Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
File:                     Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft (raw, json)
Hash identifier:          bBJkJJt86wFMerF7Vvhupla9MlSEzQY1WCHAGX1kIvw=
Subject key identifier:   AA:26:5F:B4:32:C5:FE:AD:C1:3D:F1:71:B5:F8:8A:64:CB:18:E5:DC
Authority key identifier: 4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
Certificate issuer:       /CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Certificate serial:       019769CE934E6B07E967BF22FDD11C29B6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
Manifest number:          126A
Signing time:             Fri 13 Jun 2025 15:00:35 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:35 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:35 +0000
Files and hashes:         1: Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl (hash: O/BqQWMqrwNl7wsou71s93G+2VZrSUuaF9zPE5ik3Qg=)
                          2: fQVuwKT50hbkCaxxsedkAc4v4DM.roa (hash: 7+f7vmuufbnUl5kubA16fvBKejBnvUX170UQ3Kwi8yM=)
                          3: yI_RXXqJUefuh1flF2oTn9wC4DI.roa (hash: j2h6Y5w4TEDmVG2v4OM8fOFhUfhpchqy4oEvpRV83t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:93:4e:6b:07:e9:67:bf:22:fd:d1:1c:29:b6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
        Validity
            Not Before: Jun 13 15:00:35 2025 GMT
            Not After : Jun 14 15:00:35 2025 GMT
        Subject: CN=aa265fb432c5feadc13df171b5f88a64cb18e5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:e6:67:d5:0e:34:d7:c1:2d:4c:64:47:29:
                    5d:1b:a4:d2:b4:37:f5:55:6c:d9:59:9f:01:b9:b0:
                    1a:5f:25:57:ba:ce:0c:ca:f6:85:e2:d8:17:8c:8b:
                    78:44:e3:bb:cd:f1:09:79:15:c4:cd:40:d7:d0:4f:
                    b1:d9:d1:f0:1f:03:70:4a:c8:cc:f1:d7:f3:4a:f4:
                    4b:de:72:c7:27:0f:a7:3d:57:46:c8:4f:d0:7c:0b:
                    d7:b8:be:3c:11:c8:f6:a2:88:b0:88:74:3e:0b:a9:
                    04:4c:e0:5b:ee:1d:94:b5:86:f4:a4:e0:94:2f:88:
                    84:57:3e:14:a0:42:35:a1:d8:a0:52:8e:2c:b0:d9:
                    44:b6:b4:38:ab:bf:cd:0d:13:cb:f8:d2:5d:5c:d6:
                    95:e9:10:11:37:56:67:50:9d:43:e3:af:17:8b:9f:
                    67:0e:db:94:c8:19:d2:c9:b7:c4:29:fb:bd:e7:8c:
                    45:9f:3f:84:81:d0:f2:af:87:24:27:67:a4:2d:e5:
                    c8:de:e7:c3:01:2a:70:ce:88:81:df:e0:01:41:6f:
                    9d:ef:1a:76:6a:26:1b:fe:9a:f8:39:eb:d8:03:cb:
                    2e:48:11:f0:d2:05:fd:06:ca:8a:4b:43:65:14:5f:
                    99:48:01:dd:7e:9d:b2:8e:6a:cf:61:e0:ac:ce:23:
                    bd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:26:5F:B4:32:C5:FE:AD:C1:3D:F1:71:B5:F8:8A:64:CB:18:E5:DC
            X509v3 Authority Key Identifier:
                keyid:4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:98:f3:1b:5d:0d:c6:f6:da:30:81:cd:8c:b9:9c:e7:60:
         0e:d5:49:6c:02:92:7c:2b:81:89:e7:4b:05:6c:92:28:10:36:
         ee:c8:56:59:5d:06:e1:18:3d:57:40:e4:eb:b8:c6:e3:2a:f5:
         13:20:32:21:91:7b:ac:bb:75:38:77:c6:82:d8:87:47:17:59:
         7d:90:1b:7e:70:32:a8:82:69:7c:76:f8:44:77:0f:29:4b:c4:
         b6:30:b3:cc:91:b8:37:79:60:56:17:fc:b8:5c:83:8c:d4:92:
         de:61:d0:76:74:c9:2d:b0:78:f6:50:ef:7f:9d:28:b2:32:66:
         61:1c:ce:6e:3a:57:95:3c:ed:b4:cf:16:e2:be:64:04:20:2d:
         a2:da:3f:8a:80:c5:d5:8e:6a:b0:a7:1d:39:e9:7f:de:39:c4:
         b3:d6:7d:ce:a2:e0:f9:45:8e:c3:a3:9d:3f:5e:fd:49:dc:5d:
         84:26:0c:b7:3b:11:ce:25:d2:0b:36:9e:61:d6:38:9a:e4:14:
         fb:4d:5d:1c:ec:c1:90:03:1b:4d:0e:5c:02:59:a6:ad:8d:ec:
         b6:51:50:0c:d6:77:06:cf:25:85:f3:17:f7:75:d9:c8:c7:da:
         53:b7:c0:de:66:32:61:9f:25:5b:d1:51:1e:13:b2:6a:23:de:
         9a:df:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:11 2025 by rpki-client