Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
File:                     tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft (raw, json)
Hash identifier:          u8iukBK7qSTwZEb3gDV01XvAhRg0xgljfM8IEYyW+Vo=
Subject key identifier:   00:35:4F:3A:0D:65:B9:C6:A7:16:EF:E1:52:90:B6:9F:94:60:37:40
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Certificate issuer:       /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial:       019771F663EBC16A8129B4E333DC820CAFFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
Manifest number:          1593
Signing time:             Sun 15 Jun 2025 05:01:02 +0000
Manifest this update:     Sun 15 Jun 2025 05:01:02 +0000
Manifest next update:     Mon 16 Jun 2025 05:01:02 +0000
Files and hashes:         1: 6vMVm2zjHnS6jWGvj_JPBPoIejQ.roa (hash: WRnwpfl8kuTVj7apaEiYFn6tm3l6ZkpWo7ENQmbJBXw=)
                          2: tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl (hash: b8+6Ij3T0jKmDS++/D4p7baT/lFxNBKHoBYhoZsQ0BQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:63:eb:c1:6a:81:29:b4:e3:33:dc:82:0c:af:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
        Validity
            Not Before: Jun 15 05:01:02 2025 GMT
            Not After : Jun 16 05:01:02 2025 GMT
        Subject: CN=00354f3a0d65b9c6a716efe15290b69f94603740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:0e:de:e3:2a:d7:64:54:8d:12:90:01:68:
                    b4:ac:31:78:18:df:91:76:e5:ac:50:38:06:59:bc:
                    c0:f5:0e:d8:57:d3:c3:7c:17:ea:4b:8a:c8:e5:a9:
                    87:d1:c9:77:da:4a:b5:b6:d4:de:07:0b:69:c8:7b:
                    2a:97:b6:dd:42:ce:96:8a:1e:d6:3c:1e:c2:32:8c:
                    e6:b3:26:20:f2:f6:39:a9:b4:f9:ac:13:d6:3f:21:
                    fc:f4:26:1d:76:f5:d7:dc:08:20:c7:ee:b4:07:16:
                    f1:fc:fa:d5:40:e3:8d:c3:4a:53:a8:e0:3c:b6:34:
                    16:d9:54:ba:70:cd:69:c5:91:b7:7f:c7:4e:70:bd:
                    be:ff:d0:10:2c:ae:8e:92:21:31:9b:8c:b8:46:9f:
                    9c:78:70:98:ce:b9:22:45:15:27:69:eb:e2:10:7d:
                    94:7b:8d:d6:a8:3a:b4:da:99:ea:cd:a4:7a:f4:8f:
                    59:dd:96:50:df:83:8c:19:a7:8c:1e:ba:ae:ba:ae:
                    a0:01:89:23:b8:e1:cc:c5:2b:d1:66:9b:99:2b:f5:
                    fd:28:0b:5d:fb:a7:3e:16:65:d1:c6:da:a2:4e:4e:
                    6e:ba:59:8c:3a:30:68:24:7b:cd:3d:f9:0b:79:64:
                    46:d7:4d:5d:e9:a6:b9:70:c1:d0:8d:d2:ed:fb:92:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:35:4F:3A:0D:65:B9:C6:A7:16:EF:E1:52:90:B6:9F:94:60:37:40
            X509v3 Authority Key Identifier:
                keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cd:d0:4a:68:87:ad:c6:b5:79:a4:c6:88:98:8b:28:8d:d2:
         a7:e8:1d:98:24:03:a0:5f:cf:89:9a:c9:e6:2a:0d:3e:23:91:
         de:de:69:83:a8:62:8e:23:10:f7:50:9d:c7:8b:ab:d5:e4:dc:
         57:2c:6c:46:a1:b7:19:08:e6:e1:54:e8:0d:42:03:91:d5:78:
         f1:95:03:53:44:38:87:40:1a:ae:da:07:5d:4a:71:6c:7e:a1:
         30:73:2b:62:d4:ba:96:40:1a:43:9e:76:4d:8e:5a:87:af:68:
         d1:87:cc:5b:53:ec:83:20:65:f5:fd:eb:1f:9b:ed:95:09:d8:
         89:1b:e0:ac:cd:eb:7d:27:70:67:3d:c0:80:aa:2d:08:2d:10:
         29:b6:55:33:8c:b3:f7:1e:4d:58:72:88:cd:6c:ce:bb:0b:ed:
         9d:f9:bc:88:87:aa:4e:ae:f6:5f:45:81:5d:8b:88:97:47:8b:
         6e:bf:3a:cd:91:0f:8a:ef:e6:70:c9:33:c3:f5:54:da:bf:11:
         08:91:18:37:9e:6a:dd:2f:e1:93:72:16:3e:75:25:0f:ce:00:
         d0:15:8f:99:e1:60:87:ac:c6:09:44:c7:2a:eb:84:00:7d:4f:
         c1:e6:76:08:5a:92:ed:2e:8f:ff:ae:10:75:4c:51:c8:97:b7:
         bf:ef:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:00:27 2025 by rpki-client