Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File:                     TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier:          hTcETPMh/28LEKxEPwMqxCTYoYwGAAXK6wJttd8KxWQ=
Subject key identifier:   47:7E:8B:F5:EA:A1:E0:A7:57:C5:68:48:64:70:4E:43:F4:FB:58:B7
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer:       /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial:       0196A653ECFDAEE300B56CBD4178FFF93721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number:          07EA
Signing time:             Tue 06 May 2025 16:00:40 +0000
Manifest this update:     Tue 06 May 2025 16:00:40 +0000
Manifest next update:     Wed 07 May 2025 16:00:40 +0000
Files and hashes:         1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: mfGgmTGozkdUdJ52WJJl9ui98zmPRrSCa2lh6pkJ93Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:53:ec:fd:ae:e3:00:b5:6c:bd:41:78:ff:f9:37:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
        Validity
            Not Before: May  6 16:00:40 2025 GMT
            Not After : May  7 16:00:40 2025 GMT
        Subject: CN=477e8bf5eaa1e0a757c5684864704e43f4fb58b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:38:64:96:2c:90:83:b9:1a:ba:15:28:33:
                    d5:6f:4f:a7:92:bf:ce:5a:d5:41:bd:69:50:11:48:
                    bc:5e:4d:a0:71:d5:23:fe:88:98:c9:dd:6a:7e:a1:
                    4f:12:9e:92:35:3d:5c:5d:80:1a:30:fe:6e:d9:3e:
                    ab:3a:ab:5b:05:55:71:f3:f5:48:7d:90:be:18:34:
                    1e:6f:7b:8a:8f:e6:5d:e2:1b:ac:b5:b9:da:e2:37:
                    a8:3b:dd:ae:60:34:af:7c:e9:6c:ce:c4:d0:66:25:
                    73:26:c8:e8:e9:e2:dd:35:48:b2:b7:6a:1d:3a:c8:
                    b9:8b:7f:db:43:8d:a6:1e:3a:4b:3d:67:0c:50:ad:
                    aa:2b:69:46:45:87:2e:e4:50:63:9e:24:82:13:77:
                    6b:b7:5b:03:a2:c0:26:38:82:3b:51:64:11:e9:e8:
                    fc:d8:ce:3e:e9:c6:e0:56:62:39:94:44:25:14:e7:
                    a5:00:52:7b:14:1d:e9:a0:f9:7d:fb:1c:ce:44:c3:
                    2b:01:71:fb:c1:29:c5:82:69:fc:ac:7b:bd:36:e2:
                    5b:5e:9c:db:ab:88:b8:5b:db:9c:50:1f:a5:22:4d:
                    34:61:4d:24:f9:c6:fc:06:15:78:b0:6b:33:cf:0d:
                    f1:c7:c6:4b:48:4f:26:9f:45:ee:99:31:3c:16:6e:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7E:8B:F5:EA:A1:E0:A7:57:C5:68:48:64:70:4E:43:F4:FB:58:B7
            X509v3 Authority Key Identifier:
                keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:46:1d:40:7c:0b:dd:3b:89:50:1f:23:61:4c:f3:f6:4f:b7:
         31:a8:76:87:67:fc:04:99:0f:14:53:67:a7:77:80:5a:07:08:
         b1:2a:58:e7:7f:1e:fc:c6:34:6c:ee:d9:84:b0:ae:09:64:20:
         13:ac:f5:48:52:31:e3:e0:ef:0d:e1:7a:9f:70:f8:de:a2:a0:
         cc:20:08:46:3a:46:32:ec:ca:1d:80:80:7a:b1:9a:f6:73:98:
         d4:8b:b6:d8:2d:09:fe:cd:04:b4:94:0a:92:84:a1:f1:90:bb:
         9b:99:bd:49:65:61:9d:68:de:c4:5a:83:b6:1d:5a:07:eb:ff:
         15:e9:16:6b:35:a9:7c:be:95:91:11:fc:5f:ac:51:26:26:dd:
         63:3a:b5:5a:1e:e2:8f:50:6c:21:3b:17:4d:29:37:06:d4:04:
         08:95:40:6a:a0:8d:03:0c:48:62:6d:5c:00:ce:8c:18:95:72:
         83:15:29:c7:17:8a:cd:bb:2a:1d:a1:6b:89:ea:2b:2a:9d:e2:
         bb:da:dd:2b:ba:29:67:86:df:d0:3a:4e:33:6a:eb:5d:17:90:
         09:a2:ed:8a:d8:67:e7:6e:76:0f:06:24:04:1c:39:7c:c4:ac:
         0a:d1:b9:0b:46:37:9b:06:46:45:1d:83:fd:e3:b4:ae:be:6b:
         22:54:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:56:38 2025 by rpki-client