:2c:33:fe:f2:f0:a7:83:
                    ad:61:0b:cb:ec:28:b8:a4:97:00:6c:83:ce:3d:37:
                    54:d4:a0:c4:54:4c:08:ba:a3:3e:cc:08:f5:3e:1e:
                    ce:f5:bc:6d:d2:27:d3:40:2e:f1:7e:63:f0:a3:3e:
                    0c:7c:3b:56:78:8a:08:29:e3:d3:47:fa:b7:bb:d5:
                    ac:b6:0f:17:25:2d:c3:6d:bf:ee:46:7a:b0:de:c3:
                    44:8b:5d:38:dc:1b:2b:71:8f:90:cc:6d:9c:a9:ff:
                    45:b1:ea:9a:b7:9b:ec:c2:ba:a5:69:bd:33:d1:97:
                    c8:99:e5:e0:12:f1:1e:bb:09:04:25:e0:8c:bb:ce:
                    d4:c9:d4:26:6a:65:f8:0b:bf:92:06:83:51:d3:ec:
                    a4:25:f2:47:5c:24:aa:72:e4:3f:e2:bb:bb:e1:8b:
                    49:a3:6d:e5:89:a4:e7:e3:bc:a2:54:dd:8b:6c:b6:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E3:D4:9B:A0:D9:73:FD:AA:64:B5:FF:65:FF:62:D8:A6:35:07:AD
            X509v3 Authority Key Identifier:
                keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:8d:ea:34:77:11:cc:7d:1f:3a:23:d2:c7:96:b1:e9:d9:
         2c:b2:a2:e1:ec:18:84:e1:68:0d:55:ee:b9:e2:66:95:ac:85:
         7f:56:31:16:b9:b9:32:95:19:0a:3d:9e:4e:76:0a:40:83:ac:
         43:4c:e5:e9:81:a8:03:e8:5a:9f:3b:41:12:4e:a0:36:91:5b:
         2b:ea:a9:19:80:d9:a6:54:82:af:33:6d:59:1d:4c:da:ee:62:
         05:b8:c2:06:5e:aa:c2:fe:08:c8:85:49:44:61:70:2a:bf:98:
         5e:67:ee:8f:9c:35:59:bc:c6:88:58:16:d6:3b:9d:e1:dd:54:
         4c:cb:d2:0f:d0:08:1d:40:2b:6b:2a:21:f8:11:a8:08:8f:58:
         a4:c2:84:84:c8:44:13:30:f4:5d:88:00:94:e5:25:05:d3:f1:
         66:19:e7:1d:20:ff:3e:1e:b4:81:d0:11:45:fe:b7:f3:a0:8b:
         8a:d0:68:6a:6c:6f:93:70:2c:d8:06:08:71:03:3f:db:e2:ac:
         b4:ad:83:f8:20:d9:27:17:d3:11:ec:ed:d0:06:3f:30:cc:d3:
         f0:fa:d0:3b:d7:61:ee:21:d4:c9:cb:21:ab:58:00:37:5a:5e:
         2f:77:d4:3c:5f:b8:da:11:a6:a3:d0:2e:0a:6d:dc:e7:2d:12:
         e8:25:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:36:24 2025 by rpki-client