Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
File:                     T0Es0mmU-vYJva1ONdV2wsrkZVU.mft (raw, json)
Hash identifier:          +O1CD5x85+wfx+5X+sulNdR0GMIvi7VqAeUKX9D4IgY=
Subject key identifier:   27:68:55:D4:F6:A5:A3:D1:10:8C:44:76:E9:89:91:B8:90:8C:2E:FA
Authority key identifier: 4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
Certificate issuer:       /CN=4f412cd26994faf609bdad4e35d576c2cae46555
Certificate serial:       0197B88F26CB818601108FB5B9DF0E443DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 22:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:18 +0000
Files and hashes:         1: T0Es0mmU-vYJva1ONdV2wsrkZVU.crl (hash: cHObpBFEmLcHQT/wMR2DyDLTgQVVxGKi0mfBXxGV+4s=)
                          2: aNuMhZPoB5D8geUtVgUfLtn3hcA.roa (hash: kR0Yb3G1j8U1LWYfw43kMYf1t4xNNQqgRVkQzHfelvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:26:cb:81:86:01:10:8f:b5:b9:df:0e:44:3d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f412cd26994faf609bdad4e35d576c2cae46555
        Validity
            Not Before: Jun 28 22:01:18 2025 GMT
            Not After : Jun 29 22:01:18 2025 GMT
        Subject: CN=276855d4f6a5a3d1108c4476e98991b8908c2efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:c2:ad:3e:18:ce:af:ab:ed:a3:ff:d6:e1:
                    ba:51:51:d6:99:ed:d2:22:94:81:67:30:da:fa:e4:
                    c8:02:ea:3c:dd:f1:11:6f:b0:95:55:df:22:76:4f:
                    98:3f:b1:b9:76:bc:a8:5e:10:20:e7:53:44:97:ba:
                    37:40:7a:5c:4d:1b:80:0b:88:6b:33:23:2b:64:43:
                    31:46:f0:c2:33:37:a5:0a:e3:95:1f:6c:7f:ae:17:
                    89:a6:10:90:3f:c7:71:2f:4c:07:e6:8e:82:fa:83:
                    dd:20:4d:be:5a:8a:c7:4e:0c:bd:cc:99:93:75:1d:
                    52:f8:e5:4b:0f:50:ac:f1:41:38:a1:19:54:10:6f:
                    47:ff:a9:1a:da:77:d5:40:36:15:89:f2:df:39:f8:
                    48:9c:36:2b:ac:12:bd:55:63:c0:e5:44:5b:c8:84:
                    46:c5:76:70:a5:b4:36:60:21:1e:02:0a:2a:a9:b0:
                    40:1e:0d:b9:10:d4:80:9b:46:93:05:3c:b7:10:c4:
                    af:74:bd:a6:65:eb:43:f9:0f:ef:36:96:58:c8:18:
                    ba:a9:16:d5:f5:fb:e1:fa:6c:ee:3f:e2:09:10:1c:
                    e4:cc:6e:34:73:fe:f0:6c:41:75:35:54:03:be:74:
                    44:35:a0:1a:26:8f:54:97:cd:f9:87:b7:ee:1b:f2:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:55:D4:F6:A5:A3:D1:10:8C:44:76:E9:89:91:B8:90:8C:2E:FA
            X509v3 Authority Key Identifier:
                keyid:4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3e:a0:32:cf:dd:2b:58:3e:7b:4b:48:3e:24:58:ae:b1:c2:
         5d:fc:54:93:61:a6:05:58:aa:6a:29:61:2b:c6:2a:44:dc:e4:
         4a:33:0b:3f:67:02:62:3d:ab:8d:8c:61:3d:32:78:c8:c5:5f:
         fb:28:d8:03:60:54:06:04:21:72:d1:06:5f:51:19:3a:0d:c5:
         9e:21:12:1d:de:9e:d4:a3:2b:98:ba:c7:e1:7a:ca:c7:62:e8:
         c7:85:17:0e:e6:1b:7e:3d:ad:89:40:25:bf:a8:71:d3:ad:da:
         64:9e:81:c5:6a:44:11:2c:c8:9c:e7:67:c1:4a:b7:0c:58:db:
         b9:9f:a1:ee:7e:42:f0:b4:e3:bb:23:5b:fe:c0:34:1a:4e:37:
         35:48:b0:bb:ee:e7:c1:bc:e9:f6:80:fd:30:c5:12:cf:a9:06:
         95:fd:1a:32:56:79:cd:71:31:90:bc:4a:9a:f0:ef:e4:dd:a5:
         13:7b:eb:ee:5a:af:6a:03:e2:b1:53:4f:38:8e:a2:ca:06:e5:
         81:ee:7d:21:cf:44:c0:b7:0b:3c:85:ee:1d:9d:42:dc:58:de:
         1d:11:bd:7a:ff:9d:fa:bc:f2:2b:de:8e:09:2f:18:16:93:50:
         00:64:1c:c0:73:ad:51:14:a7:13:84:5a:f6:04:0c:d4:55:79:
         cc:a2:66:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:33:11 2025 by rpki-client