Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File:                     tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier:          VSXh85Nb9DRs80BFZgvqrNPKdLVwzuzF2wdaBMKKN7I=
Subject key identifier:   D0:97:EA:61:81:6D:55:05:31:3C:8D:70:9C:C8:4C:D8:B2:03:15:72
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer:       /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial:       0197CE0430BAFFBA357FF970C3C271EFE562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number:          15C6
Signing time:             Thu 03 Jul 2025 02:01:10 +0000
Manifest this update:     Thu 03 Jul 2025 02:01:10 +0000
Manifest next update:     Fri 04 Jul 2025 02:01:10 +0000
Files and hashes:         1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
                          2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
                          3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: PjTRXsZWSjqUSKfkZt7t7m20/toi5E/qRNYY3O2I1Dk=)
                          4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:04:30:ba:ff:ba:35:7f:f9:70:c3:c2:71:ef:e5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
        Validity
            Not Before: Jul  3 02:01:10 2025 GMT
            Not After : Jul  4 02:01:10 2025 GMT
        Subject: CN=d097ea61816d5505313c8d709cc84cd8b2031572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:48:48:db:6a:c0:cb:7d:84:cb:92:72:d8:
                    ff:33:ce:5c:bc:fe:28:75:10:1b:1b:69:90:1d:6c:
                    bd:ca:0d:2c:46:bc:e1:c6:74:1b:3f:1b:46:0c:ea:
                    e7:71:93:d9:f3:18:45:c0:5d:36:0d:0e:26:27:2e:
                    62:7c:8a:5d:ca:66:6f:48:ea:98:f2:5d:a8:29:2f:
                    c9:cf:cf:a2:eb:1e:d3:2b:a9:27:25:d5:f5:dd:57:
                    16:79:31:8f:67:c3:14:09:aa:9c:52:7d:a4:15:5a:
                    92:30:1e:9b:6b:8d:c0:9e:13:aa:82:e5:a7:16:1e:
                    a8:34:da:53:0d:44:6d:03:2a:4f:f0:ee:c1:05:94:
                    d9:16:78:4c:f3:37:4c:77:1c:0a:7d:58:ac:f9:11:
                    fd:54:32:22:1b:7f:f1:da:e8:06:18:2e:d0:5c:89:
                    ee:4c:68:d8:6c:98:63:83:a5:ae:d4:4c:33:81:af:
                    1d:63:62:89:fe:ba:6d:dd:2b:b3:92:32:94:d6:d2:
                    22:de:0b:a7:29:87:42:65:55:88:b5:d2:a0:9c:b5:
                    dd:23:e6:18:c0:60:67:12:51:5a:13:e7:86:7c:8f:
                    ed:da:18:7b:94:61:23:eb:87:e6:60:1a:ee:68:1b:
                    89:3c:6b:a5:29:86:5d:54:01:05:14:f0:37:f3:43:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:EA:61:81:6D:55:05:31:3C:8D:70:9C:C8:4C:D8:B2:03:15:72
            X509v3 Authority Key Identifier:
                keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f8:8e:e3:f1:c3:a7:10:e3:4d:2b:da:2a:e8:cc:63:e0:9e:
         27:52:cc:b2:23:d7:c4:93:1e:51:3d:04:6e:24:7a:40:ec:85:
         cf:d7:34:cd:8e:25:a5:90:77:8e:ce:00:a0:14:3d:40:6c:05:
         ae:b7:5e:7f:02:be:a1:0a:34:10:92:3e:77:0e:c2:da:a9:6b:
         15:55:43:5d:3f:fc:32:d3:17:6f:0c:6d:5b:e8:47:b2:27:44:
         a8:db:25:9e:96:fd:20:27:9e:bb:3d:6a:71:bf:52:27:bd:4e:
         f4:5e:39:91:97:e4:37:c7:75:a9:45:b3:a3:f1:de:36:20:5c:
         82:fe:de:8b:91:b9:42:e3:a2:c4:b0:6b:bd:46:73:7b:ec:b5:
         3e:0a:3e:77:2e:e7:2b:93:fd:d1:75:4d:43:7b:7b:b7:62:3d:
         8c:a6:7f:ec:53:bd:ca:1b:51:48:f5:ad:8b:fa:c0:c5:fe:6e:
         c0:29:3d:4b:1d:bd:71:50:e8:05:1e:61:33:5e:5a:35:ab:ff:
         86:52:0e:31:86:16:d2:d0:70:71:d3:b1:5b:12:e7:7f:ef:79:
         d8:d4:c3:7d:75:c7:65:a5:07:a5:a2:d8:f3:b6:91:f8:88:45:
         fc:75:67:1f:88:a9:dc:a5:3f:01:0f:f8:48:73:9f:f5:4f:a0:
         33:63:3c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:15:04 2025 by rpki-client