Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
File:                     TLbePNkQ87_3_4Xe1FLEMbHopSA.mft (raw, json)
Hash identifier:          J81x38Km2zBSupkrCEcWq+ko02RjVm1Kvn+s8SGnOyo=
Subject key identifier:   9C:0E:E9:4B:B4:78:CA:3F:90:72:B1:91:86:4F:56:90:56:9A:B2:F4
Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
Certificate issuer:       /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Certificate serial:       0197B632D9F6D4D2A3E591E589ED048D4FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 11:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:15 +0000
Files and hashes:         1: TLbePNkQ87_3_4Xe1FLEMbHopSA.crl (hash: 8UjvoN6j7UZEX8EAQQEdAeOby7g4u98MmZKqJE8Ksvc=)
                          2: kE8LdGAFW614HUcjN1MoZxFokJs.roa (hash: XYMGtkKoA87TX5nzm+UQ3ylduTU9EvUGKlmdAtXqyu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:d9:f6:d4:d2:a3:e5:91:e5:89:ed:04:8d:4f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
        Validity
            Not Before: Jun 28 11:01:15 2025 GMT
            Not After : Jun 29 11:01:15 2025 GMT
        Subject: CN=9c0ee94bb478ca3f9072b191864f5690569ab2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:ab:85:35:ec:2b:e4:54:32:a5:1e:02:34:
                    3f:2b:34:c9:a6:77:9f:53:43:63:5a:9b:61:e7:5c:
                    f2:b4:6e:74:a9:d2:15:ce:00:ff:c7:25:16:a1:66:
                    bd:fe:70:b7:c8:ec:de:65:7f:62:07:b6:15:67:35:
                    84:cf:1c:94:87:90:45:d5:30:17:2b:81:69:9e:98:
                    a0:6e:71:d9:82:d8:ae:79:69:cc:d7:8d:e3:17:02:
                    47:21:b6:8b:a7:08:dc:2c:f0:e9:54:f1:99:65:9e:
                    e4:56:59:70:05:92:b2:b8:9e:35:41:2a:fc:75:d4:
                    a7:20:23:bc:c4:6a:39:4f:cd:de:c0:21:db:cf:3f:
                    a3:71:4d:cb:e3:ee:96:ef:5b:74:ff:ea:22:c1:73:
                    0a:31:f7:1d:5d:6e:d1:0e:6c:ab:b9:d7:02:b2:cb:
                    b0:91:56:df:48:f1:16:a8:86:72:a0:de:bc:1f:4d:
                    4f:de:93:ce:9b:fc:33:d6:cb:38:ee:5e:55:3e:f9:
                    ae:db:6f:2e:05:53:ef:37:63:f5:ea:40:8d:f1:65:
                    8e:41:c1:f2:dd:c9:be:be:14:0b:2f:19:13:8b:d3:
                    0f:f7:ad:f4:2e:68:2f:2d:98:28:2e:11:b1:09:d8:
                    8f:e8:40:be:47:07:c4:3d:b6:c9:0b:87:18:13:d2:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0E:E9:4B:B4:78:CA:3F:90:72:B1:91:86:4F:56:90:56:9A:B2:F4
            X509v3 Authority Key Identifier:
                keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ec:d2:77:a1:76:50:bc:bb:1d:42:ea:a8:1a:fc:80:4a:68:
         bb:e2:f6:0b:db:98:ab:aa:60:e7:f8:7b:09:08:63:9a:e8:ff:
         b8:77:2a:5c:6e:52:ed:e8:1e:e0:e5:61:5c:2d:ef:30:8f:2b:
         41:f1:a5:eb:19:d0:24:ab:82:4a:29:c3:c8:c9:ff:18:a3:94:
         58:5d:82:e1:f3:f2:1c:51:12:d3:e7:89:93:28:88:db:51:ad:
         d2:b1:b9:38:b1:35:72:ef:25:5b:b2:67:c4:9e:8c:ce:bd:48:
         fd:ad:11:9c:3f:05:95:87:5b:5a:db:63:d2:04:46:58:a1:37:
         23:94:e9:b1:1c:b4:fa:d9:33:cd:4f:d1:fe:7b:63:74:ea:1b:
         e8:fb:8e:e9:32:5f:ae:ce:f8:c3:0f:0e:e6:06:c0:9e:4f:a9:
         8b:49:7f:b2:d8:79:40:9a:a0:c2:36:41:fa:43:8a:95:b9:29:
         f2:f4:56:2e:17:10:f2:f6:63:9a:b2:fc:cd:3b:ed:12:a1:f2:
         62:b8:88:2a:97:1e:e2:2b:02:e8:39:be:e5:69:63:fc:37:b5:
         8d:33:14:38:75:75:3e:a9:79:52:b8:d0:28:72:49:a7:6a:2b:
         12:fa:fb:dd:bc:ea:39:d5:8f:a9:eb:cd:e0:f4:d1:e1:8c:0f:
         12:20:a5:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Mtn21NKj5ZHlie0EjU+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYjZkZTNjZDkxMGYzYmZmN2ZmODVkZWQ0NTJjNDMxYjFl
OGE1MjAwHhcNMjUwNjI4MTEwMTE1WhcNMjUwNjI5MTEwMTE1WjAzMTEwLwYDVQQD
Eyg5YzBlZTk0YmI0NzhjYTNmOTA3MmIxOTE4NjRmNTY5MDU2OWFiMmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwburhTXsK+RUMqUeAjQ/KzTJpnef
U0NjWpth51zytG50qdIVzgD/xyUWoWa9/nC3yOzeZX9iB7YVZzWEzxyUh5BF1TAX
K4FpnpigbnHZgtiueWnM143jFwJHIbaLpwjcLPDpVPGZZZ7kVllwBZKyuJ41QSr8
ddSnICO8xGo5T83ewCHbzz+jcU3L4+6W71t0/+oiwXMKMfcdXW7RDmyrudcCssuw
kVbfSPEWqIZyoN68H01P3pPOm/wz1ss47l5VPvmu228uBVPvN2P16kCN8WWOQcHy
3cm+vhQLLxkTi9MP9630LmgvLZgoLhGxCdiP6EC+RwfEPbbJC4cYE9Kh0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwO6Uu0eMo/kHKxkYZPVpBWmrL0MB8GA1UdIwQY
MBaAFEy23jzZEPO/9/+F3tRSxDGx6KUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgt
MDNmNjA0MzI0ZmNmLzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgtMDNmNjA0MzI0ZmNm
LzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOzSd6F2
ULy7HULqqBr8gEpou+L2C9uYq6pg5/h7CQhjmuj/uHcqXG5S7ege4OVhXC3vMI8r
QfGl6xnQJKuCSinDyMn/GKOUWF2C4fPyHFES0+eJkyiI21Gt0rG5OLE1cu8lW7Jn
xJ6Mzr1I/a0RnD8FlYdbWttj0gRGWKE3I5TpsRy0+tkzzU/R/ntjdOob6PuO6TJf
rs74ww8O5gbAnk+pi0l/sth5QJqgwjZB+kOKlbkp8vRWLhcQ8vZjmrL8zTvtEqHy
YriIKpce4isC6Dm+5Wlj/De1jTMUOHV1Pql5UrjQKHJJp2orEvr73bzqOdWPqevN
4PTR4YwPEiCl0g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:22 2025 by rpki-client