Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
File:                     TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft (raw, json)
Hash identifier:          7oqhHMexV/fDMk3rhHgYiR5tiIfzJvIChei01cFsPSw=
Subject key identifier:   47:37:67:E0:10:EC:AC:D6:BE:8B:03:A4:3B:D3:28:96:CE:4A:2C:DA
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Certificate issuer:       /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial:       0196B1EA3BCD0A3F26E8CB0C7F2567755B72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
Manifest number:          133A
Signing time:             Thu 08 May 2025 22:00:40 +0000
Manifest this update:     Thu 08 May 2025 22:00:40 +0000
Manifest next update:     Fri 09 May 2025 22:00:40 +0000
Files and hashes:         1: H9SO8EzcNBS2yNz1oqlQvF8nYaA.roa (hash: DHcHXu+DGDdMpd1sZPMiGOEXUFezuU4wJP51eqKaDv0=)
                          2: Ie5KawkP4b238jzWIkt7U1G1OH0.roa (hash: b/NOk3BaQteK7RVlxUiaRcKQ/ZGCaP84MpBuSn/nXxo=)
                          3: TeFv9Kd2FbNzufUz1M4EUtdT3Xg.roa (hash: zGrnYc3nuLuo0nlpuHPKJrCPtCdE57liuR6ITCdonSo=)
                          4: TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl (hash: L7Jv1M7pK8goUxbkBoSTCiWreEwZ/2S0NIfNFhBbiTU=)
                          5: yX8SV9VGJFhES7mUS6-LTvmXGx8.roa (hash: yb6TAx+2YgX4WVBv0Avw9JYkbGFg7vg0qrXoYZM9Y3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:3b:cd:0a:3f:26:e8:cb:0c:7f:25:67:75:5b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
        Validity
            Not Before: May  8 22:00:40 2025 GMT
            Not After : May  9 22:00:40 2025 GMT
        Subject: CN=473767e010ecacd6be8b03a43bd32896ce4a2cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:9d:46:77:ea:ed:0a:f2:40:7d:c5:96:53:
                    1e:34:b6:42:59:5d:38:66:bf:8f:34:c3:90:45:37:
                    75:f7:56:78:3e:84:d3:69:06:0d:c4:e7:ee:f4:8b:
                    fb:47:c1:e5:04:96:42:e1:01:77:cd:2f:a5:27:cd:
                    27:a4:dc:c6:e3:61:96:4c:99:e4:07:f9:16:2a:c7:
                    2a:6e:bf:f0:0f:8f:18:27:da:dc:82:3e:1e:12:64:
                    cd:e5:72:47:15:7d:86:a5:77:83:5c:af:eb:dc:38:
                    98:c7:28:9b:38:43:66:bd:d8:6e:66:98:8f:e9:e5:
                    fd:f6:d2:e3:42:1e:50:97:c3:d8:32:79:cf:61:64:
                    27:9b:5e:80:30:e8:42:03:46:dd:1b:92:81:a9:81:
                    3a:04:b1:74:03:a0:67:c9:95:8c:2c:6c:71:b8:d8:
                    57:e4:af:c3:41:e7:dd:35:82:a7:11:79:ab:cd:52:
                    c3:0b:42:20:41:67:d4:6b:f5:91:98:d3:55:10:a7:
                    6a:b9:7b:f0:9c:86:00:7c:70:fe:86:74:8b:6f:8d:
                    1b:7c:75:1b:0e:a3:e7:c0:bc:a9:6d:e5:aa:ef:2e:
                    77:11:89:68:ba:82:b9:53:f4:a5:81:1f:43:b4:c9:
                    26:46:5c:11:54:58:19:94:a6:99:2f:13:66:63:7f:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:37:67:E0:10:EC:AC:D6:BE:8B:03:A4:3B:D3:28:96:CE:4A:2C:DA
            X509v3 Authority Key Identifier:
                keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:0b:55:38:d1:0d:5c:5b:69:48:bd:f9:5c:e0:48:67:b2:
         b2:ac:28:e9:27:a5:b9:6a:c3:00:c0:05:6c:74:7b:a3:ae:24:
         c7:ac:fc:f8:7f:8e:f5:78:9c:24:36:dd:5f:07:ae:35:32:1c:
         2c:c3:21:13:62:17:fa:14:c8:65:8d:4d:82:06:5e:76:91:75:
         88:42:16:8b:1b:8a:36:04:7a:2f:3c:92:2d:51:69:c3:d3:d6:
         e8:59:d3:b8:08:be:77:76:0f:c4:a4:88:a9:03:92:fa:3f:0a:
         c8:96:14:53:ed:9e:da:84:1b:90:33:7c:ed:5d:c3:78:3a:e6:
         e8:62:1b:2a:41:14:b4:e4:63:9d:e0:06:75:5b:7d:cd:52:4d:
         29:8e:86:48:fc:4a:62:79:df:f3:54:6d:c3:cb:0d:e5:0b:64:
         4b:13:5d:32:3c:4a:a7:75:73:4f:48:c7:88:7a:d5:25:d4:3d:
         a1:ee:e3:df:f8:e0:01:79:5a:6e:81:67:32:44:79:c7:86:93:
         05:01:b3:c6:ac:1a:d5:94:61:19:ab:a8:19:4b:bd:d6:01:c1:
         dc:12:7b:06:59:42:3b:14:c5:3d:27:cc:04:ee:35:02:24:4b:
         1e:a3:7f:04:c3:ff:1b:e8:da:fc:20:6f:8a:71:fd:e0:d0:13:
         05:98:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:40:57 2025 by rpki-client