Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
File:                     tTcRWWHGq_W4er5KIAU-SsobbsI.mft (raw, json)
Hash identifier:          IvShzqURLULhg0tdE8uXjzFpUokvJaFOzrI65xgRScg=
Subject key identifier:   29:F8:19:CD:22:F4:88:F4:B7:BE:28:BD:AC:62:C0:79:AF:D1:6B:61
Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Certificate issuer:       /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Certificate serial:       01976FD1101D5D3A5574244E3758EA7B3A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 19:01:01 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:01 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:01 +0000
Files and hashes:         1: tTcRWWHGq_W4er5KIAU-SsobbsI.crl (hash: VAnY/K81ZGBqNQFL6OIVNxGu0pPN13JuZvkPX6uY2+s=)
                          2: yv-lKnLJ7FH3ebM94G5o9mRIoI0.roa (hash: NaXQYxgPfjl+IpTUFv/7Iibu/QutlXyZxHu9Cx6Aoy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:10:1d:5d:3a:55:74:24:4e:37:58:ea:7b:3a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
        Validity
            Not Before: Jun 14 19:01:01 2025 GMT
            Not After : Jun 15 19:01:01 2025 GMT
        Subject: CN=29f819cd22f488f4b7be28bdac62c079afd16b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:01:8c:3b:70:9f:0a:05:7d:34:ce:5c:21:
                    70:2b:b9:26:57:91:03:12:09:05:83:cb:d9:30:eb:
                    04:33:98:fa:07:2e:08:a0:39:c8:de:e2:5a:01:88:
                    20:5c:9e:8e:5d:77:b1:a5:7a:12:9d:75:87:8a:dc:
                    f1:ce:3e:21:15:d5:61:85:63:bf:43:e5:57:52:c4:
                    22:8d:b7:1d:11:54:fc:43:e1:3f:6f:51:82:e3:16:
                    11:fc:37:9c:0d:33:7b:5b:5f:06:05:e6:5e:6b:b4:
                    4a:16:da:96:36:9d:7a:89:fa:47:58:06:a2:69:b5:
                    a7:c2:91:55:4e:0a:73:d6:53:f4:01:97:1a:06:04:
                    8b:af:c0:4f:42:47:f4:14:20:eb:a4:01:18:4d:e0:
                    b5:83:91:d5:32:e1:a8:bb:a6:74:d2:ce:1a:90:bd:
                    6d:94:ca:93:cf:c8:3e:42:ea:41:1f:ee:6a:52:75:
                    45:73:aa:d6:e7:bd:66:b7:3d:a5:d0:7b:81:1e:5a:
                    a5:95:b8:22:d5:cc:ff:2c:52:0a:0b:88:c9:00:f0:
                    74:24:c4:85:d2:c8:40:f4:23:03:57:a6:c9:5d:37:
                    68:58:31:ab:3a:3d:26:08:e2:ce:94:b9:69:ed:1b:
                    15:06:90:03:3c:28:be:4a:95:30:c1:b8:40:bc:ef:
                    88:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F8:19:CD:22:F4:88:F4:B7:BE:28:BD:AC:62:C0:79:AF:D1:6B:61
            X509v3 Authority Key Identifier:
                keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:54:3a:90:fc:4a:a1:c4:0e:f4:31:4f:93:8c:bc:d3:fb:
         d0:eb:2b:53:d4:79:62:a3:53:dc:ae:71:f9:4e:b8:97:80:57:
         34:dc:9f:d6:5a:a0:a9:c0:9a:a5:8c:dd:8e:e7:b1:34:74:b3:
         47:7b:40:dc:59:30:48:47:bc:54:b4:4b:c4:e9:f8:5e:b4:e4:
         2f:79:a1:22:2a:a0:5f:34:14:39:48:af:ee:5e:dc:c2:80:21:
         3f:4f:11:af:5e:12:20:5d:e6:3f:e0:cb:18:a9:10:8c:df:80:
         a7:cb:14:5f:d3:02:df:94:e8:71:0a:06:ac:2f:11:01:09:ac:
         1c:b6:b8:d1:e0:23:a1:f0:42:4e:58:42:e1:fa:89:c6:81:bb:
         a5:3d:fc:22:33:03:d7:10:7b:39:1c:12:22:42:98:0d:02:80:
         93:85:72:68:04:2b:84:4a:ad:d2:ef:fa:f5:4e:cb:41:a0:ef:
         4f:62:03:32:12:be:da:4a:e1:6d:01:e7:40:52:7c:2b:19:1f:
         9e:7a:6d:97:c4:bd:2d:63:3b:ab:73:8b:93:e8:be:ad:82:47:
         e6:a8:ac:e7:97:67:81:b0:24:a0:2c:f3:17:4c:22:77:ad:94:
         e5:36:7f:eb:aa:54:f1:9f:99:ea:5a:6f:03:a3:07:d8:f6:55:
         a9:52:91:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:41:18 2025 by rpki-client