Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
File:                     tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft (raw, json)
Hash identifier:          9nu+y9zG6tuNyHz/nwE0H+t6IutfsXZo+Wb5eCIm+BM=
Subject key identifier:   E7:37:9A:40:67:D4:0A:E6:6D:D6:59:6E:44:4D:31:6A:D8:8E:A9:B2
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Certificate issuer:       /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial:       019768BC4433457B147BC7BADC01905BE4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
Manifest number:          10DB
Signing time:             Fri 13 Jun 2025 10:00:58 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:58 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:58 +0000
Files and hashes:         1: gOpessaE3KR3BE7y4M-QryrS1Ks.roa (hash: YdF4inQqBoygiKj6DuoyGUjs1/73Ha+wGsnO74e4IH4=)
                          2: tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl (hash: SNLb6NjhdYBzTpMjRqVF7+NAA1NR65LAEVitSFtYlMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:44:33:45:7b:14:7b:c7:ba:dc:01:90:5b:e4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
        Validity
            Not Before: Jun 13 10:00:58 2025 GMT
            Not After : Jun 14 10:00:58 2025 GMT
        Subject: CN=e7379a4067d40ae66dd6596e444d316ad88ea9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:bb:f8:6d:31:b5:fd:83:f0:47:7a:6b:12:
                    53:72:55:0c:07:64:c8:56:a5:0d:97:3d:af:6f:3e:
                    f4:9c:10:97:e8:b7:02:7a:50:01:8d:9d:b0:54:11:
                    86:a9:c6:7e:3e:e9:36:03:8e:cb:3d:06:fb:47:34:
                    7b:cf:09:5d:0c:5a:f0:47:7b:d6:37:35:68:0e:fd:
                    d1:d4:0b:62:ea:8a:ca:6b:eb:fb:46:53:a2:8d:a4:
                    71:78:61:38:e8:8e:bc:0c:ba:ba:be:e2:6a:83:d9:
                    af:93:bf:de:6e:d8:29:16:0e:42:f1:a3:b2:b9:bb:
                    79:61:43:4e:c2:ed:58:8f:52:f8:92:60:ea:19:f0:
                    39:1f:43:40:a7:8d:ce:aa:6c:ee:ac:a8:7d:18:be:
                    ba:a8:65:0d:7f:cd:89:9b:78:2f:45:9d:27:d6:4a:
                    ca:8e:f6:7d:ae:af:9d:07:d9:55:ce:a9:19:c1:83:
                    57:0c:d2:97:0d:6a:c4:8f:2e:db:07:f6:56:fc:6f:
                    21:9f:6e:dc:70:55:b1:0a:f3:e5:42:48:82:85:db:
                    40:57:71:d1:44:b6:47:c9:03:cc:c0:b1:d1:28:e3:
                    36:5a:d8:14:0b:b8:fe:af:c3:42:42:04:fe:60:0e:
                    e3:a2:19:d5:e2:9d:c8:0e:0f:84:0e:72:f5:82:70:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:37:9A:40:67:D4:0A:E6:6D:D6:59:6E:44:4D:31:6A:D8:8E:A9:B2
            X509v3 Authority Key Identifier:
                keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:23:1f:46:98:c9:0a:02:f7:5d:ee:d5:0a:dd:7f:93:6c:8a:
         39:92:a5:fd:a1:36:8a:51:a8:b4:02:87:55:d7:fd:37:39:f6:
         b1:74:c0:6a:f8:30:d8:cc:bc:5c:13:23:82:a1:77:e7:a9:3b:
         6d:68:d8:0f:64:77:84:96:e0:07:29:9e:3e:ac:92:02:d0:ad:
         72:26:c6:e2:46:b1:65:ca:f7:fb:a8:42:c1:b3:b1:bf:b6:76:
         a6:71:83:dd:6e:56:f5:77:62:7b:1c:18:b6:52:e5:d1:94:8a:
         cb:c3:bc:c9:cd:b8:1f:ea:76:d1:a8:54:64:99:c7:cb:d1:e2:
         d2:3c:cf:1d:1a:fd:e2:d8:5e:d6:2f:53:eb:c6:5d:de:dc:3d:
         0f:01:c8:fd:7d:f7:d3:12:8c:81:6f:bd:81:9d:c2:04:85:09:
         3a:ae:fa:20:50:27:01:b1:31:bf:9f:6d:46:98:e8:d2:5f:65:
         c1:d9:06:13:f5:38:21:da:52:62:95:d3:a2:d3:85:c0:fb:57:
         e1:a5:ec:68:2b:70:13:9c:e5:fb:b7:2a:51:61:52:c9:98:1d:
         c7:48:67:3b:a6:26:76:c7:44:71:4a:85:5e:a8:f1:51:6f:1d:
         ff:c5:9e:ff:98:05:34:cf:ce:55:73:0b:44:27:40:74:2b:4a:
         9a:a8:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:40 2025 by rpki-client