Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
File:                     tvpArb6TaxhPhEWGoPkNEjC2hTc.mft (raw, json)
Hash identifier:          wUlPrxUkOoiSSu9aXFhV1Gptj0Pw0YlhljSR9bQdZW4=
Subject key identifier:   DB:8B:A7:34:AB:96:80:4F:C6:BF:0C:97:92:20:E3:81:DD:4F:6F:31
Authority key identifier: B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
Certificate issuer:       /CN=b6fa40adbe936b184f844586a0f90d1230b68537
Certificate serial:       0196BFA5869D3DAE4BE51C2A1030BFEDA85D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
Manifest number:          0D2A
Signing time:             Sun 11 May 2025 14:00:18 +0000
Manifest this update:     Sun 11 May 2025 14:00:18 +0000
Manifest next update:     Mon 12 May 2025 14:00:18 +0000
Files and hashes:         1: 7XTv9hOTaLviFUQwCXilEpYpbHU.roa (hash: 4LkrU5FXjLzeM7TTaFB6Rd3GTMio8T94peCl7zXgOHM=)
                          2: tvpArb6TaxhPhEWGoPkNEjC2hTc.crl (hash: N3nuVxjk3aHpI3eHRcd3XCXPkiZUaKrcKksLxLXw3S0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:a5:86:9d:3d:ae:4b:e5:1c:2a:10:30:bf:ed:a8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fa40adbe936b184f844586a0f90d1230b68537
        Validity
            Not Before: May 11 14:00:18 2025 GMT
            Not After : May 12 14:00:18 2025 GMT
        Subject: CN=db8ba734ab96804fc6bf0c979220e381dd4f6f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:6b:dc:2a:a3:f3:ff:ad:6e:d5:31:5f:6e:
                    ad:37:7d:8c:9a:d1:dc:57:a2:e1:55:4d:93:1e:58:
                    46:93:f2:8c:d2:ca:7f:64:24:1b:81:d2:cc:cd:22:
                    78:1e:fe:1c:62:d8:c7:b1:4f:76:9d:17:39:85:d2:
                    e5:e2:90:1b:c4:11:a4:37:94:29:29:9c:6f:6d:92:
                    ba:79:3b:92:de:80:cb:65:d8:4f:72:fa:41:fe:ab:
                    30:8f:70:45:c4:1d:03:bb:d7:ba:ef:8e:87:29:71:
                    c5:92:bf:5c:5b:03:0b:7e:85:77:52:48:86:1b:8d:
                    14:e5:1f:72:ed:16:47:bc:2b:6e:06:c6:ae:97:ab:
                    80:4a:4d:d5:f5:04:19:ee:67:ec:d6:c6:a6:13:93:
                    80:f6:62:1c:bf:6c:ed:21:8a:07:5d:ca:e1:dd:2d:
                    70:8a:5a:9a:0b:28:a5:7d:64:3f:fd:59:25:cd:32:
                    85:a5:6c:97:da:99:29:ff:fb:cf:30:f2:dc:d8:00:
                    a6:2f:36:3b:5e:f6:03:90:15:b7:27:1d:6c:8e:01:
                    3e:41:a0:41:05:c5:af:db:c9:d3:d3:51:f2:b2:96:
                    27:18:a4:3e:1c:87:b5:72:76:e9:1c:33:68:77:43:
                    74:2d:e7:d5:0d:df:76:98:bc:86:39:07:9f:b8:8a:
                    8a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8B:A7:34:AB:96:80:4F:C6:BF:0C:97:92:20:E3:81:DD:4F:6F:31
            X509v3 Authority Key Identifier:
                keyid:B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:84:9f:89:1b:fe:37:6d:0f:f3:9e:98:39:d8:7e:1b:d6:0e:
         6e:3d:90:84:7b:f1:1c:04:37:00:a4:39:ee:6f:b8:5e:89:5d:
         c6:9d:97:05:1d:fd:6a:1e:1a:e8:cd:41:61:6f:a7:0b:19:a9:
         98:81:21:7b:91:9c:7d:60:78:2b:79:ff:e1:76:ed:38:4b:56:
         a5:d0:6e:90:bd:b2:53:92:11:f3:eb:9f:84:e1:f7:01:d3:99:
         f2:e3:ad:44:7f:73:c6:f3:16:47:10:ca:f5:34:dc:e5:e3:8b:
         c4:14:e4:4d:0a:71:26:92:54:01:a5:33:e5:c5:0e:44:27:96:
         0b:d5:43:dd:b3:b8:b0:c0:90:85:eb:cf:39:93:70:e5:7f:d1:
         ff:9f:2d:4a:71:dd:f0:b5:0a:5c:fc:78:ca:20:62:27:ca:a1:
         97:db:3b:61:49:48:9e:b3:00:06:aa:80:b8:34:6f:06:d3:2e:
         ec:6b:19:fc:65:33:71:0c:53:a7:3f:d5:63:42:74:29:1b:2f:
         3e:0c:dc:6e:99:5d:e2:6b:b4:33:d4:89:a5:b6:2b:d0:4e:cc:
         94:05:9c:47:e0:9e:94:7f:ac:b1:20:3a:46:ab:af:68:f1:ed:
         1d:fe:d8:d3:2a:28:a0:76:d0:fd:c6:29:11:40:fd:df:a9:a2:
         59:28:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:25:59 2025 by rpki-client