Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File:                     TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier:          nZ6fX2AKs6I91TlQc3dnLfQNVSd2dzBSeARTfr+yNpU=
Subject key identifier:   C9:44:8C:4F:CE:82:01:CF:A9:34:A7:10:50:F3:13:C8:7D:2C:8D:75
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer:       /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial:       0198820B93644727B09E0AAF14C5DDE14C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number:          15AF
Signing time:             Thu 07 Aug 2025 01:00:53 +0000
Manifest this update:     Thu 07 Aug 2025 01:00:53 +0000
Manifest next update:     Fri 08 Aug 2025 01:00:53 +0000
Files and hashes:         1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: tyjObB7QmPxF7iCqMqq/QKG8AbewjRJczK9c6IiWycQ=)
                          2: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (hash: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:93:64:47:27:b0:9e:0a:af:14:c5:dd:e1:4c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
        Validity
            Not Before: Aug  7 01:00:53 2025 GMT
            Not After : Aug  8 01:00:53 2025 GMT
        Subject: CN=c9448c4fce8201cfa934a71050f313c87d2c8d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:82:df:c8:2a:17:94:1d:34:3d:f7:d8:85:6c:
                    8a:28:a8:80:0f:5c:3f:88:89:b2:cf:d6:5d:ab:6b:
                    88:0c:22:bb:5c:63:25:5f:d1:c0:10:c0:07:45:7f:
                    e9:8e:67:54:42:90:2e:25:18:13:39:32:04:11:eb:
                    f4:48:39:f6:a3:d9:62:d0:cf:a5:09:22:2d:00:82:
                    f1:f9:67:f8:18:e9:27:e0:12:d6:fb:e2:af:ac:78:
                    77:20:b3:53:7d:4f:51:21:7b:a8:fe:8d:b7:ae:c8:
                    70:a4:ba:14:44:63:a4:b2:1f:41:6c:b0:ec:59:30:
                    76:dd:0a:ad:81:a5:8c:ad:75:a1:95:a8:c0:24:25:
                    d7:fc:69:8a:97:ae:62:29:9a:4f:68:bd:9b:5e:8d:
                    30:a3:48:4c:4e:4f:30:59:f3:cb:f0:23:89:de:7b:
                    e6:a7:90:dc:b2:f0:82:bc:a5:35:76:ca:4f:ae:75:
                    d6:47:30:39:07:ce:3c:e5:a9:6c:86:d0:5d:e1:44:
                    84:8e:95:4d:50:1d:43:95:d5:a3:9c:f3:18:7b:ab:
                    09:ae:b8:a9:c1:80:9b:77:7d:ed:b4:cf:02:c1:90:
                    dc:7b:e7:1a:04:74:af:b2:c4:33:4e:97:de:c5:9e:
                    48:3c:42:fe:39:08:d4:7b:e5:aa:de:8f:28:36:2e:
                    00:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:44:8C:4F:CE:82:01:CF:A9:34:A7:10:50:F3:13:C8:7D:2C:8D:75
            X509v3 Authority Key Identifier:
                keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:58:32:61:1a:40:35:88:fd:87:84:a8:f0:32:66:09:b3:
         66:f2:cc:22:49:93:f6:28:fb:49:46:fb:4b:4d:23:81:d6:6d:
         f4:d9:d5:be:59:66:07:5d:44:ac:6d:71:96:e9:2a:95:a7:04:
         88:94:c6:22:f0:87:d4:ec:ed:c1:d0:7c:e6:02:63:d2:36:bd:
         f3:c6:f5:51:ea:65:7c:f7:8f:5f:6a:9a:b4:04:6a:38:ac:c8:
         e5:b7:25:51:6c:60:91:49:6c:f4:61:80:91:49:4f:cc:60:42:
         65:ff:29:9f:80:10:18:dc:ef:2e:5e:d8:16:1f:62:dd:dd:c7:
         f4:67:78:8d:96:d9:b0:fc:ae:f8:2b:dd:04:7d:9f:b3:d4:a6:
         74:3d:1a:c3:fa:17:e4:48:72:b5:4a:72:c6:3c:70:a3:82:cb:
         e6:f4:ec:56:b0:78:b1:23:43:6c:16:5f:d4:9e:c4:4e:28:1f:
         18:43:aa:f8:3d:0e:30:07:be:a4:ec:f9:6a:f8:a5:6b:37:10:
         7f:7f:5c:62:8d:b1:ca:d9:0e:2d:cc:40:44:ac:96:e2:8f:e1:
         2a:20:dc:e8:02:82:8c:73:59:d5:ae:ed:19:48:4d:be:25:55:
         f9:4f:a7:e3:78:f7:da:69:40:77:6a:0b:8b:d8:6b:8d:6a:b3:
         46:46:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:49:32 2025 by rpki-client