Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
File:                     tvpArb6TaxhPhEWGoPkNEjC2hTc.mft (raw, json)
Hash identifier:          FfjUXNd9Yp2EJfFRghaJmAAK51Bu/9ozPBHr7Nw8qMU=
Subject key identifier:   7F:E4:8F:44:3A:0A:0B:73:86:D4:97:CD:F6:B4:A4:88:ED:8A:65:E3
Authority key identifier: B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
Certificate issuer:       /CN=b6fa40adbe936b184f844586a0f90d1230b68537
Certificate serial:       0197CA27603A8BC53AB4E0E21DB73F055B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
Manifest number:          0DB4
Signing time:             Wed 02 Jul 2025 08:01:07 +0000
Manifest this update:     Wed 02 Jul 2025 08:01:07 +0000
Manifest next update:     Thu 03 Jul 2025 08:01:07 +0000
Files and hashes:         1: 7XTv9hOTaLviFUQwCXilEpYpbHU.roa (hash: 4LkrU5FXjLzeM7TTaFB6Rd3GTMio8T94peCl7zXgOHM=)
                          2: tvpArb6TaxhPhEWGoPkNEjC2hTc.crl (hash: kAh3hEM369jua5YQLIIU5sU+zoflJcVkiguFPtqQG38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:27:60:3a:8b:c5:3a:b4:e0:e2:1d:b7:3f:05:5b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fa40adbe936b184f844586a0f90d1230b68537
        Validity
            Not Before: Jul  2 08:01:07 2025 GMT
            Not After : Jul  3 08:01:07 2025 GMT
        Subject: CN=7fe48f443a0a0b7386d497cdf6b4a488ed8a65e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:41:fb:09:a3:91:83:46:45:79:6b:2e:5d:
                    c0:9e:18:6c:96:a8:3e:98:e6:53:f4:0a:71:99:53:
                    b9:c2:25:d7:52:78:b9:d5:47:5f:bf:66:54:7d:9e:
                    19:28:46:cd:40:ae:dc:3c:6c:f2:4b:01:2c:5a:ed:
                    ba:10:d8:6a:88:a6:30:66:ed:e2:4e:07:36:8e:02:
                    74:f6:01:16:e2:6c:bd:cd:fb:fa:3f:5b:7f:00:70:
                    4a:bd:3a:3c:03:2f:b4:07:cb:3b:b1:c6:51:07:b5:
                    5a:75:89:ab:6e:b3:a2:fb:7e:f0:c1:a0:19:2e:99:
                    97:6d:76:9f:46:2e:2c:9c:8d:e6:3e:3f:b1:a8:e0:
                    06:30:8d:6b:05:e9:ea:d5:12:57:af:2f:0f:aa:18:
                    a3:61:21:e9:a3:ee:77:a2:ed:d1:43:4e:04:f3:4d:
                    31:1f:92:ac:6b:25:b4:2e:cc:ec:4c:c0:55:0a:fa:
                    ab:d0:32:ed:32:02:1f:2c:e4:b7:bb:e6:b7:2e:d1:
                    8c:95:ae:f6:29:43:40:9c:63:85:7b:38:bc:2f:03:
                    82:58:73:e6:be:2c:1c:a5:16:25:5d:f5:5d:70:f0:
                    86:fc:e7:d6:f5:7c:5d:a3:79:6b:85:1f:bb:67:0f:
                    75:30:1b:a4:5f:bc:c6:01:d5:85:3d:94:1b:07:60:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E4:8F:44:3A:0A:0B:73:86:D4:97:CD:F6:B4:A4:88:ED:8A:65:E3
            X509v3 Authority Key Identifier:
