Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
File:                     pTW_JFBXN0H5Q16UghAWoi5rwUc.mft (raw, json)
Hash identifier:          t8t9IYPs+U+L1l3XkhxQziUDTSAimodENDMm61k9N08=
Subject key identifier:   A0:AA:CC:79:6F:1E:CB:D1:67:B8:45:D4:85:D3:45:F9:E9:50:2A:38
Authority key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
Certificate issuer:       /CN=a535bf2450573741f9435e94821016a22e6bc147
Certificate serial:       0197722CF88D8F924888C9F97DD1D4C44F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
Manifest number:          158E
Signing time:             Sun 15 Jun 2025 06:00:39 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:39 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:39 +0000
Files and hashes:         1: pTW_JFBXN0H5Q16UghAWoi5rwUc.crl (hash: ZWF3G/WBLpjMWsD48tojNY2rlFXtZ+gOy5wTrmHehik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2c:f8:8d:8f:92:48:88:c9:f9:7d:d1:d4:c4:4f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a535bf2450573741f9435e94821016a22e6bc147
        Validity
            Not Before: Jun 15 06:00:39 2025 GMT
            Not After : Jun 16 06:00:39 2025 GMT
        Subject: CN=a0aacc796f1ecbd167b845d485d345f9e9502a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:e7:14:8f:e6:5b:44:f5:3a:24:7a:cc:13:
                    e1:c6:f8:61:01:32:a8:0e:d8:41:90:e7:86:a9:90:
                    f7:50:a4:83:b9:29:1b:83:6d:59:3a:6f:fd:46:25:
                    62:74:19:69:c0:cc:98:80:29:bc:1e:ae:42:d9:74:
                    3b:af:a9:a0:a6:56:cb:89:cf:28:89:06:2c:e8:52:
                    19:0f:76:db:72:bc:e5:25:65:38:b0:e9:1d:1a:77:
                    82:15:0f:47:49:26:39:34:70:e2:da:0d:e3:f6:32:
                    92:9f:b1:c5:75:af:42:4d:f2:92:8a:17:54:6b:9f:
                    3d:cb:50:61:8e:c6:30:79:90:86:bb:6d:d9:26:3f:
                    b5:1b:c2:2c:ef:c9:cb:ff:be:94:b9:28:1c:0a:02:
                    e3:73:10:89:78:14:bd:94:25:c6:3d:5c:7f:23:75:
                    4a:b2:25:87:f8:b4:96:b4:15:1b:a9:9e:6a:b0:cc:
                    64:38:98:98:db:2c:e4:56:27:cf:15:d1:48:7f:87:
                    c5:05:1a:e6:74:29:01:58:8a:3b:9c:53:c3:b1:d7:
                    7b:d5:2d:fe:c6:81:1f:6a:70:0d:d7:a8:72:09:56:
                    78:53:bb:98:9f:21:cc:55:bf:0f:3d:e6:b7:97:4b:
                    12:8f:cf:af:49:f7:9c:c1:cb:93:c2:9a:aa:ce:f5:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AA:CC:79:6F:1E:CB:D1:67:B8:45:D4:85:D3:45:F9:E9:50:2A:38
            X509v3 Authority Key Identifier:
                keyid:A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6f:14:56:76:a9:72:b9:a2:08:a9:f1:09:e8:ae:4e:5a:98:
         9b:8f:94:9e:ff:8f:36:a2:b5:19:d2:45:c7:66:43:c5:17:bd:
         38:43:37:9e:17:45:ed:54:54:b5:8d:2c:f5:b3:fd:e9:97:ac:
         49:a3:23:aa:73:56:74:55:71:d5:b5:c8:5d:e6:b5:db:9e:f5:
         2e:a9:e6:9a:40:a9:86:41:8a:84:9d:27:90:71:5d:cf:a2:85:
         25:bd:6a:ec:93:69:5a:30:39:9d:e6:cb:29:8f:06:5f:5c:e0:
         b2:84:88:62:4b:b0:d5:f5:4a:8c:91:51:46:d4:df:ae:28:f2:
         44:b9:b9:71:52:71:9c:47:bb:80:9f:54:5c:7d:0e:99:86:ea:
         d2:85:4c:18:cf:f6:c5:52:9f:e4:2d:85:9f:b9:29:08:c9:d8:
         cb:0b:15:95:9e:d4:f8:88:4f:a1:16:67:91:35:81:fc:c8:bc:
         eb:5a:d6:f6:40:f5:5f:90:df:a8:3c:0a:42:1f:ee:5f:42:bc:
         b5:5a:6c:63:32:5e:23:ae:d4:d0:dc:7f:97:38:f5:79:34:2d:
         98:66:7b:54:0a:7a:d3:a5:c2:ad:a1:c4:c1:d1:19:cd:cf:62:
         82:80:1e:f5:e5:55:77:6f:f4:7a:76:29:2c:d3:c1:a8:30:4f:
         63:bb:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:02:22 2025 by rpki-client