Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File:                     tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier:          HhgxhCzvh/F3wPCCOr2IdS9YwIcPeFrmrpeAolQBZQo=
Subject key identifier:   BC:F1:2A:6E:A1:42:8A:64:CF:14:57:CA:63:0E:EE:DA:C8:98:DC:D4
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer:       /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial:       01987D8B1BB48DFC67D90008FB4A2B3F8DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number:          059A
Signing time:             Wed 06 Aug 2025 04:02:05 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:05 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:05 +0000
Files and hashes:         1: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (hash: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=)
                          2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: zWkwBlPAEACchjfZFDSrv230S2kpqVL4u3y2BhgfiNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:1b:b4:8d:fc:67:d9:00:08:fb:4a:2b:3f:8d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
        Validity
            Not Before: Aug  6 04:02:05 2025 GMT
            Not After : Aug  7 04:02:05 2025 GMT
        Subject: CN=bcf12a6ea1428a64cf1457ca630eeedac898dcd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:1b:8b:90:24:29:9f:8b:d6:6c:11:e1:45:
                    5d:64:b5:81:6d:b6:31:c0:cb:f8:d9:fc:58:ab:c4:
                    c5:ae:40:1a:fa:29:f0:ae:75:5b:e5:83:3f:d3:cb:
                    5d:2a:f1:9e:54:1d:08:62:1f:47:73:7c:cd:80:e5:
                    1c:c9:25:25:88:a5:ab:8d:f2:53:17:c0:ad:15:d3:
                    21:79:e8:96:40:9c:88:0b:f7:6f:35:d8:70:3a:eb:
                    e3:ea:3d:8a:73:7c:ae:25:d3:57:2e:a8:a0:1d:f5:
                    26:00:4a:0d:16:ff:2a:1b:ec:84:56:01:0f:92:98:
                    15:bf:3a:b2:6f:1a:76:23:8f:3f:c4:d7:7b:f2:a6:
                    36:60:06:80:86:68:92:5a:6e:a7:49:c0:1f:e8:ae:
                    eb:e8:e1:cb:70:50:80:47:94:59:a1:94:0c:40:c2:
                    0e:ac:61:66:5a:83:38:da:bb:bc:bf:8c:04:1d:7a:
                    f4:08:4e:a7:37:ca:30:e2:48:7f:a4:ad:54:92:3d:
                    70:ff:d1:2d:68:ce:2a:fa:ca:b3:57:25:52:77:a9:
                    70:6e:d7:0d:ef:b7:48:d2:b3:97:c2:3d:a2:00:c0:
                    6c:82:35:46:e6:05:ef:57:9f:8c:e3:0a:14:83:20:
                    4d:19:97:fb:c0:57:85:e1:39:e5:db:db:27:6f:ea:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F1:2A:6E:A1:42:8A:64:CF:14:57:CA:63:0E:EE:DA:C8:98:DC:D4
            X509v3 Authority Key Identifier:
                keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:ac:ac:1c:9e:dd:15:38:f0:ce:4a:f6:6c:23:c4:07:ab:
         9e:bd:ce:db:bc:23:0e:47:9e:d8:b8:2b:be:29:a2:dd:71:c9:
         b0:7e:e1:d5:ac:ac:33:73:55:fe:a0:a8:07:cd:04:66:14:7c:
         c0:8d:81:b1:90:87:11:3b:d0:ee:b2:70:94:18:b9:6d:b5:6e:
         eb:d2:54:ac:0a:7e:04:b7:a3:a3:1e:d7:9f:33:bf:45:4f:f5:
         ea:d3:11:21:d6:95:86:32:2d:5d:11:42:24:84:66:2a:d6:46:
         81:38:5b:0a:1c:17:0e:76:e4:a0:4c:28:b6:6b:d2:84:7c:03:
         de:63:42:c0:72:5e:a4:17:d3:2d:80:1a:25:d4:84:d2:47:22:
         40:b0:79:5c:68:52:55:6b:96:a6:4e:86:24:b2:4d:d8:11:77:
         35:dd:78:36:ba:98:b9:71:6b:bf:49:6d:a3:45:1b:0f:8f:b7:
         bb:72:b0:08:69:ac:21:6c:f5:34:0a:98:bd:c1:c0:ef:57:62:
         f1:85:c0:a5:f7:83:04:81:7e:fb:4e:0c:ce:78:a5:61:0b:af:
         f7:80:f6:de:68:5d:f2:05:ed:91:6c:31:f5:34:00:33:f0:74:
         50:04:e5:47:01:5d:03:d6:91:db:4e:ce:a7:e5:7d:92:36:cf:
         f0:13:95:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:06 2025 by rpki-client