Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File:                     TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier:          sBQdf7gfHl690bsCQse+3zazwxBnDcs7Vies7Z9KZog=
Subject key identifier:   F5:39:FA:48:84:B8:54:BD:3E:7D:C5:91:1B:9A:F7:08:D4:6B:09:DE
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer:       /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial:       0197797884E1587AE38406221D17B6606A76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number:          1595
Signing time:             Mon 16 Jun 2025 16:00:30 +0000
Manifest this update:     Mon 16 Jun 2025 16:00:30 +0000
Manifest next update:     Tue 17 Jun 2025 16:00:30 +0000
Files and hashes:         1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=)
                          2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: zkhh5vfL5JJqHQXRFnv++abkbfLFP0inO5JV6lprTQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:78:84:e1:58:7a:e3:84:06:22:1d:17:b6:60:6a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
        Validity
            Not Before: Jun 16 16:00:30 2025 GMT
            Not After : Jun 17 16:00:30 2025 GMT
        Subject: CN=f539fa4884b854bd3e7dc5911b9af708d46b09de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:bb:47:b0:69:61:36:4a:fd:7a:45:e5:cd:
                    0e:12:c0:d9:bc:24:aa:81:b7:dc:96:97:b5:20:53:
                    1d:2a:8b:df:ef:d6:66:8f:d3:3f:56:fb:0b:a7:ed:
                    c8:7b:ca:5f:99:25:f7:9d:5d:92:3f:a4:0c:6f:17:
                    c4:38:58:26:be:dd:55:4c:6a:e5:be:90:a9:84:ad:
                    3b:90:ad:f1:a5:b9:28:8b:7f:12:c9:be:fa:62:ac:
                    c0:6c:0d:b1:32:d6:04:66:df:eb:9f:2a:14:ca:5a:
                    c1:8f:32:30:b5:54:98:1e:a4:c5:04:10:53:70:3b:
                    ab:1b:c5:cb:34:29:c8:2c:cb:58:00:33:79:ca:35:
                    c7:2f:11:e6:6a:cd:cc:11:85:67:c1:e0:50:df:bd:
                    f7:09:74:68:99:d5:6c:62:8a:b5:e1:69:8e:7f:08:
                    3a:3e:9b:58:4a:36:87:a5:7a:95:11:36:88:5e:ff:
                    58:0e:c8:a7:1b:a1:58:33:fc:19:62:16:7f:8e:b2:
                    77:e0:f0:85:7e:2b:be:67:9f:d8:24:96:72:47:3d:
                    fa:8f:00:1e:d1:a4:88:0b:ea:91:2a:24:9f:a6:4e:
                    e2:7f:c8:e6:f8:02:9e:07:bd:e9:90:46:32:be:47:
                    40:35:9c:47:61:32:a5:dd:f0:be:c9:73:25:16:f1:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:39:FA:48:84:B8:54:BD:3E:7D:C5:91:1B:9A:F7:08:D4:6B:09:DE
            X509v3 Authority Key Identifier:
                keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:df:88:b9:ef:8a:d0:ad:1c:37:95:41:d4:62:6c:b9:b2:71:
         58:dc:58:a1:b4:b9:cc:a7:42:da:6d:a9:74:ea:b1:6d:22:3e:
         3f:dc:11:78:a6:ca:0b:db:f8:21:ba:a3:76:b8:4a:10:d0:e3:
         84:d4:46:0e:8e:70:5b:10:db:16:6e:5b:6a:cc:9d:18:58:ed:
         70:7b:12:eb:5a:7e:c7:94:c2:a5:36:3e:fb:d7:db:58:38:fb:
         a7:f3:24:26:62:3b:0b:5b:bb:88:58:1f:6f:60:b9:84:f3:e9:
         e1:fc:a3:0d:d1:a4:59:68:10:9e:f2:ab:2c:6c:59:43:87:71:
         87:37:0b:b8:47:a5:e0:6d:91:22:a4:74:9d:df:32:f9:8b:a0:
         96:b7:48:44:4e:2d:e6:c3:fa:c0:a1:27:38:11:e2:c3:4a:88:
         b1:ee:53:4c:57:54:6c:62:86:c3:73:89:66:69:da:33:47:74:
         b9:2b:00:39:79:26:be:4f:39:c7:1e:60:e7:ea:e3:6e:92:c9:
         e2:a0:34:d5:1a:c0:95:ba:25:3c:0a:02:8c:c8:5c:d9:e6:f4:
         6e:3d:94:17:a4:ff:5e:bb:26:c5:c5:d3:42:1a:f8:5e:57:6f:
         56:51:96:2a:a0:4d:2b:d8:20:dd:11:2a:fb:2b:c6:9b:46:3e:
         5b:0e:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:05:09 2025 by rpki-client