Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File:                     Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier:          /jaodxpv8WkSNW4tnyO/VBIjJ+gZ0ziCA6+Wr70L0rc=
Subject key identifier:   47:04:AC:2A:8A:28:B6:4E:4E:7A:00:78:7E:D3:3B:47:7E:17:1A:64
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer:       /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial:       0197703ECFF795DA978305EC52158CE99AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number:          1171
Signing time:             Sat 14 Jun 2025 21:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 21:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 21:00:53 +0000
Files and hashes:         1: OvfWeCcNPkjbD4WceB7qJUQP56g.roa (hash: fRXrYY7/CZ7H+wWfEy5WHXYQSNWj53G/u9ERuP4d6t8=)
                          2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: vMcBpIAa1vPeLjh40ZVe/TVC9boBmaosuur/6rVUuq0=)
                          3: mVQlHhnVYgof6PbGg47IlXbHufE.roa (hash: EuWc5XhS83Rt6mxNh7vCwfoYl/yRKN36oWWE3rRVLmQ=)
                          4: qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa (hash: FgzvVUL28rYxcaIK8c4YP+ZNrmGFqrNKlv9zOeTK/II=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:cf:f7:95:da:97:83:05:ec:52:15:8c:e9:9a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
        Validity
            Not Before: Jun 14 21:00:53 2025 GMT
            Not After : Jun 15 21:00:53 2025 GMT
        Subject: CN=4704ac2a8a28b64e4e7a00787ed33b477e171a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:e9:67:ca:4e:8b:c2:dd:2e:76:3e:28:c6:
                    17:39:59:0b:cb:f3:6b:7d:88:ee:57:28:60:16:e9:
                    fc:a6:9e:70:13:3e:10:db:1d:cb:ce:2f:66:b0:3a:
                    b8:e3:51:f5:85:85:b5:34:2b:b8:09:b4:a5:0b:8d:
                    85:11:51:c2:75:66:9f:7c:4f:58:8e:84:9e:65:1f:
                    a4:f2:03:b2:d3:cd:98:83:c5:63:26:c3:1e:de:7f:
                    c4:ee:88:15:56:bd:e0:81:f9:8c:a9:52:67:bb:81:
                    17:57:c2:27:2a:57:c3:93:94:92:ff:53:27:83:84:
                    33:5f:d2:d1:05:d5:bc:16:5c:3f:bf:37:b3:81:ad:
                    a3:b6:af:c3:92:7f:10:6e:37:0c:80:c6:a5:68:00:
                    24:3c:92:8e:24:9a:9e:07:36:3e:c4:d9:e7:02:0b:
                    82:b7:7f:75:43:5b:5a:5d:d5:c3:b9:ed:a0:05:bb:
                    08:19:91:e9:f8:fc:53:9b:94:c8:d2:ce:28:1c:43:
                    32:82:f3:1c:75:44:38:99:36:de:be:3d:f0:3c:50:
                    61:86:ab:f3:96:88:ce:70:f1:69:f2:11:01:d9:4a:
                    fe:ec:96:6a:8e:1a:7c:2a:28:fe:34:e1:46:2f:04:
                    61:c3:fb:26:85:a2:b3:6a:36:69:b7:ba:9c:5f:06:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:AC:2A:8A:28:B6:4E:4E:7A:00:78:7E:D3:3B:47:7E:17:1A:64
            X509v3 Authority Key Identifier:
                keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:91:3e:ac:15:81:c4:4a:15:e9:b9:40:4b:77:1e:94:3f:a4:
         b0:ee:91:df:1f:26:c3:06:ff:74:c2:c0:e2:a2:0f:c7:75:f7:
         6c:ac:bb:b9:d6:66:24:eb:44:39:c8:1a:12:d9:39:7b:11:d7:
         f5:76:62:d8:ee:20:25:37:ef:dd:cd:d0:ea:36:b4:a4:b8:21:
         4c:0a:6f:a4:25:d1:79:0e:04:c7:cf:f8:32:98:96:d8:e3:bc:
         58:c6:b6:f5:13:f4:ff:e8:5d:82:55:e5:c6:4f:ad:ba:7d:08:
         0d:cf:ea:64:3b:57:ce:ec:83:1b:33:49:40:f1:76:8b:e7:e5:
         69:a1:63:e2:6f:c1:40:c4:b7:db:00:57:2f:54:05:ae:99:1b:
         0a:39:a0:3e:3e:8b:9f:10:fb:69:80:2a:de:13:c4:b3:ba:7c:
         3b:4d:2a:9e:91:b7:5b:c0:a5:1b:37:f8:7c:17:02:28:67:1d:
         e5:61:c5:94:4e:c8:63:55:13:fe:b1:d1:da:e2:2b:b9:b2:72:
         8f:15:5c:97:83:90:6f:71:59:22:14:31:e2:73:4c:3b:d0:9e:
         5b:b3:e8:2e:e1:40:c9:94:4f:02:c2:95:e6:47:34:50:c2:ab:
         0e:a0:83:b0:fe:5a:2e:69:b4:3b:a9:db:7c:08:2d:cd:7a:7b:
         0c:0a:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:06:49 2025 by rpki-client