Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File:                     Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier:          7HStgFoualUFKEO4Oe5ivK0V8unN8XIKaVBRP5jHsL4=
Subject key identifier:   12:83:20:3F:18:DD:BA:05:27:48:B2:5E:A9:F8:A3:C0:86:5D:72:09
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer:       /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial:       0197B7456E12CA48B4169DE5AB0A551469B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number:          0FDC
Signing time:             Sat 28 Jun 2025 16:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:10 +0000
Files and hashes:         1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: mxZVKoZyMJsybq//9QR4yTiN222jPV/aYP2FeDwDdL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:6e:12:ca:48:b4:16:9d:e5:ab:0a:55:14:69:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
        Validity
            Not Before: Jun 28 16:01:10 2025 GMT
            Not After : Jun 29 16:01:10 2025 GMT
        Subject: CN=1283203f18ddba052748b25ea9f8a3c0865d7209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:76:27:6e:8f:87:ec:18:d5:f2:27:6b:c5:
                    36:5f:2a:dc:c0:dc:5f:72:fe:c5:7b:c3:ce:cd:b6:
                    5c:d4:43:0c:f6:f2:d3:09:1e:ee:e2:8f:55:0b:90:
                    a8:fc:87:fe:d3:35:23:28:dc:42:ee:e0:a1:53:cc:
                    d2:68:a0:23:94:f1:ff:d5:3d:83:7d:64:ef:68:58:
                    58:0b:cf:a6:0b:26:b0:d5:f1:4a:29:b8:64:d5:35:
                    c9:09:dd:fe:a9:95:25:8b:61:a3:53:79:0f:fb:a2:
                    3f:16:11:08:4a:b2:b6:5a:68:16:51:b0:f8:72:18:
                    4b:5a:e3:6b:c8:88:a1:a9:ea:09:87:bc:0b:61:84:
                    0f:65:07:22:dd:76:31:cd:c1:71:19:59:6b:0d:9e:
                    da:28:eb:68:fa:94:ab:c0:bb:93:a8:68:0f:a9:33:
                    5c:4e:49:6c:29:cf:50:e8:a0:77:e0:58:eb:bb:74:
                    00:16:51:f7:24:25:59:50:1a:85:88:e2:90:90:9c:
                    7b:15:e1:fb:45:e3:cb:3e:e5:06:37:d6:39:da:52:
                    a2:26:59:29:c4:07:1c:82:ee:bb:53:88:a2:74:e8:
                    f3:6f:99:d2:0f:7c:c5:01:8e:31:11:09:46:0a:0a:
                    70:04:05:33:af:a4:a7:e6:fc:5a:8d:ea:55:d9:bd:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:83:20:3F:18:DD:BA:05:27:48:B2:5E:A9:F8:A3:C0:86:5D:72:09
            X509v3 Authority Key Identifier:
                keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:54:a3:f1:57:ab:4d:7f:36:fb:f5:17:a0:00:1c:39:bb:
         a3:45:05:5a:43:4e:2d:ab:6a:67:db:9d:14:c3:3a:38:a9:d5:
         d7:a3:34:e1:4c:74:ca:2d:d4:50:1b:d4:ed:28:60:0f:ee:ec:
         90:f8:47:7b:7d:b3:50:86:2f:ef:5d:bf:e6:ab:c3:ee:d4:0e:
         38:59:dc:15:7c:04:9d:a4:21:cc:53:5b:ae:59:59:a1:e6:6b:
         ff:23:65:dd:86:a0:75:b7:97:1f:3d:d4:36:24:8d:9d:cf:8a:
         ac:87:ea:ec:9e:ea:23:10:9e:de:8e:d4:d4:a2:07:8a:c1:de:
         f9:76:d3:ca:95:0a:66:56:d9:4b:0b:55:cd:07:dd:98:59:f6:
         e3:ba:a6:dc:ce:3d:0f:31:d0:97:d9:8e:5f:78:c3:d2:5d:d9:
         73:ae:9f:f3:d5:0a:05:e0:47:28:08:76:9c:7d:69:c1:6b:e5:
         b9:33:bf:59:df:71:33:0a:43:83:32:7a:b0:92:9a:09:53:a1:
         46:d6:44:f9:71:87:be:b9:73:91:c2:a6:a5:66:56:bd:e7:e2:
         85:ee:44:97:79:b4:5e:44:51:ee:e5:31:e8:ce:06:e3:93:6d:
         0a:da:b5:40:3d:f2:8d:a2:c6:31:4c:7b:75:88:c0:28:b4:7e:
         b8:27:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:35 2025 by rpki-client