Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File:                     Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier:          DXSwF+uQ0IBFSejhCrNIVIEJ/NqW2kY873PRsGvPC+M=
Subject key identifier:   B3:20:98:18:69:7F:F2:D4:F7:F0:69:AC:CC:E3:CE:F0:B9:0E:13:00
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer:       /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial:       0196A49C86B1F6A0FD7CBDEDA64C8E587689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 08:00:43 +0000
Manifest this update:     Tue 06 May 2025 08:00:43 +0000
Manifest next update:     Wed 07 May 2025 08:00:43 +0000
Files and hashes:         1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: YZFDK7j1Gw/IOYGg9rMdpOws78i/b97D9yBiNpUuy9U=)
                          2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:9c:86:b1:f6:a0:fd:7c:bd:ed:a6:4c:8e:58:76:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
        Validity
            Not Before: May  6 08:00:43 2025 GMT
            Not After : May  7 08:00:43 2025 GMT
        Subject: CN=b3209818697ff2d4f7f069accce3cef0b90e1300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:f1:53:2b:a5:f1:92:1a:af:fe:40:bc:78:
                    af:d7:d7:f7:8f:cd:a4:7e:39:b7:73:8d:92:65:c3:
                    68:a5:53:f6:c2:96:37:8e:90:9d:22:0f:bc:9d:6f:
                    09:06:6f:8f:71:49:b2:96:72:94:b0:86:d4:10:74:
                    6d:a2:0e:8c:12:32:12:84:67:73:3d:c8:f7:85:9c:
                    0f:1d:1d:d8:dc:3e:0e:58:42:0b:e1:93:c0:1d:4e:
                    74:4a:d6:5e:2d:2b:e7:d5:39:e0:fb:03:3d:e9:f0:
                    ab:b7:2a:0e:78:2d:7e:62:ed:97:b2:a3:29:e8:90:
                    98:8d:e4:54:34:46:54:a7:eb:9b:4e:b4:8e:31:cb:
                    63:d4:87:96:7b:e1:bb:3f:1d:71:29:cc:54:23:9e:
                    28:84:23:2d:f8:18:e0:87:04:77:ad:10:ea:92:10:
                    a6:54:a3:35:a4:e7:d5:aa:3f:a2:61:05:a8:9f:c7:
                    ce:f0:fa:c7:6c:83:ec:4d:0b:81:63:15:bf:55:08:
                    21:e3:50:22:01:ed:6c:64:ea:6b:02:7e:d1:29:ff:
                    65:d4:2f:34:b3:cc:c4:b4:b9:ce:2d:84:f9:5a:fa:
                    ad:12:c6:8c:5e:cf:5c:bd:92:ad:9b:fe:ff:39:0f:
                    c3:fd:75:a3:8e:d6:46:06:5e:c1:d4:12:e4:a8:a5:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:20:98:18:69:7F:F2:D4:F7:F0:69:AC:CC:E3:CE:F0:B9:0E:13:00
            X509v3 Authority Key Identifier:
                keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4c:13:9c:fc:17:5f:47:66:b1:4d:52:db:7d:de:83:aa:5d:
         73:5e:18:38:e9:83:b5:d7:14:1a:e0:41:7e:d5:9f:da:af:3e:
         0c:50:c7:64:d0:e2:e2:6f:da:e3:57:42:fe:ff:aa:55:02:6d:
         4a:7b:71:a5:1a:8d:d6:d5:ba:8e:34:d4:27:49:0b:87:a6:77:
         37:c3:0a:a0:4b:fd:95:9a:8e:00:db:68:51:1f:f2:76:e4:f1:
         9d:43:07:24:57:bf:c3:82:3e:60:6a:c5:55:ee:62:70:aa:d7:
         16:55:20:c4:b9:e3:15:b4:6c:f2:36:be:2d:60:b2:fb:c8:79:
         f7:bd:20:36:da:41:4b:3d:eb:5a:30:ea:bf:83:ef:e5:ce:53:
         19:6b:5b:90:9f:9a:8f:84:75:2a:d0:e6:3b:d9:72:a8:54:d9:
         43:51:95:bd:f4:7d:07:19:78:d0:0a:43:52:3d:9a:2a:20:3e:
         27:94:43:69:52:ab:59:62:10:6d:cd:1b:75:8a:2f:d9:88:61:
         5c:97:63:6c:19:ef:1d:0b:f5:55:81:ef:1a:f7:0d:ab:00:71:
         85:f8:00:c7:2f:3a:48:d7:e7:c3:85:66:b0:b8:26:c5:7b:92:
         d5:4c:07:06:d1:58:3a:4b:54:c4:61:46:46:b0:f2:55:be:c5:
         d5:a8:c0:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaknIax9qD9fL3tpkyOWHaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZGM2ODliYjIyZDA5NDc1NTc0ZjQxYzBlNWQ5N2MwNDU5
MzA5MjgwHhcNMjUwNTA2MDgwMDQzWhcNMjUwNTA3MDgwMDQzWjAzMTEwLwYDVQQD
EyhiMzIwOTgxODY5N2ZmMmQ0ZjdmMDY5YWNjY2UzY2VmMGI5MGUxMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusbxUyul8ZIar/5AvHiv19f3j82k
fjm3c42SZcNopVP2wpY3jpCdIg+8nW8JBm+PcUmylnKUsIbUEHRtog6MEjIShGdz
Pcj3hZwPHR3Y3D4OWEIL4ZPAHU50StZeLSvn1Tng+wM96fCrtyoOeC1+Yu2XsqMp
6JCYjeRUNEZUp+ubTrSOMctj1IeWe+G7Px1xKcxUI54ohCMt+BjghwR3rRDqkhCm
VKM1pOfVqj+iYQWon8fO8PrHbIPsTQuBYxW/VQgh41AiAe1sZOprAn7RKf9l1C80
s8zEtLnOLYT5WvqtEsaMXs9cvZKtm/7/OQ/D/XWjjtZGBl7B1BLkqKV1AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMgmBhpf/LU9/BprMzjzvC5DhMAMB8GA1UdIwQY
MBaAFE7caJuyLQlHVXT0HA5dl8BFkwkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWIt
MDliZTU5ODlkMGFjLzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWItMDliZTU5ODlkMGFj
LzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUwTnPwX
X0dmsU1S233eg6pdc14YOOmDtdcUGuBBftWf2q8+DFDHZNDi4m/a41dC/v+qVQJt
SntxpRqN1tW6jjTUJ0kLh6Z3N8MKoEv9lZqOANtoUR/yduTxnUMHJFe/w4I+YGrF
Ve5icKrXFlUgxLnjFbRs8ja+LWCy+8h5970gNtpBSz3rWjDqv4Pv5c5TGWtbkJ+a
j4R1KtDmO9lyqFTZQ1GVvfR9Bxl40ApDUj2aKiA+J5RDaVKrWWIQbc0bdYov2Yhh
XJdjbBnvHQv1VYHvGvcNqwBxhfgAxy86SNfnw4VmsLgmxXuS1UwHBtFYOktUxGFG
RrDyVb7F1ajAuw==
-----END CERTIFICATE-----
Generated at Tue May 6 14:58:20 2025 by rpki-client