Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File:                     Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier:          y6+1vhwpAFNBsWDWIwmTJud6tNdmtPOrPZPjatM/6E4=
Subject key identifier:   48:38:07:46:FC:26:C5:20:C6:CF:09:13:77:08:3B:B2:DC:F9:5A:FF
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer:       /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial:       0196CBAA01C2D3761BC2B962E667BE87E708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number:          03ED
Signing time:             Tue 13 May 2025 22:00:38 +0000
Manifest this update:     Tue 13 May 2025 22:00:38 +0000
Manifest next update:     Wed 14 May 2025 22:00:38 +0000
Files and hashes:         1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: B670UuIM3JGf5pjLAyQuTYDTZkgM9L8B6ntMee3qNEY=)
                          2: h73609pmEogi1mr5yal1sNR_aIM.roa (hash: xECkne1ZTJO+2XS9UZa/R12Y+brbcjW087xGv2+aPVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:aa:01:c2:d3:76:1b:c2:b9:62:e6:67:be:87:e7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
        Validity
            Not Before: May 13 22:00:38 2025 GMT
            Not After : May 14 22:00:38 2025 GMT
        Subject: CN=48380746fc26c520c6cf091377083bb2dcf95aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:7e:d8:62:65:d6:a2:2e:61:80:e0:a9:d8:
                    9c:83:22:d2:90:d8:32:6f:55:a4:07:2f:5e:e6:20:
                    b0:7d:48:7a:fc:67:f6:aa:10:dd:2d:43:5d:6b:81:
                    4a:2e:62:a2:d4:f1:a3:17:52:9b:1f:e9:fb:4c:cf:
                    28:6e:76:a1:e8:ac:6f:c9:93:f0:4c:eb:1c:ec:aa:
                    c6:fd:e3:a5:8f:92:af:96:9c:0d:7a:b5:2e:b7:b8:
                    89:6c:25:a7:72:96:b2:31:e9:bb:0e:dc:6c:29:2e:
                    4d:27:40:26:24:c4:e1:eb:33:b6:f9:f7:5d:e5:d0:
                    4a:b0:ab:20:33:98:2a:77:73:cc:84:4a:53:5d:eb:
                    39:7a:e1:9d:9f:fe:f2:28:81:4b:b2:d2:ea:c0:72:
                    0a:73:6a:59:57:d0:40:cb:1e:20:e9:95:0a:9a:55:
                    50:79:e0:a9:84:7c:9e:f8:4d:b4:c2:40:b4:ae:97:
                    c4:97:db:6e:a2:05:94:5e:f3:1e:54:e2:b0:35:b0:
                    4d:23:34:9c:a9:47:08:5b:ff:31:fe:f7:f2:f8:0e:
                    f6:be:22:f9:70:b1:36:fd:a4:9a:5b:b6:22:fc:f3:
                    0c:c9:ed:62:55:1d:6c:8a:04:75:c5:3f:0b:ba:84:
                    cb:3e:45:67:06:4a:b7:7e:12:dc:7b:18:af:53:4f:
                    8e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:38:07:46:FC:26:C5:20:C6:CF:09:13:77:08:3B:B2:DC:F9:5A:FF
            X509v3 Authority Key Identifier:
                keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6c:9c:eb:fe:68:91:d1:48:20:b1:8a:cd:c3:9c:82:5a:03:
         06:d8:dd:ed:19:1c:bf:65:80:5f:21:49:22:09:84:27:a2:ce:
         14:9f:0b:c3:3c:c5:3e:a5:4f:1f:de:70:04:93:97:b7:65:d6:
         9e:0e:b2:5d:06:3c:87:3b:dc:ac:77:d4:7a:99:03:65:4d:d6:
         55:6d:57:0c:b3:50:8b:11:20:a6:ab:dd:48:57:bf:25:5d:5d:
         0a:e0:3c:3f:45:9c:db:f5:51:bb:40:ad:5b:7e:c2:4b:e6:6a:
         8d:1f:28:c5:ce:db:d7:7b:0f:12:67:d3:ff:1f:d1:96:b8:d5:
         80:74:85:2f:5a:84:1c:bc:d1:19:a7:0e:63:8e:20:e6:1e:5c:
         6d:1a:98:e8:0e:72:31:fc:87:01:38:55:55:ef:43:a1:e6:ca:
         13:54:b4:43:9d:50:75:d8:52:5f:8e:36:ac:bc:eb:ec:82:12:
         c7:e4:49:53:8f:02:0c:c3:e2:c9:94:32:80:d9:7a:d5:70:06:
         1f:02:29:e2:bd:c6:5d:bf:8e:84:58:2a:05:e7:b3:e1:8b:19:
         5e:a6:75:ef:62:12:da:f2:a7:56:fc:de:0e:ce:ae:55:f6:2f:
         e4:f8:ec:18:c7:61:80:90:f7:37:e7:5b:5a:5e:5d:c9:ed:e5:
         47:57:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:47:30 2025 by rpki-client