Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
File:                     TRCb5Q1A4ys9UW_B63LqsyxeC84.mft (raw, json)
Hash identifier:          SjAgufte3qU1XuQdHvu6GtcRHT552cWaAKqcVn02otQ=
Subject key identifier:   2F:E9:9B:5C:72:92:38:5F:E9:6D:45:F7:6B:50:18:4E:B1:D1:98:67
Authority key identifier: 4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
Certificate issuer:       /CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Certificate serial:       0196C19401DC6C03575702DCB1D26FFF4E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
Manifest number:          2B
Signing time:             Sun 11 May 2025 23:00:24 +0000
Manifest this update:     Sun 11 May 2025 23:00:24 +0000
Manifest next update:     Mon 12 May 2025 23:00:24 +0000
Files and hashes:         1: TRCb5Q1A4ys9UW_B63LqsyxeC84.crl (hash: qTavUrf+Y2NBsk4Ir1jgt1Za6Dwxyk39hxo3gaQfZfo=)
                          2: _ysqE-Sv0fTgw_gy8qUtBvX43Zw.roa (hash: XDdFm9ijjrDqLsWMBsXWF0Txzhfv7gyIMnkn7RG7zb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:94:01:dc:6c:03:57:57:02:dc:b1:d2:6f:ff:4e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
        Validity
            Not Before: May 11 23:00:24 2025 GMT
            Not After : May 12 23:00:24 2025 GMT
        Subject: CN=2fe99b5c7292385fe96d45f76b50184eb1d19867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:71:4e:68:bc:80:45:f3:d3:bf:67:fd:65:
                    88:df:5c:5b:d1:e5:4f:3e:ce:30:48:a8:b3:89:be:
                    08:6f:f3:ab:03:13:2d:11:2c:5a:8f:8b:78:64:b0:
                    dd:3f:60:79:71:50:e6:c3:66:79:16:2c:b0:e7:c8:
                    e2:93:fd:4b:05:3e:e7:56:47:ca:fa:9e:b9:80:3e:
                    ff:df:20:4d:ed:70:60:60:cd:e4:46:7f:ee:85:c3:
                    31:3f:e1:b1:43:bc:0d:2b:99:d0:f1:f3:5b:98:3c:
                    16:19:da:aa:a4:57:b7:d1:9c:d4:ea:fc:7d:45:20:
                    3b:18:54:86:35:aa:f4:6e:2d:ac:ee:a3:25:38:ba:
                    82:54:18:f5:54:39:5d:a6:79:74:b8:c3:f6:28:1f:
                    e2:4f:fa:19:63:ec:7e:37:3f:c7:c9:df:88:30:ae:
                    4c:ca:52:50:21:90:bd:bc:e5:48:cb:1c:ca:29:17:
                    4b:7f:e1:36:4e:b8:23:3e:15:4d:e8:29:b0:1f:42:
                    c1:a5:87:c7:27:dc:28:61:45:5f:2a:87:f2:ff:eb:
                    79:34:54:ac:4d:3e:cc:c4:dc:8f:90:a9:22:f8:38:
                    26:9f:a4:4c:76:46:8d:67:10:bf:f0:d6:bd:f5:30:
                    0e:0f:2b:df:c9:38:0c:77:64:d9:4a:21:76:48:e7:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E9:9B:5C:72:92:38:5F:E9:6D:45:F7:6B:50:18:4E:B1:D1:98:67
            X509v3 Authority Key Identifier:
                keyid:4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:98:6b:af:c3:7c:a5:10:53:23:7b:55:73:98:c4:60:27:a3:
         64:56:19:1f:19:5a:a9:be:db:73:2a:f9:a2:dd:66:25:7c:b2:
         a7:72:76:e5:6f:b5:03:c7:7b:67:ae:4d:cf:98:47:90:94:55:
         ac:22:bf:8d:9e:bd:6b:76:0d:8c:77:5a:21:96:a2:6b:56:a9:
         6a:27:d9:61:05:7b:5e:a1:b0:35:34:4d:cc:a8:83:a4:22:f1:
         5f:ff:b1:4f:28:72:87:97:79:41:1b:30:d0:e7:76:09:ba:55:
         f6:4b:ca:fd:f1:7e:8c:44:b3:c8:e5:71:ee:02:6d:0e:4f:6c:
         4a:75:d7:0b:b4:83:85:1c:43:65:bd:62:ab:36:57:85:b0:fa:
         9e:56:27:38:f0:fb:13:84:f5:f6:ac:ed:30:c3:c2:f4:f5:e6:
         54:b7:07:61:7c:b8:ba:10:80:93:5b:58:e6:c5:e4:77:67:de:
         52:36:93:bc:41:28:8e:87:6f:95:f0:7a:b8:f7:4c:aa:92:a7:
         ff:46:68:50:33:e2:3d:ce:7c:8a:ee:67:84:eb:49:e2:50:3a:
         c9:ca:4a:c2:ba:23:39:0d:5b:50:e1:3f:62:f2:50:11:8c:a9:
         53:00:84:92:1d:15:32:ed:5a:f0:51:10:a9:40:4f:a1:50:36:
         08:97:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:19:16 2025 by rpki-client