Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File:                     tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier:          LTJyDXYfsxvfUdtXKySr3zyIGjB0QoJAf5YAl/5kn4s=
Subject key identifier:   EA:63:37:55:CB:B9:98:22:66:00:4C:E6:20:93:CB:6F:B2:DB:29:ED
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer:       /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial:       01976C6250906006078B235601CFA6CB54FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number:          0F8A
Signing time:             Sat 14 Jun 2025 03:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:11 +0000
Files and hashes:         1: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (hash: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=)
                          2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: /Wea29TrqfjYtAzUplS9DeplM0btaIo7Eol4Re6cUok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:50:90:60:06:07:8b:23:56:01:cf:a6:cb:54:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
        Validity
            Not Before: Jun 14 03:01:11 2025 GMT
            Not After : Jun 15 03:01:11 2025 GMT
        Subject: CN=ea633755cbb9982266004ce62093cb6fb2db29ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:eb:ef:cf:aa:18:24:b5:7f:08:34:94:4e:
                    52:dd:1a:2e:51:45:f4:6d:1d:77:de:ae:0c:d3:f4:
                    81:bf:6a:d5:c2:1e:3c:5c:9b:a8:31:2d:79:2e:9f:
                    59:6a:c8:ff:e7:bb:6a:e0:b8:c1:65:9a:ab:56:a8:
                    2f:e4:25:87:42:c9:99:f4:97:f9:f0:61:b4:18:f3:
                    3d:5b:85:94:17:a6:2e:9f:62:d7:87:2d:c9:33:e7:
                    39:ea:f7:40:b1:32:36:46:57:1b:95:b4:3f:86:1d:
                    54:1b:f6:c0:e1:bb:52:35:87:0d:d2:db:13:6e:68:
                    88:51:01:f7:6c:ea:e8:ff:52:8a:d1:2e:32:29:dd:
                    6c:b7:ab:f1:b5:4e:ce:c6:17:50:61:00:0b:98:ad:
                    3f:52:91:ee:74:55:28:39:d3:02:15:a6:d1:8d:fb:
                    0d:23:2d:29:f5:ab:58:ad:fd:02:63:d1:09:5a:eb:
                    5c:0e:f6:3c:4e:3a:bc:b4:ca:3c:d7:5b:95:fc:df:
                    08:89:9a:61:9c:fa:a1:4c:84:5b:c9:7b:b2:8c:ea:
                    17:18:df:8b:b6:3e:04:f6:51:08:11:bc:9b:9a:78:
                    3b:5a:90:bd:de:d4:fa:06:e3:01:74:0a:50:ef:5d:
                    d1:e9:56:8d:a8:d3:df:3d:30:79:9a:9a:00:9f:1c:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:63:37:55:CB:B9:98:22:66:00:4C:E6:20:93:CB:6F:B2:DB:29:ED
            X509v3 Authority Key Identifier:
                keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:84:98:a1:ae:f8:3c:f2:20:28:ae:f3:59:3a:b4:9a:2c:16:
         fb:79:b6:c2:41:0f:4f:a2:3f:da:17:1f:15:4f:4b:0f:2e:a3:
         48:82:73:27:c8:cb:0a:a9:35:32:e3:8d:29:de:02:42:28:4c:
         0d:68:46:19:ee:b6:71:4c:e3:b0:85:30:52:b0:46:3f:13:5c:
         6a:d3:ff:16:ec:e1:2b:48:c4:06:09:43:f3:5d:7c:42:87:d5:
         37:7f:0e:ab:a5:7f:25:ac:58:ce:a9:da:e4:0e:87:cb:50:78:
         89:5f:ff:04:42:32:05:31:5c:34:83:76:f0:d4:10:61:ba:5a:
         40:4b:2c:de:fc:18:06:2e:3e:f7:f3:e7:bd:d0:3c:11:58:00:
         c9:22:c2:3d:cc:76:d8:24:29:49:18:f5:b3:ca:20:54:33:fd:
         2b:2e:b6:0e:85:63:30:1b:cc:17:c0:70:b5:3b:ca:b8:56:3a:
         a2:21:6c:33:be:a6:39:b9:b0:e8:8b:e3:f7:e6:66:f0:45:ba:
         c3:ec:25:68:62:23:3b:cb:42:e0:d8:13:26:63:d8:74:9e:ff:
         9f:fd:21:65:a1:a1:bc:65:7d:30:5f:d6:cf:a3:67:01:82:3c:
         70:ef:6a:f1:dc:ef:af:fd:c8:c3:b3:9b:ea:26:6e:f4:a0:2f:
         de:cd:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:56 2025 by rpki-client