Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
File:                     TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json)
Hash identifier:          TmZaWt+8prb6TYKRakjcKdemshmSnjDCunKP/klQVzw=
Subject key identifier:   06:CA:DB:CE:10:2E:91:47:F0:78:90:CA:59:9D:93:91:A3:49:C8:74
Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
Certificate issuer:       /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Certificate serial:       019772D1CF6A33F213A949C60A7981DBD7B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
Manifest number:          0674
Signing time:             Sun 15 Jun 2025 09:00:42 +0000
Manifest this update:     Sun 15 Jun 2025 09:00:42 +0000
Manifest next update:     Mon 16 Jun 2025 09:00:42 +0000
Files and hashes:         1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: RzEtfl1j8oiMfQA/rCWc9CW5hoWr0TKmrlZ2SADOa5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:d1:cf:6a:33:f2:13:a9:49:c6:0a:79:81:db:d7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
        Validity
            Not Before: Jun 15 09:00:42 2025 GMT
            Not After : Jun 16 09:00:42 2025 GMT
        Subject: CN=06cadbce102e9147f07890ca599d9391a349c874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:7f:30:db:e8:9f:62:2c:c9:e6:b0:0d:e1:
                    f5:a0:7b:95:81:2a:fe:60:27:8d:78:d9:8e:59:82:
                    85:70:6f:49:de:cd:dd:86:8f:3e:80:b1:84:b8:4d:
                    53:bf:ef:e6:fd:af:4f:60:91:4d:ad:00:31:98:9a:
                    2a:ff:78:1c:2e:fd:16:b5:cd:9d:aa:13:54:c2:91:
                    83:58:32:42:e8:89:75:75:38:b4:44:09:c1:f6:c6:
                    da:20:ef:c7:ac:b7:2c:2e:68:6a:4c:67:23:34:30:
                    01:71:10:aa:ce:44:cf:c9:c4:13:26:65:3d:2e:1a:
                    ac:f7:60:5b:24:0d:f9:0c:4a:83:33:01:84:2d:70:
                    c4:4a:c1:52:f0:5a:40:28:49:e3:bc:f0:c8:49:45:
                    f3:10:32:35:da:f4:b5:3d:a3:83:e2:ce:88:51:5a:
                    9d:60:96:ea:43:ec:ab:59:7e:48:ac:b1:02:ff:09:
                    29:a4:0b:dd:b4:5f:d2:4d:ee:f7:09:e0:ef:2c:aa:
                    95:dd:61:7a:8c:19:d4:ea:5b:1d:8d:9f:78:a5:65:
                    fa:a7:2c:e5:95:0d:79:d3:85:98:6b:7e:96:e3:55:
                    12:9a:b8:9b:72:c0:43:28:45:9f:cd:2a:fd:99:cb:
                    e2:ad:bd:fa:11:74:d8:a2:f4:be:90:ed:8c:ee:59:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CA:DB:CE:10:2E:91:47:F0:78:90:CA:59:9D:93:91:A3:49:C8:74
            X509v3 Authority Key Identifier:
                keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ae:80:fc:aa:9d:ee:be:ac:37:ca:6d:15:13:c7:e6:dc:43:
         5e:0d:04:1f:a3:0a:fb:25:6c:59:8f:74:9a:e4:d1:a3:35:28:
         29:f7:a1:4d:3d:4d:d9:08:ff:c6:ce:11:67:78:8c:2e:cb:82:
         77:fc:62:51:02:b6:d9:40:9f:7e:58:be:85:2a:a4:4d:54:f0:
         2d:5d:9e:a7:08:62:ba:ed:39:4d:f4:c3:f9:88:05:0c:d7:48:
         57:60:fc:ba:55:5d:ee:11:2f:34:9e:60:74:84:26:a6:9d:38:
         22:aa:2a:bf:3d:1d:9c:09:ed:8e:5a:48:ab:95:f3:39:68:91:
         12:26:c6:7d:be:e4:b0:fc:fb:ac:f8:87:9e:cf:3b:b1:b0:0e:
         fe:d1:ab:43:4c:bd:43:07:e7:4d:d3:2b:e1:61:65:da:45:7f:
         69:15:98:95:88:c9:64:5a:29:e5:49:ad:47:75:67:bd:d0:0b:
         3e:a9:d7:a4:9c:1b:5e:40:bb:ad:aa:fe:da:2a:c0:1a:f9:15:
         76:7b:0f:7a:e3:56:19:3f:11:67:83:91:80:00:b3:f7:22:9f:
         ea:c7:8b:29:e7:bc:40:fb:86:da:f9:cb:6d:65:9d:35:78:8f:
         58:1a:e6:c5:b3:d6:00:7e:d6:32:b9:e0:16:14:5b:9e:7f:3d:
         2f:df:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:24:52 2025 by rpki-client