Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
File:                     4tc__D83xP7EvTWtHFlc0Fa67P0.mft (raw, json)
Hash identifier:          1W59AE2hyf8BuX2XHJEBocOZPyRu3Oz3rLz2jhRgXhk=
Subject key identifier:   C2:E5:38:9B:90:07:0F:9F:F1:B6:F6:59:37:D5:ED:D5:ED:B6:0C:30
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Certificate issuer:       /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial:       0196A38A19D00582C37820A8CFB805461815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
Manifest number:          067F
Signing time:             Tue 06 May 2025 03:00:58 +0000
Manifest this update:     Tue 06 May 2025 03:00:58 +0000
Manifest next update:     Wed 07 May 2025 03:00:58 +0000
Files and hashes:         1: 15xabzkapAsSjIKERak6-4m1So0.roa (hash: FylhIFKLzVcHOQsVvyYerlKh6o6ajQeSyBB7cVFNmPU=)
                          2: 4tc__D83xP7EvTWtHFlc0Fa67P0.crl (hash: 1hKqKT3bgYkVB0B0o6w4PP8+eK4Ig4XOOaC0KZAyPuo=)
                          3: 833FmQyz-5vw3V1ZpD3pqMArHGw.roa (hash: eyX1KEkROJtBb4g504oMdjM6lbQ+P16xnRGxTkb5zHU=)
                          4: SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa (hash: llqnu+z/IAMUkrZ/zCpWswAVAWND5pihVLoy0VRdDyQ=)
                          5: fnBkrIGhazl4u19mtv8qgvxymog.roa (hash: K+4n5TOvIimoLjl9pQIARfKh0OC3efu1YiLeyARuuyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:8a:19:d0:05:82:c3:78:20:a8:cf:b8:05:46:18:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
        Validity
            Not Before: May  6 03:00:58 2025 GMT
            Not After : May  7 03:00:58 2025 GMT
        Subject: CN=c2e5389b90070f9ff1b6f65937d5edd5edb60c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:1c:72:1d:db:56:4b:f9:e7:7d:dc:be:ef:
                    58:80:12:27:fc:ba:a3:3b:9c:02:02:6e:f8:d9:38:
                    5a:71:f5:42:29:31:5f:d3:ce:43:1b:79:88:9b:79:
                    6d:c7:02:c0:a1:72:98:c6:1a:fd:b3:eb:5b:90:13:
                    15:01:82:ca:d6:81:fb:e4:db:44:40:35:55:07:23:
                    05:45:d9:8f:9f:d7:75:43:73:ad:fe:fc:47:b9:b3:
                    89:86:12:33:f3:1b:7b:80:d2:55:6e:0f:7f:b2:94:
                    8f:c4:4e:22:d9:ee:87:54:88:d4:97:b2:66:0e:f4:
                    5d:d4:76:b5:36:a9:3b:8c:1b:9d:19:54:bd:36:59:
                    0e:6b:e9:1c:57:92:a2:d6:b1:7a:4c:20:ae:65:08:
                    75:c4:e3:ee:0d:77:99:d3:87:49:35:f1:66:b6:2a:
                    75:25:20:21:7d:6a:56:9d:a2:38:a2:2d:88:24:c7:
                    bb:e4:d9:41:a8:02:32:08:7d:1a:30:37:c4:49:fd:
                    50:8b:08:1a:2f:4d:0c:c8:91:cf:d0:c5:79:00:5f:
                    23:0e:0b:57:f9:97:b1:28:d4:23:88:8a:92:9d:f2:
                    74:88:05:e8:7e:b0:ca:40:3f:d3:8e:9f:bd:da:28:
                    f3:77:c5:c4:80:6f:91:a5:d6:2c:b7:f6:68:6c:96:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E5:38:9B:90:07:0F:9F:F1:B6:F6:59:37:D5:ED:D5:ED:B6:0C:30
            X509v3 Authority Key Identifier:
                keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:ba:4a:b1:5d:b9:67:ad:95:01:8e:d6:03:5d:7a:33:84:
         94:50:58:d6:93:83:f3:1a:b1:04:42:db:e3:85:a0:0c:03:b3:
         55:3f:78:33:95:e0:be:4d:66:9b:9b:c1:94:0e:51:79:bf:78:
         02:f4:b8:05:68:53:ff:d5:02:4c:ad:54:ed:9c:46:20:99:39:
         51:5d:69:80:66:8b:fd:2a:a5:db:06:8f:ce:bd:35:5f:43:7b:
         64:6b:e4:ff:98:44:24:da:d3:9f:91:ec:ce:ae:94:07:fc:e7:
         f8:49:2a:41:bc:34:d4:8f:44:e3:41:c6:f6:33:cc:fe:4c:9c:
         45:2c:9c:50:0d:bf:d3:0b:f1:05:6e:35:a7:52:fc:28:a2:e9:
         e1:60:01:91:cd:9a:20:13:4c:c5:ae:4d:58:de:65:6f:b2:8c:
         00:a4:82:d2:0b:d2:b9:9e:43:08:10:fc:dd:87:c2:4f:85:70:
         93:14:67:03:4c:d7:15:ff:69:20:d1:9e:88:2a:5c:7c:ed:ec:
         06:7b:d7:e8:35:9a:de:5f:72:c1:06:89:da:4e:c8:98:07:e0:
         e6:c9:6a:2d:4d:79:48:da:0e:c2:2d:96:a6:a5:ed:42:1e:9c:
         46:00:35:30:f3:7e:e0:cc:61:31:50:fe:e4:0f:68:71:45:95:
         3f:38:2b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:08:48 2025 by rpki-client