Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File:                     TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier:          03IFm2LlPt1z5yEeR5qIEJtQS8yl0rc0dha72LWd4oM=
Subject key identifier:   09:35:85:8D:2F:38:98:C9:8D:93:3C:96:B1:81:5F:76:EC:58:0C:B2
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer:       /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial:       0197B6A108B85432023183F4BA8C62564795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number:          110C
Signing time:             Sat 28 Jun 2025 13:01:36 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:36 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:36 +0000
Files and hashes:         1: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (hash: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=)
                          2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: q76JNhhxK97VticdJFp+fJnaazqiqX91BA3L0zn5NaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:08:b8:54:32:02:31:83:f4:ba:8c:62:56:47:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
        Validity
            Not Before: Jun 28 13:01:36 2025 GMT
            Not After : Jun 29 13:01:36 2025 GMT
        Subject: CN=0935858d2f3898c98d933c96b1815f76ec580cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:42:a9:8d:6a:ec:78:76:ca:2b:fe:0e:35:7b:
                    e4:e8:da:52:41:25:03:9d:1a:d2:0c:63:ed:80:d4:
                    a9:ea:e4:f7:03:83:21:4e:cf:a8:19:b1:ee:b0:71:
                    90:71:5a:47:9c:b6:91:b9:b0:25:7a:0f:af:ff:bb:
                    d6:bc:d1:15:7b:dc:de:18:8b:aa:20:c1:2d:e9:b1:
                    fc:13:ad:5f:38:28:34:0b:fd:d9:3c:e7:ac:23:ea:
                    6b:d7:2e:a6:52:ef:3d:ab:08:b2:c8:e2:d1:3a:39:
                    a6:2a:04:86:ed:c6:b7:89:ce:cc:ae:75:85:2c:2e:
                    5c:fb:ff:e0:13:78:d3:07:57:7f:f1:9c:ff:cb:6f:
                    58:20:a9:ef:ca:33:ea:c2:8c:be:78:87:04:eb:6a:
                    07:c5:d6:ca:0f:9a:57:24:20:4c:10:65:54:2f:fe:
                    48:6c:53:bb:be:b2:2b:8b:9d:fb:cd:8f:ee:4f:fe:
                    71:5b:f5:e9:94:4b:53:d0:ca:ad:d6:f5:11:32:90:
                    e2:4a:18:61:39:ed:d5:2e:a6:9e:e3:55:a2:a6:67:
                    68:49:8f:67:0f:18:ee:4a:68:3e:0f:76:f0:33:47:
                    c4:a7:c7:8e:83:22:49:f8:73:1a:53:2f:d6:d8:d8:
                    76:52:58:9c:e8:41:70:7a:9f:c9:d7:85:33:b3:db:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:35:85:8D:2F:38:98:C9:8D:93:3C:96:B1:81:5F:76:EC:58:0C:B2
            X509v3 Authority Key Identifier:
                keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:2c:64:6d:a4:7d:c7:b8:10:3d:d2:97:33:21:35:af:82:fc:
         b3:d9:25:eb:cf:b2:6d:20:22:ee:8f:9c:65:b4:01:9c:5e:03:
         92:54:1f:2f:4b:7c:ca:e6:e9:fe:f4:4c:0c:6a:0d:68:f6:f8:
         b2:a8:33:2e:33:68:02:f8:a3:fd:84:da:ed:07:56:79:d0:b2:
         97:80:16:e0:27:59:c7:98:22:a9:88:4c:fa:8a:75:4d:dd:b6:
         dc:75:aa:50:62:42:18:61:17:d3:81:52:51:89:52:1c:ef:e6:
         0c:c5:70:1b:2e:3e:98:8e:49:c2:30:9c:0f:2d:c6:d8:df:4c:
         2d:34:37:0e:3c:57:47:db:9d:2b:bf:32:64:e0:d3:c7:ef:21:
         39:c3:31:a6:ca:15:9a:59:0b:01:f5:67:22:f2:7b:cb:29:b0:
         df:43:0f:a8:51:ea:59:0e:2c:5c:56:16:0f:7b:57:b9:27:6a:
         f4:d9:17:50:66:77:15:58:ed:b2:da:0d:6f:81:eb:46:81:aa:
         74:c8:0d:f7:38:44:80:fc:78:56:1d:89:85:1b:cc:5c:a4:a6:
         62:f6:b7:14:04:b0:a4:da:eb:7b:96:ce:44:67:ed:3b:6b:1d:
         46:a3:ba:7d:d5:bf:b8:b1:b3:1c:f3:24:48:2a:01:87:3b:fa:
         9c:5b:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:41 2025 by rpki-client