Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File:                     TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier:          Un4y94Iei39BYmgFlrkSkvRtq3lVTnPPjhchMKUtnBc=
Subject key identifier:   75:3E:59:73:39:60:2F:58:46:77:67:74:DF:E5:D7:60:1D:F9:27:DF
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer:       /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial:       0196895C4426CD9FBF0A23D6207A3411393F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number:          3A
Signing time:             Thu 01 May 2025 01:00:47 +0000
Manifest this update:     Thu 01 May 2025 01:00:47 +0000
Manifest next update:     Fri 02 May 2025 01:00:47 +0000
Files and hashes:         1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: 7gHCd/A3ST1EXcSLDKvqgCIVQtoEjTkFO1JUd8LZYN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5c:44:26:cd:9f:bf:0a:23:d6:20:7a:34:11:39:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
        Validity
            Not Before: May  1 01:00:47 2025 GMT
            Not After : May  2 01:00:47 2025 GMT
        Subject: CN=753e597339602f5846776774dfe5d7601df927df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:41:c5:a5:0d:3e:f6:80:b3:81:06:c9:95:
                    60:ae:34:51:1f:c6:7b:24:22:98:1f:5f:7a:0d:06:
                    db:16:47:f1:70:b3:94:f2:38:57:25:96:09:a0:38:
                    d8:6f:d2:8f:06:47:0a:9c:52:9b:26:fc:68:50:e3:
                    99:7f:e1:a5:f6:c8:1a:6e:56:36:8b:9c:66:30:b6:
                    8a:4d:26:53:e6:17:24:e3:4b:55:cb:a8:d8:61:98:
                    9f:3d:af:f7:22:18:44:a2:1c:9c:48:bd:f0:24:0a:
                    dc:08:c0:2a:e2:ac:87:ea:14:e3:c8:5b:15:93:b7:
                    f5:c9:8c:64:bd:70:d7:bb:6f:4e:b7:31:f3:2b:67:
                    22:1e:b2:f3:c3:2b:a7:92:ac:b9:ff:4f:01:2c:1f:
                    d5:f8:b9:06:2a:d6:95:7f:b9:ed:ac:bb:21:df:2c:
                    f3:7e:d7:d7:cb:c5:6a:1e:9d:e0:8b:42:f7:1d:01:
                    0f:c9:ce:61:5c:92:e4:17:f4:8b:e4:b5:46:c7:fd:
                    f6:d5:2f:cf:76:74:46:73:0a:f8:9c:e3:45:ee:db:
                    3a:ff:cb:74:cd:12:bc:bd:a3:b5:ce:34:d1:97:8a:
                    7b:9d:72:3b:eb:68:70:76:6b:fa:be:85:a1:c7:bd:
                    4a:7f:87:fb:e6:0d:30:1d:09:5c:2a:32:f7:d5:31:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3E:59:73:39:60:2F:58:46:77:67:74:DF:E5:D7:60:1D:F9:27:DF
            X509v3 Authority Key Identifier:
                keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9e:57:c3:78:b4:06:2c:06:19:8d:cd:ed:54:30:6f:de:f0:
         c4:32:10:61:2c:7b:25:dc:6b:b8:29:9e:ca:c1:69:86:4b:d4:
         11:09:40:c6:4f:36:47:19:27:81:c7:a3:56:67:37:ab:2e:2f:
         1e:30:54:57:8d:fe:d5:6a:c2:4f:da:0c:92:e2:e1:c8:d0:79:
         f4:6b:27:90:46:03:5f:62:57:f6:3a:92:91:f2:30:e2:07:fc:
         b0:37:10:1a:0d:e1:df:51:6d:4a:a4:bf:d7:cb:b3:2d:7f:9e:
         ce:e6:ed:c8:94:3b:54:96:b5:80:4f:c0:f4:19:5e:c2:3c:60:
         81:c3:12:e2:da:27:ee:8c:28:b3:de:59:ad:c4:d1:54:29:ae:
         6c:a3:f8:33:79:02:ee:df:1b:df:92:81:39:a6:5d:de:1c:7a:
         4d:ac:d3:e8:75:84:b7:5a:1f:27:3b:db:bb:aa:08:59:21:ff:
         7f:8d:7e:f6:f3:97:04:af:6f:a9:34:eb:04:41:0e:be:09:a2:
         a0:fa:32:af:b0:93:f0:25:2b:63:2e:b0:38:66:c1:d5:76:69:
         81:38:96:d8:2f:d9:59:33:2c:d6:f8:dd:b5:74:d7:08:fa:e1:
         aa:d8:86:f1:83:54:b7:56:14:b9:a2:34:48:0e:4d:a2:16:93:
         ce:6b:d0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:37 2025 by rpki-client