Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File:                     tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier:          MngV4+S4Qzi6Vcov1wutWjps4unf5+wicYI9UDsBUwI=
Subject key identifier:   FE:BD:41:FC:2F:CB:97:5F:06:7B:E7:C9:4C:BD:10:7F:4C:9D:0F:AC
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer:       /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial:       0197B74595A17C4C11F3C6E6FE2B425644C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 16:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:20 +0000
Files and hashes:         1: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: V+TjxrWzSc90xuMTXnS2h48CEv2Myn1mi51ufQ01/3U=)
                          2: uhCkTjed1Otbl84zKJAXa3t70aA.roa (hash: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:95:a1:7c:4c:11:f3:c6:e6:fe:2b:42:56:44:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
        Validity
            Not Before: Jun 28 16:01:20 2025 GMT
            Not After : Jun 29 16:01:20 2025 GMT
        Subject: CN=febd41fc2fcb975f067be7c94cbd107f4c9d0fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:68:38:84:7a:0c:1e:5b:53:4d:51:43:f8:
                    27:db:96:c7:9c:c3:43:30:71:2e:30:5e:3d:d4:4b:
                    94:66:d7:46:56:a0:b4:a3:30:4d:de:28:a8:c2:56:
                    7e:d2:45:f9:a9:59:68:9f:ad:60:43:f9:20:af:bc:
                    8d:4f:41:c9:79:77:1c:31:49:e6:68:72:ff:98:ad:
                    a9:6e:b7:27:e9:2f:e8:05:91:1d:24:71:8c:17:eb:
                    dd:e9:94:10:ef:65:5c:2b:ee:ee:64:68:77:7c:16:
                    c2:fc:d5:9f:23:b1:79:b3:51:c4:00:26:bf:fa:64:
                    75:58:6f:c6:54:81:67:9f:dd:c8:df:05:64:71:91:
                    97:76:cf:ee:01:4d:d9:ac:26:6f:7d:59:ea:2a:e8:
                    10:f8:34:3d:db:29:57:dd:f3:8b:28:0c:b4:31:dc:
                    bf:cf:70:a9:8e:e3:7a:23:01:06:91:1b:96:91:bd:
                    0c:0f:4a:42:5e:f8:fd:66:b1:de:35:aa:0b:f1:48:
                    37:ce:be:54:e2:02:75:ad:57:6f:39:98:ed:8e:c3:
                    0c:e6:3e:5e:19:f4:00:4a:ad:8e:5a:ba:a7:bf:f6:
                    f1:56:4d:4b:70:d5:5b:0a:c9:c4:b5:e3:6c:fc:0c:
                    67:fd:db:3a:72:e8:ba:da:72:7b:5e:44:9d:bb:9b:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BD:41:FC:2F:CB:97:5F:06:7B:E7:C9:4C:BD:10:7F:4C:9D:0F:AC
            X509v3 Authority Key Identifier:
                keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:df:0d:c2:df:2d:31:90:7c:09:0f:82:5a:11:42:f1:c8:38:
         ff:bf:69:40:4a:ca:8a:6f:eb:7e:5c:6d:dd:3f:8f:2f:e5:e4:
         c7:b2:36:3a:98:f6:87:0b:be:e2:5f:07:fb:bb:58:2c:a6:3e:
         08:ef:99:11:a0:13:80:2c:95:d7:86:60:61:82:67:d8:af:d4:
         ab:63:a6:67:0d:9c:9b:f0:44:f5:a9:23:80:fc:02:86:75:cf:
         e4:15:e8:b0:46:35:fb:d0:c3:8a:47:1a:cc:27:69:07:d0:51:
         0c:6f:4f:15:35:ad:21:db:eb:5d:7e:04:a2:b2:2e:3a:74:7e:
         19:71:0b:c8:87:5a:40:03:c6:da:0e:ba:4d:54:7b:d7:ce:8e:
         4a:14:70:2f:80:02:bf:e4:b6:89:bd:37:c3:6f:aa:4d:2a:fc:
         4c:4b:54:a4:86:9e:67:c8:c3:08:ab:42:99:e8:e4:a2:d2:e9:
         fc:46:aa:a0:b8:e5:2f:92:c6:bc:51:1b:40:e6:59:aa:ef:7a:
         05:00:83:67:d2:6c:69:40:21:b1:ff:55:38:5c:98:f2:af:a5:
         45:c9:3b:34:43:72:b0:0a:82:46:5a:ef:b6:2a:2d:16:cd:48:
         80:c2:32:8d:83:da:36:b3:e7:6a:67:e6:d4:3e:af:e3:75:47:
         94:de:69:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:54 2025 by rpki-client