Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File:                     TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier:          j93SrhnIll7PE9TfyMOzx27hVXUjJ82YIUCMMq64l2I=
Subject key identifier:   D5:B5:96:8F:FE:40:AD:9E:CA:4F:93:FA:C8:54:9E:01:D2:82:2F:39
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer:       /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial:       01969E63694F90A0F36182DC05B9242EADC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number:          0C06
Signing time:             Mon 05 May 2025 03:00:37 +0000
Manifest this update:     Mon 05 May 2025 03:00:37 +0000
Manifest next update:     Tue 06 May 2025 03:00:37 +0000
Files and hashes:         1: Eef9PJNL2EuivvyYqwaqWfVHj-s.roa (hash: WDNmX7wRHN2XarNVrEqn9MAoWY+yPBJbf2QpjmHAIQQ=)
                          2: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: H546ni13eq/7bFkZgTp9DcTWRbDRfRUFnoruq4CyrzI=)
                          3: VknLSw01F6JnIGcpuDroFOQ6wlg.roa (hash: x8OBiPpoyvPs1xLJUu7Ja3HvluBnOuxAWAGhM5OwwjU=)
                          4: YJqBlZ2Fe8Khq-5phtHszQ17dp0.roa (hash: 5y6pIty0B50Ya59ZjY0WQF6A2tMefyueh/h5IfLk1iU=)
                          5: bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa (hash: 1PiFMOcXEw++DLpqX3fex/SiFqoIja/HYiTy+CElJPg=)
                          6: r3uflPboabvJIaGhEdaIDk06CD4.roa (hash: QFdRnoH0mopWuiJhq5qtq34F0JBoW9vig+Ki8iy8bE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:63:69:4f:90:a0:f3:61:82:dc:05:b9:24:2e:ad:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
        Validity
            Not Before: May  5 03:00:37 2025 GMT
            Not After : May  6 03:00:37 2025 GMT
        Subject: CN=d5b5968ffe40ad9eca4f93fac8549e01d2822f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:42:68:8f:57:19:36:68:50:b5:04:bf:ca:
                    5a:ba:bd:d6:b8:1d:12:f7:3c:37:c0:f6:bf:8f:c2:
                    18:45:03:44:27:62:2a:7e:fd:80:9c:24:6a:35:83:
                    84:d2:8b:71:2c:a9:1d:3f:f4:84:1b:b6:b9:ac:e8:
                    18:93:25:d4:96:38:05:9f:6c:e8:19:e0:e2:68:f0:
                    5b:17:56:5c:33:ea:64:ad:5a:41:12:91:82:19:ac:
                    58:a8:89:77:6b:a7:ae:f8:c3:ba:0c:aa:98:1c:24:
                    2d:36:cd:e4:fe:08:9c:75:a0:14:a0:07:51:99:7e:
                    d7:b3:c9:ed:8d:86:e4:90:5e:28:8e:f4:01:fd:85:
                    25:bd:9b:69:da:fe:d9:f6:7f:49:5b:99:64:4b:f5:
                    af:f0:e7:5e:c2:dc:24:7e:29:55:6a:b9:be:03:4b:
                    de:05:fc:b8:31:0f:d8:80:d4:56:32:cd:0e:57:76:
                    cd:b2:bf:69:50:8f:db:5c:6a:aa:23:6a:b1:12:fb:
                    7b:a7:1b:8d:66:a4:b1:16:f9:a1:a4:79:de:6d:a6:
                    08:4d:49:b2:7f:0a:3b:1e:5e:b1:7a:5f:93:e4:cc:
                    63:ac:f2:29:9f:cd:80:ff:db:14:92:82:35:04:e4:
                    96:de:0b:e9:00:44:2f:ea:24:b5:72:7d:dc:60:dc:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B5:96:8F:FE:40:AD:9E:CA:4F:93:FA:C8:54:9E:01:D2:82:2F:39
            X509v3 Authority Key Identifier:
                keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:5c:ce:ca:02:c4:53:65:52:56:44:23:b0:a0:3a:20:c0:
         7d:2b:9f:26:30:c8:f2:61:b6:65:c0:16:90:c3:32:df:e3:de:
         c0:89:e2:e6:72:d6:63:ac:a2:50:f5:40:6d:64:d1:73:64:45:
         9f:76:5f:e5:9f:af:81:9e:b4:13:2d:4a:f2:d4:62:b8:69:3c:
         22:c4:ce:dc:f1:55:38:09:24:51:ab:59:ad:16:6b:2e:97:2a:
         9c:69:97:e3:f5:29:40:fa:40:b4:8d:8a:f0:ce:7f:a0:12:05:
         fd:db:a4:f1:c7:a8:2b:ca:18:fa:98:cd:0e:2d:6c:71:a1:e9:
         1a:51:95:c5:28:b4:b6:0e:09:3f:00:0f:a5:c8:a8:13:63:12:
         2f:e7:cf:e7:7c:06:f1:e1:5b:1d:be:cc:5c:92:83:03:ef:5c:
         01:d9:fe:ff:3a:d9:f6:aa:68:4c:19:32:14:6e:e8:85:65:9b:
         95:1f:78:29:8e:94:a7:3d:28:68:d8:ce:7a:f5:a7:34:5d:4f:
         97:86:64:6e:f2:47:36:d5:8b:49:53:99:cc:b4:d4:ce:78:6e:
         05:cf:f8:74:b7:c5:4f:5f:7f:1e:79:af:f6:dc:58:27:82:ce:
         6e:8e:62:16:96:49:2e:6e:d8:33:be:04:71:ee:de:41:df:ee:
         ed:54:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:42:50 2025 by rpki-client