Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File:                     TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier:          gadxqlEuEJgyIuRlKtJhO+V95tXnyU75J2AdjnXLifQ=
Subject key identifier:   FF:F0:C3:F9:AB:06:46:B8:59:74:04:C9:55:40:25:2F:E8:CB:34:56
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer:       /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial:       0196B890B51CBA371E2ED85423F15E429C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number:          0779
Signing time:             Sat 10 May 2025 05:00:13 +0000
Manifest this update:     Sat 10 May 2025 05:00:13 +0000
Manifest next update:     Sun 11 May 2025 05:00:13 +0000
Files and hashes:         1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: bpbRGQ99gl3SvhDi2IT4IyicI7oq4fEJDS5HwNhQI7g=)
                          2: jkZUIqdvougoYWTFFIYTmQ_0c3I.roa (hash: FvJzMAch2URVowys51R40ZrFG4sKpVwuQwZnFuBLSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:90:b5:1c:ba:37:1e:2e:d8:54:23:f1:5e:42:9c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
        Validity
            Not Before: May 10 05:00:13 2025 GMT
            Not After : May 11 05:00:13 2025 GMT
        Subject: CN=fff0c3f9ab0646b8597404c95540252fe8cb3456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:e2:67:a6:1d:7a:0b:43:84:99:db:99:eb:
                    75:37:25:97:22:09:99:cb:de:ed:63:94:e8:a2:b3:
                    fc:e9:c3:9b:72:ef:eb:25:f2:2e:f3:a5:47:c8:d2:
                    f7:d9:11:84:90:b1:a5:c4:fe:43:7d:f8:38:d7:1b:
                    c4:58:23:f8:7f:ae:05:60:98:32:2b:d0:44:e8:c1:
                    f7:5f:d9:cf:2b:37:de:5d:ab:57:c4:3c:21:f9:3c:
                    b7:19:c1:44:1a:10:69:59:59:86:6f:dd:86:81:63:
                    99:74:b3:0f:4a:72:b7:20:7a:59:bd:05:77:56:6b:
                    ba:ac:ab:0e:24:c9:b4:fc:a5:c7:c0:26:06:ec:84:
                    e1:76:e0:27:f4:d9:5b:8a:47:03:ab:09:c7:8b:df:
                    2f:c7:fe:f6:b7:23:80:dd:44:bf:dc:74:66:6e:a2:
                    aa:91:46:0f:42:68:b1:b0:ac:74:d5:32:e4:3e:dc:
                    b0:cd:c6:1f:74:e4:bc:99:7a:a7:60:fa:f8:03:c9:
                    c3:c7:28:8d:2a:d3:ae:43:b9:d1:9e:79:57:1c:fa:
                    43:ba:a8:eb:96:f4:f2:6c:86:15:a5:91:8f:0c:ee:
                    f6:73:ec:30:75:b2:98:67:71:c8:64:b7:41:d9:e9:
                    3d:45:19:95:57:47:8c:55:bc:01:18:0c:af:93:75:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F0:C3:F9:AB:06:46:B8:59:74:04:C9:55:40:25:2F:E8:CB:34:56
            X509v3 Authority Key Identifier:
                keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2d:32:29:18:62:67:0d:95:15:52:86:29:c3:de:4a:b1:ad:
         9c:68:d1:50:eb:25:a8:23:b3:18:f8:ab:21:02:2c:47:53:37:
         b3:1c:30:3a:36:8f:e8:ca:57:d2:31:be:40:23:47:79:1d:5f:
         37:3b:80:79:3d:c7:26:b9:d8:a0:03:9f:24:14:33:6d:ed:c2:
         7f:4a:34:37:36:ff:a5:fc:2a:b5:4e:fb:77:78:17:d8:a0:9e:
         cb:d1:e1:84:42:db:15:d8:2e:e4:d9:e0:1c:3c:26:e3:fa:45:
         34:65:59:8f:63:99:81:bf:5b:26:19:19:21:d9:35:39:34:25:
         68:86:aa:b8:49:a7:a2:61:b1:b0:58:a5:87:7d:ea:90:f8:47:
         0f:58:05:f4:57:1e:90:7f:84:00:42:88:37:92:7a:1c:d2:d3:
         16:ad:85:a2:0a:01:54:a5:f8:0e:5b:54:17:18:c2:66:7c:c0:
         6c:ef:2e:3c:df:23:2c:2a:a4:17:29:bd:0b:c0:61:30:4f:26:
         4f:65:2c:59:a1:8c:be:de:91:82:d7:24:8c:bf:ea:7b:b9:10:
         a4:3f:6a:9a:97:de:b0:94:1a:53:b1:fa:fd:ec:d4:61:02:52:
         1b:f6:46:d1:b2:b0:32:bf:54:60:ad:bb:b9:23:21:68:b3:b5:
         3d:71:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:57:33 2025 by rpki-client