Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
File:                     tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json)
Hash identifier:          nhEoILGQ79gvCQVuShiCadpsqG1+gWBnP90GW+9hIHs=
Subject key identifier:   5D:C2:5F:D5:4A:34:1E:3C:2D:79:5B:A6:05:AE:9B:4C:FA:06:61:C5
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Certificate issuer:       /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial:       0198D5BBDFA2D85B82C34D4078958DF4EDD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
Manifest number:          1044
Signing time:             Sat 23 Aug 2025 07:01:56 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:56 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:56 +0000
Files and hashes:         1: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: xotnJ2WB/SIoyRhzfnlt/Dojp8QlDQWIVYb+yRnhe4o=)
                          2: tyBiH_k1-T3tg2PjNihavpjVNFg.roa (hash: +MCpw/+jgYqZnXSoZlFEXezP/GiLWQcwVakj6OdX0hc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:df:a2:d8:5b:82:c3:4d:40:78:95:8d:f4:ed:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
        Validity
            Not Before: Aug 23 07:01:56 2025 GMT
            Not After : Aug 24 07:01:56 2025 GMT
        Subject: CN=5dc25fd54a341e3c2d795ba605ae9b4cfa0661c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:b2:d9:d4:8a:2d:23:7d:63:d9:f7:fa:56:
                    1f:33:bf:d5:1d:60:48:71:47:91:76:a6:7e:71:02:
                    57:20:9c:6d:67:98:56:71:c5:f3:d1:21:d3:7e:3c:
                    81:ec:a6:2d:4b:bb:43:95:34:7f:2e:cf:68:6d:71:
                    62:16:15:a3:4d:19:2f:4b:81:26:47:1f:01:5f:b7:
                    45:41:9c:ea:98:d4:11:bc:33:6a:14:f0:f5:35:0e:
                    9f:c4:85:c3:be:d4:92:64:2b:5c:7c:9a:d4:ae:49:
                    28:93:82:53:85:06:2a:e2:c0:de:44:95:39:7a:db:
                    57:da:f7:b7:5d:9a:9b:cf:6a:db:09:13:dd:c4:eb:
                    5e:44:71:aa:d8:bf:54:ea:bd:de:b1:05:6a:d9:cb:
                    99:08:ed:49:b9:e9:9f:37:aa:f1:42:cb:72:0a:fe:
                    72:1d:75:6e:b0:68:39:10:50:29:14:cc:90:80:94:
                    76:2d:65:b3:d0:e7:59:8c:5c:68:89:03:47:8b:bf:
                    b7:3b:0a:0b:21:d2:6b:ba:73:c7:43:11:86:e4:b8:
                    fb:83:5e:da:46:38:5d:a8:a6:b4:13:49:ec:c1:ce:
                    94:08:13:67:e5:dc:a5:df:c1:33:67:88:41:a0:74:
                    18:5f:51:49:cd:47:b4:c3:a5:bd:cf:09:69:df:af:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C2:5F:D5:4A:34:1E:3C:2D:79:5B:A6:05:AE:9B:4C:FA:06:61:C5
            X509v3 Authority Key Identifier:
                keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:06:04:1d:2b:8e:cf:c7:d9:7c:ec:4f:32:5a:0d:cf:a4:ca:
         6c:ec:bd:8d:d1:42:2e:17:4c:ab:10:d7:2c:4f:c6:98:cf:98:
         34:65:9e:76:62:8a:42:d8:77:be:6e:55:d6:40:1f:b0:59:a4:
         38:b1:ce:f6:b7:eb:1d:5a:ee:bb:07:41:b2:51:a0:e3:d9:a0:
         0d:47:5d:f9:32:b3:c5:c8:56:3d:fa:ab:34:b0:f0:43:a4:6d:
         6c:b2:59:0c:4d:5b:e7:4f:0b:4b:84:9d:bf:0e:fa:01:9b:ba:
         26:32:eb:79:3d:2a:25:76:b7:12:22:2c:56:b1:14:c2:4c:b8:
         fb:81:5f:92:bb:2f:03:59:1d:9d:83:de:b5:6d:67:17:46:15:
         c4:7c:03:e3:c5:df:5f:2b:5f:a2:ad:f7:bf:35:36:92:f7:70:
         40:9b:6a:ba:f8:70:e7:0d:50:60:0b:a6:b8:b1:36:79:40:d0:
         67:f8:f8:5b:ef:b9:75:88:fa:3f:9f:f7:ef:3e:45:f8:c2:21:
         62:4f:8a:7c:b9:8c:c8:c2:64:a9:d0:15:a1:d1:55:b1:b3:85:
         e0:9f:cf:27:65:3a:f8:b2:bb:7c:03:a2:55:fe:c7:86:0d:98:
         7c:de:2a:c8:55:8b:3f:41:5d:44:ce:6e:dc:16:71:30:59:a3:
         8b:d4:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:30 2025 by rpki-client