Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
File:                     tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft (raw, json)
Hash identifier:          CNxrqHkSSXrBEmRLuotErCL/d0zgfcAxmnHteoLNwos=
Subject key identifier:   D6:25:50:97:2F:39:FB:5F:0F:81:3E:04:53:E9:31:42:7B:86:1E:2B
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Certificate issuer:       /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial:       0196741D86605620809D6C5337646C908EF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
Manifest number:          150E
Signing time:             Sat 26 Apr 2025 22:00:14 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:14 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:14 +0000
Files and hashes:         1: 4BOoh9ZvRlX2US_OZJ_A9kCTrtI.roa (hash: +tR3y1xSs3M/3+ZhTBHMrJWVz7B8nzvm5Sr9MdXyV2U=)
                          2: Kn6zCRrJAIpDU3vbBWFNfgedDNo.roa (hash: azRFjdZrexayFU12UNmkO7T6vISzK8GYJvKGqUFKldQ=)
                          3: eIluNbW1Lh7F9iIJxb6GVbd5mxQ.roa (hash: d+Tkp5gG5B2wX0ED2hhsWjApqTUL3iqth+z1QSZwDac=)
                          4: tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl (hash: rnNmlHnq+/nCPyETFwBCx/D2EQbcwjbM6G14chxphWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1d:86:60:56:20:80:9d:6c:53:37:64:6c:90:8e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
        Validity
            Not Before: Apr 26 22:00:14 2025 GMT
            Not After : Apr 27 22:00:14 2025 GMT
        Subject: CN=d62550972f39fb5f0f813e0453e931427b861e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:ec:25:8e:79:03:8a:72:67:e5:52:fc:e9:
                    d7:55:6d:2f:05:b2:b0:fc:d1:61:d7:18:09:9e:45:
                    96:40:46:c9:f3:4b:b4:f2:02:4f:13:c8:a5:91:f5:
                    bc:40:4a:41:55:10:fd:c8:82:94:c3:7c:d8:1c:d0:
                    37:03:8f:8a:a3:27:20:e5:bd:26:94:2e:10:0d:18:
                    36:eb:82:fa:70:cb:70:cf:ef:f9:81:30:68:71:2c:
                    73:c8:13:3b:a4:f3:10:52:03:e8:9d:22:62:2f:04:
                    78:92:c5:61:ff:8f:a0:d1:65:13:0a:76:38:3e:fc:
                    65:c5:84:e7:d9:54:7f:62:61:bf:04:c4:66:86:2b:
                    f5:5b:e4:1b:2c:1e:13:8e:e8:1f:60:5b:bf:57:ba:
                    ff:f9:2a:32:0a:45:93:ce:4d:2b:91:20:2d:c3:14:
                    d9:2e:5f:23:ac:22:c0:fe:e1:ed:eb:9e:27:09:d1:
                    e9:13:10:c0:14:57:f2:db:b8:9e:20:e0:2c:30:22:
                    0b:37:0d:35:d0:57:2f:a8:54:ad:b2:79:23:3a:91:
                    72:83:bc:60:37:96:fa:a2:8b:01:28:08:cf:00:cc:
                    71:9c:6c:3a:44:cf:30:49:20:28:6a:d3:1e:14:9c:
                    90:92:13:62:0c:aa:f3:65:62:20:a4:c1:3d:b6:4f:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:25:50:97:2F:39:FB:5F:0F:81:3E:04:53:E9:31:42:7B:86:1E:2B
            X509v3 Authority Key Identifier:
                keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:82:91:bf:61:ee:19:b5:7d:59:8e:db:26:46:ea:16:98:93:
         8e:ee:cc:a9:05:cc:e6:2b:e0:0f:86:c4:c6:a6:f0:47:58:01:
         fd:f1:71:7f:bc:e4:2e:03:51:35:05:8a:07:b5:0f:61:14:9f:
         46:57:20:0a:6b:fc:cb:14:1c:65:4f:5a:ef:55:56:17:2e:5e:
         56:e8:14:f8:12:3e:e8:27:8d:3a:d0:e3:37:ae:98:75:89:68:
         03:d0:92:82:0b:d5:85:78:fb:76:d2:7e:91:4a:fd:f3:6b:16:
         04:33:f2:14:38:bd:68:1f:48:ca:90:b9:e8:5a:b3:ad:63:0a:
         3e:e3:01:c1:56:62:10:ad:71:66:6b:6d:b7:3b:d6:94:3f:f0:
         22:88:7b:32:03:5a:a3:24:74:31:ae:ea:e3:e9:ed:08:6f:68:
         51:73:51:75:a7:f6:13:0b:96:d4:e8:bd:ca:90:48:64:62:b0:
         d6:81:67:e4:0c:92:37:79:e0:dd:45:26:6e:4e:28:88:cc:cd:
         a4:73:a4:b3:2d:2d:e8:24:ed:09:c1:7c:4a:be:47:33:1d:e6:
         8b:e7:7a:a0:e7:90:c7:3c:f1:ee:ff:45:12:b4:0b:21:3e:73:
         c7:82:85:b2:ad:50:55:39:3c:f9:bb:69:ed:1e:0b:1f:5a:e6:
         fe:99:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:26:28 2025 by rpki-client