                keyid:B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:6e:85:82:df:2b:63:44:fe:bd:9a:f3:e4:3f:eb:44:cc:
         07:ef:17:dc:be:2a:63:18:27:5b:ee:bd:05:36:3d:d5:85:3b:
         18:90:4e:5b:bc:68:45:fe:55:d7:a4:93:e5:41:d4:1e:93:be:
         39:23:21:f0:51:8d:cc:f8:e9:9d:23:26:24:06:00:b9:a2:5d:
         84:19:c0:dc:ee:16:ee:65:11:cb:aa:ac:cd:e3:41:80:f5:be:
         72:80:78:3f:ab:e7:47:81:38:c5:57:37:82:d0:92:c1:a1:7b:
         99:8b:59:4f:7e:6f:7d:ee:67:eb:9c:ac:a8:02:6d:a8:b1:0c:
         5c:91:6b:f3:53:0f:cc:8a:da:85:2f:af:6f:42:67:62:b2:91:
         ce:86:db:d7:6c:68:c5:6a:76:b4:48:65:6d:ba:d9:26:07:84:
         34:90:16:d6:97:81:18:dc:8b:41:27:95:71:88:0b:7d:81:f2:
         81:c5:a1:ba:aa:57:d3:77:49:58:25:67:ec:bc:30:e6:87:3f:
         a9:f1:e8:4e:96:aa:7b:95:bc:38:e4:0b:22:9f:0d:7c:3e:c3:
         e0:22:34:87:fd:7e:20:ed:d9:d2:b4:f5:77:91:f6:7b:70:3c:
         87:be:dd:f3:51:41:43:6d:78:fb:2b:19:9d:49:cb:b2:a8:d4:
         13:44:db:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKJ2A6i8U6tODiHbc/BVs/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZmE0MGFkYmU5MzZiMTg0Zjg0NDU4NmEwZjkwZDEyMzBi
Njg1MzcwHhcNMjUwNzAyMDgwMTA3WhcNMjUwNzAzMDgwMTA3WjAzMTEwLwYDVQQD
Eyg3ZmU0OGY0NDNhMGEwYjczODZkNDk3Y2RmNmI0YTQ4OGVkOGE2NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldtB+wmjkYNGRXlrLl3Anhhslqg+
mOZT9ApxmVO5wiXXUni51Udfv2ZUfZ4ZKEbNQK7cPGzySwEsWu26ENhqiKYwZu3i
Tgc2jgJ09gEW4my9zfv6P1t/AHBKvTo8Ay+0B8s7scZRB7VadYmrbrOi+37wwaAZ
LpmXbXafRi4snI3mPj+xqOAGMI1rBenq1RJXry8PqhijYSHpo+53ou3RQ04E800x
H5KsayW0LszsTMBVCvqr0DLtMgIfLOS3u+a3LtGMla72KUNAnGOFezi8LwOCWHPm
viwcpRYlXfVdcPCG/OfW9Xxdo3lrhR+7Zw91MBukX7zGAdWFPZQbB2C85QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/kj0Q6CgtzhtSXzfa0pIjtimXjMB8GA1UdIwQY
MBaAFLb6QK2+k2sYT4RFhqD5DRIwtoU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZwQXJiNlRheGhQaEVXR29Qa05FakMyaFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWIxYjItZTNjMy00MTNkLWExNjQt
ODBkNDc4MjQzN2ZmLzEvdHZwQXJiNlRheGhQaEVXR29Qa05FakMyaFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lZWIxYjItZTNjMy00MTNkLWExNjQtODBkNDc4MjQzN2Zm
LzEvdHZwQXJiNlRheGhQaEVXR29Qa05FakMyaFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASY9uhYLf
K2NE/r2a8+Q/60TMB+8X3L4qYxgnW+69BTY91YU7GJBOW7xoRf5V16ST5UHUHpO+
OSMh8FGNzPjpnSMmJAYAuaJdhBnA3O4W7mURy6qszeNBgPW+coB4P6vnR4E4xVc3
gtCSwaF7mYtZT35vfe5n65ysqAJtqLEMXJFr81MPzIrahS+vb0JnYrKRzobb12xo
xWp2tEhlbbrZJgeENJAW1peBGNyLQSeVcYgLfYHygcWhuqpX03dJWCVn7Lww5oc/
qfHoTpaqe5W8OOQLIp8NfD7D4CI0h/1+IO3Z0rT1d5H2e3A8h77d81FBQ214+ysZ
nUnLsqjUE0TbBA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:54:52 2025 by rpki-client