Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File:                     TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier:          ciOLFXtE77weJ+qyLlqS9w1c1FvBaqzJTpVaeJ/v4dM=
Subject key identifier:   1F:1B:E2:52:22:F8:64:6E:52:BA:C9:D5:61:EF:DC:1E:43:21:D7:4F
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer:       /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial:       019673E6C69FB87A314A7ED72602C513F317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number:          1065
Signing time:             Sat 26 Apr 2025 21:00:25 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:25 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:25 +0000
Files and hashes:         1: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (hash: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=)
                          2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: CkE5fCaCkVAUD8HDnb5Iq2TLYoHYyOz5osxNi14jezw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e6:c6:9f:b8:7a:31:4a:7e:d7:26:02:c5:13:f3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
        Validity
            Not Before: Apr 26 21:00:25 2025 GMT
            Not After : Apr 27 21:00:25 2025 GMT
        Subject: CN=1f1be25222f8646e52bac9d561efdc1e4321d74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:68:49:ba:0e:71:b1:23:8a:61:9d:43:70:
                    de:68:f5:7a:a8:e9:22:a8:df:7c:82:15:9e:40:5d:
                    f4:97:e9:ff:f6:a3:3f:de:4a:d1:a2:b8:da:23:38:
                    8f:31:ab:0a:57:03:c0:55:99:4f:02:ed:64:97:84:
                    c1:f1:30:4b:2e:9e:c4:89:e1:ad:9a:ad:10:7e:e2:
                    f8:49:99:2d:08:d7:77:46:84:d1:41:82:fa:29:d1:
                    15:34:4e:87:0d:7e:92:13:78:69:61:cc:ee:9d:ad:
                    79:3b:02:e1:4d:9c:d7:96:81:80:20:5e:a0:fe:90:
                    d9:6f:be:bd:d3:3f:18:42:c7:fa:b9:c0:ce:b9:b9:
                    c0:a5:70:00:a5:a3:95:b6:2c:89:71:cd:45:df:d1:
                    29:15:2d:51:65:91:3f:33:17:19:45:42:4b:98:de:
                    cb:df:da:1c:65:2b:f9:f4:c3:36:9a:08:58:44:5a:
                    57:77:4d:36:c2:ba:93:3c:38:5e:6d:c3:f2:8d:59:
                    f7:f7:4b:4f:70:3e:b8:d2:a7:8e:06:98:21:79:e3:
                    a1:b0:fd:1d:28:23:07:bb:e5:44:80:0e:a3:64:01:
                    a3:b3:3b:a9:66:63:09:c3:2e:f9:f8:64:d4:8f:ea:
                    dc:e6:9b:a5:1c:07:5c:75:10:8d:cd:51:10:96:ff:
                    98:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:E2:52:22:F8:64:6E:52:BA:C9:D5:61:EF:DC:1E:43:21:D7:4F
            X509v3 Authority Key Identifier:
                keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ae:2f:be:e7:f4:34:54:74:be:0d:91:3c:5d:3f:e3:c7:d7:
         f9:16:49:ed:96:6c:ed:ee:b5:b8:84:72:ee:5c:c3:74:76:6f:
         ae:cd:1a:ec:15:83:b6:b5:6a:f3:a7:19:f2:c9:d8:82:fc:34:
         4a:f5:a3:87:1b:b9:2b:9e:52:31:96:7c:c5:a9:9c:6b:9b:11:
         91:7e:9c:a8:8c:a4:27:60:e5:74:1f:8f:d2:f8:36:70:d8:db:
         03:36:dc:d9:f7:0d:da:27:fa:72:2e:29:4c:b6:a7:9f:b7:6a:
         d3:64:ef:9b:ed:b9:9c:9a:84:5b:ce:22:c7:29:ff:6b:a0:d3:
         9b:4b:98:f5:8f:3b:23:ee:ca:72:78:bf:64:61:a5:22:20:aa:
         36:d0:da:21:be:f3:85:79:5d:32:62:4c:19:1e:e7:2a:51:d0:
         37:9c:25:d7:49:aa:78:df:77:55:95:41:01:63:01:7d:d6:62:
         1c:46:7e:95:04:be:8d:f2:fc:99:0d:80:b8:a9:ba:a7:7a:4e:
         f2:63:87:73:4e:e2:a6:2b:b2:a7:60:4a:de:c9:6b:06:ce:bd:
         7b:73:b8:9e:d4:0f:d4:be:d1:dc:c8:a1:94:54:d8:62:7e:e1:
         b3:0d:44:6a:68:9c:f8:9a:67:24:bc:e7:de:2c:e7:82:7d:23:
         2b:54:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:07:21 2025 by rpki-client