Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File:                     TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier:          qH/2IT+UvhR0fdZE1vN8iX1W67sUrGJw2YpGJFUahmU=
Subject key identifier:   AF:7D:D2:5A:53:4A:A2:91:38:CA:D2:BC:5A:C3:91:BD:76:9E:99:B0
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer:       /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial:       0197B745798B76186409BE560876FFD920CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number:          C5
Signing time:             Sat 28 Jun 2025 16:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:13 +0000
Files and hashes:         1: LpPDa_hMKwPOheYcHrNv5BDTWog.roa (hash: 2CoZfLFeobkKqc9qZWTYrYW94wPP5u5Zmz2xUC1WQvs=)
                          2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: juF6KEH3KvcC3bcDI2PlhskthaJUfy6SDQZA2UFuETU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:79:8b:76:18:64:09:be:56:08:76:ff:d9:20:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
        Validity
            Not Before: Jun 28 16:01:13 2025 GMT
            Not After : Jun 29 16:01:13 2025 GMT
        Subject: CN=af7dd25a534aa29138cad2bc5ac391bd769e99b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:04:08:1a:1f:07:32:bc:c7:98:27:f2:ba:
                    eb:a9:61:5d:5e:26:b2:1b:57:23:6a:13:7b:19:45:
                    72:b3:1b:1e:9b:a7:b2:78:3a:62:99:98:4b:e7:8b:
                    75:cf:51:30:87:9a:44:4d:05:12:53:b1:0d:18:c7:
                    94:04:18:cd:84:96:07:d4:e4:3b:c6:56:5b:04:b7:
                    56:75:b8:65:86:f2:69:2b:43:be:58:3b:6c:71:3c:
                    ca:6e:3d:d1:52:3b:a7:ac:f2:78:ac:87:00:a8:4a:
                    99:d9:95:7d:f9:8b:bf:25:e0:98:75:92:9a:9a:76:
                    c0:b8:c7:bb:0e:53:b6:ef:0b:b0:32:76:66:13:81:
                    02:6b:7b:6a:c8:e1:b3:60:16:9c:bb:9b:a5:e9:f5:
                    cb:fa:03:f6:99:a7:aa:45:85:de:91:2b:13:34:7f:
                    84:ef:9c:da:90:e1:0e:f7:1e:17:dc:96:93:01:f0:
                    f5:f6:ee:04:13:85:9c:eb:2d:ad:61:aa:0c:c3:3d:
                    e8:3f:a5:64:41:93:f6:96:37:ec:8c:4f:fd:c2:ec:
                    42:9f:97:9d:53:fe:cc:00:1f:8c:d7:85:37:53:3f:
                    40:ab:27:2b:5e:9e:04:8f:ae:1f:0e:23:1f:67:d3:
                    7e:17:c1:6b:18:11:23:9a:e1:3e:dd:e9:69:55:d6:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7D:D2:5A:53:4A:A2:91:38:CA:D2:BC:5A:C3:91:BD:76:9E:99:B0
            X509v3 Authority Key Identifier:
                keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:a9:50:fd:d8:8c:ce:83:ec:05:4e:31:95:cd:bf:06:09:
         bd:6b:4f:35:d1:31:fd:df:71:19:ff:a8:24:36:58:ed:a5:bd:
         ae:ba:69:4e:2f:2d:3e:3e:0b:b2:da:86:fb:21:0d:20:c1:be:
         d9:14:bb:f2:fa:c7:ea:41:be:1e:75:60:3a:74:fb:6d:95:52:
         37:20:fe:6b:07:af:16:f6:ce:78:8a:d3:09:c3:c2:c5:3a:9a:
         d4:78:6f:53:93:dc:95:b9:7c:3e:e2:11:0d:72:3b:43:c9:25:
         f2:06:e1:e9:0a:53:3f:36:45:08:06:eb:84:94:ee:0c:06:49:
         01:ce:40:55:01:cc:ce:9f:2b:0f:08:73:4b:58:ff:9b:50:3f:
         38:51:13:d5:23:15:83:69:9c:2f:89:6c:5c:aa:fa:7c:ac:91:
         0d:f9:13:6a:e1:98:13:cb:6a:06:60:a7:c5:6c:89:72:24:de:
         dc:f9:8a:4f:80:42:a3:1c:27:14:d3:b4:2e:33:62:b4:a5:b3:
         75:4d:f5:33:c0:d3:f1:83:d0:e8:b5:70:02:bb:93:c8:06:c6:
         2a:60:23:35:00:0a:2d:a9:62:e6:8e:c9:09:8f:95:5a:b6:0c:
         bb:db:6e:37:5e:33:7a:e1:24:7e:ef:b0:bc:7a:1b:8e:4b:35:
         10:c6:09:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RXmLdhhkCb5WCHb/2SDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDMyNGNjYzA5MGI4MzE4Mjk5MTdhZWFmNzM4MzRmMDgz
NDRhY2UwHhcNMjUwNjI4MTYwMTEzWhcNMjUwNjI5MTYwMTEzWjAzMTEwLwYDVQQD
EyhhZjdkZDI1YTUzNGFhMjkxMzhjYWQyYmM1YWMzOTFiZDc2OWU5OWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFQECBofBzK8x5gn8rrrqWFdXiay
G1cjahN7GUVysxsem6eyeDpimZhL54t1z1Ewh5pETQUSU7ENGMeUBBjNhJYH1OQ7
xlZbBLdWdbhlhvJpK0O+WDtscTzKbj3RUjunrPJ4rIcAqEqZ2ZV9+Yu/JeCYdZKa
mnbAuMe7DlO27wuwMnZmE4ECa3tqyOGzYBacu5ul6fXL+gP2maeqRYXekSsTNH+E
75zakOEO9x4X3JaTAfD19u4EE4Wc6y2tYaoMwz3oP6VkQZP2ljfsjE/9wuxCn5ed
U/7MAB+M14U3Uz9AqycrXp4Ej64fDiMfZ9N+F8FrGBEjmuE+3elpVdb04wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK990lpTSqKROMrSvFrDkb12npmwMB8GA1UdIwQY
MBaAFE7TJMzAkLgxgpkXrq9zg08INErOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEt
NTNhMDg0MzkwNTI3LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEtNTNhMDg0MzkwNTI3
LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScmpUP3Y
jM6D7AVOMZXNvwYJvWtPNdEx/d9xGf+oJDZY7aW9rrppTi8tPj4LstqG+yENIMG+
2RS78vrH6kG+HnVgOnT7bZVSNyD+awevFvbOeIrTCcPCxTqa1HhvU5Pclbl8PuIR
DXI7Q8kl8gbh6QpTPzZFCAbrhJTuDAZJAc5AVQHMzp8rDwhzS1j/m1A/OFET1SMV
g2mcL4lsXKr6fKyRDfkTauGYE8tqBmCnxWyJciTe3PmKT4BCoxwnFNO0LjNitKWz
dU31M8DT8YPQ6LVwAruTyAbGKmAjNQAKLali5o7JCY+VWrYMu9tuN14zeuEkfu+w
vHobjks1EMYJTw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:04 2025 by rpki-client