Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File:                     TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier:          FEV4fz4CvBDz7UgfYM7V5iXkT7VWw3pZ5cV9N1rGZgg=
Subject key identifier:   EF:09:68:60:22:48:4C:65:78:68:1C:8C:D7:C0:AD:1F:0E:5A:FA:BD
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer:       /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial:       019777530F1D80C5A686B6A4729F273FACE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number:          12D7
Signing time:             Mon 16 Jun 2025 06:00:21 +0000
Manifest this update:     Mon 16 Jun 2025 06:00:21 +0000
Manifest next update:     Tue 17 Jun 2025 06:00:21 +0000
Files and hashes:         1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=)
                          2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: 4L8aqPwwSP8fb35o+iWhLENLXybVizsa5ZPW0LPTHKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:53:0f:1d:80:c5:a6:86:b6:a4:72:9f:27:3f:ac:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
        Validity
            Not Before: Jun 16 06:00:21 2025 GMT
            Not After : Jun 17 06:00:21 2025 GMT
        Subject: CN=ef09686022484c6578681c8cd7c0ad1f0e5afabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:b9:1a:bb:e9:a6:06:54:c9:27:6b:e2:4b:
                    c2:4f:62:54:a5:1f:05:9b:1c:4c:78:a5:cf:cd:b8:
                    b9:25:3c:8e:12:dc:7c:c0:7f:4c:a0:fd:1e:5e:22:
                    a2:89:a5:d7:45:0e:37:90:d7:ad:e4:ab:fc:9f:9e:
                    4c:70:a6:12:4a:97:44:7d:1a:53:dc:06:38:ac:b5:
                    05:3a:d5:ab:dc:5a:e1:f7:07:d9:89:cb:99:26:37:
                    c1:38:d6:ff:68:28:3d:1e:70:ab:a0:30:29:06:fa:
                    e7:92:d4:5c:42:25:ff:34:51:30:d5:53:75:43:73:
                    f9:f9:c1:7a:59:b8:81:eb:bf:7a:d5:8a:fc:15:10:
                    37:6e:65:83:9f:ca:05:1e:7b:06:bf:1a:70:aa:4b:
                    15:45:87:6c:16:e5:db:1a:8a:f2:a6:0c:1e:07:9e:
                    8c:95:72:19:6c:0e:4b:33:a4:ef:eb:0e:03:e6:77:
                    09:26:5e:cb:fa:23:54:50:f3:ab:ef:fe:50:16:13:
                    dd:22:4c:3a:7b:e4:b3:58:3b:af:74:b1:de:6e:b6:
                    88:07:ab:92:fa:f1:70:ff:97:0a:aa:ef:9a:56:af:
                    56:91:80:b1:23:de:66:6c:ee:65:5e:dd:4d:39:99:
                    e2:d9:c0:8d:d4:45:ad:56:15:91:ab:a2:ea:40:41:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:09:68:60:22:48:4C:65:78:68:1C:8C:D7:C0:AD:1F:0E:5A:FA:BD
            X509v3 Authority Key Identifier:
                keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3c:31:fa:62:4d:e3:29:b2:5c:76:77:8c:d3:71:eb:9c:90:
         97:d8:76:87:ce:71:af:d0:75:8d:8e:12:80:c8:3b:74:f3:03:
         56:0d:00:ce:78:44:9f:d2:91:41:fe:33:5e:52:af:f8:4a:26:
         fb:83:15:5f:0a:85:b7:80:78:74:13:db:88:34:6e:25:8f:04:
         69:f2:05:a6:82:1b:c0:3a:3d:18:c3:f8:d2:f2:62:34:8b:72:
         9b:9c:4d:82:99:db:b6:c1:82:c7:40:07:63:34:b5:a4:8c:9a:
         e5:45:eb:73:a8:70:3e:8b:35:0e:26:6d:7d:32:9f:92:06:46:
         6f:a6:32:1b:6a:ec:d9:7a:0c:72:51:1d:42:9c:e7:6e:f5:72:
         dc:12:83:46:28:eb:b9:ee:3f:cc:a4:e9:45:64:0b:f7:dd:77:
         71:5a:8a:89:a6:76:02:ad:f6:6d:0f:50:74:cd:b9:71:b8:fb:
         bc:12:73:30:79:03:fb:26:d9:ce:5d:b5:43:de:da:6a:4b:2f:
         b4:61:6c:cc:5d:d2:e5:84:d8:30:d8:d9:9b:f7:c1:66:45:f4:
         2f:8b:03:64:65:93:f5:a5:e1:d6:d8:b4:a7:ad:8c:94:a8:7b:
         c7:17:04:09:27:f3:67:97:3c:ee:eb:50:e0:49:42:d3:c3:dd:
         dd:55:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:53:32 2025 by rpki-client