Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File:                     e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier:          LTSDo24Q2r5ptvenTo7DcoNqT+roGDkTYYRQa8O/rkA=
Subject key identifier:   11:75:89:76:30:C1:01:1A:75:EB:DA:68:CF:72:A5:4D:D5:07:FB:16
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer:       /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial:       0196A3534DA422929ADB227C89931867D32C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number:          0A89
Signing time:             Tue 06 May 2025 02:01:07 +0000
Manifest this update:     Tue 06 May 2025 02:01:07 +0000
Manifest next update:     Wed 07 May 2025 02:01:07 +0000
Files and hashes:         1: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: k/2itEAZcufMeMprXb0m6MFri7kEPCLP/6mhYbxewOM=)
                          2: v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa (hash: R72iTRb1FtOGatFwyC/tAu8uMgwI2562hZtdzD4n6xY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 02:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:53:4d:a4:22:92:9a:db:22:7c:89:93:18:67:d3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
        Validity
            Not Before: May  6 02:01:07 2025 GMT
            Not After : May  7 02:01:07 2025 GMT
        Subject: CN=1175897630c1011a75ebda68cf72a54dd507fb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:97:3a:20:a3:6b:13:99:70:1e:cb:28:f9:9c:
                    57:cc:66:7f:59:7c:f5:89:ca:cc:13:5a:c9:f9:9c:
                    e0:a7:24:f7:9b:cd:12:c6:77:15:99:16:d8:19:51:
                    5f:35:6c:ef:8f:59:1b:2e:18:e1:08:a5:11:6f:6d:
                    2e:45:1d:eb:6e:90:f4:ab:e5:7d:ac:34:32:ce:18:
                    ac:23:68:9e:1d:83:9b:db:be:4d:0f:8e:92:3f:de:
                    4f:94:b6:e0:52:50:b9:3e:00:f1:d4:9e:d1:c8:11:
                    97:7f:b5:8e:b2:83:8e:73:05:c3:8f:22:11:aa:f2:
                    1e:33:12:7b:dc:9d:b4:4e:b7:c5:be:b4:b2:53:ad:
                    9f:9f:cb:a0:cc:46:3e:11:20:47:51:bc:5e:5e:a1:
                    ed:cd:ea:5e:45:c3:30:dc:99:87:d5:20:76:36:72:
                    5c:fd:39:f3:e5:c1:2a:16:0a:ee:8f:2c:14:51:0a:
                    c5:e9:c9:ca:df:32:38:c5:1a:b3:54:2c:65:05:cc:
                    83:3f:6c:14:49:79:2d:ce:58:74:91:a3:0a:14:55:
                    e2:81:73:2d:19:0e:51:38:b4:32:ba:f1:6b:95:39:
                    52:97:87:fd:1b:0c:bb:f9:b4:3c:1b:29:67:ee:45:
                    96:1c:4c:c6:8e:4f:c0:a3:80:8e:28:72:b1:da:e1:
                    71:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:89:76:30:C1:01:1A:75:EB:DA:68:CF:72:A5:4D:D5:07:FB:16
            X509v3 Authority Key Identifier:
                keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:7f:da:5d:18:ec:db:fb:9c:be:d3:ae:05:61:22:e5:42:e2:
         07:a0:e8:9d:5c:6b:73:47:d2:cc:e2:48:a1:e6:21:b6:e3:e8:
         42:66:ac:35:15:59:a8:58:f6:6e:b0:26:bc:4a:a0:95:b7:83:
         3f:e6:65:7b:c3:c3:d6:f4:25:3c:c3:94:13:40:a0:8d:c7:c7:
         80:6c:b5:4e:2b:93:4a:21:2e:5b:16:40:ff:d3:65:c0:df:1e:
         50:fc:ce:74:64:af:b9:bf:5a:42:48:d6:40:3d:e8:94:05:84:
         14:63:bd:85:06:ea:ac:0b:be:ac:4b:f5:b0:95:a6:be:b6:15:
         12:f3:e1:a8:c2:ad:68:02:ce:ac:6a:af:51:6b:05:2a:b0:4d:
         83:68:be:f2:c6:5a:04:5b:73:31:ac:c7:05:d4:af:ce:2a:01:
         2d:92:3e:ca:59:d1:a9:4c:e8:3b:65:43:07:d7:ed:08:78:ee:
         1a:44:63:b3:2e:6b:82:ca:31:76:6d:bd:86:8d:46:55:6b:6e:
         88:79:28:b7:b8:04:d4:ed:92:42:61:8d:64:97:2c:a3:b4:e0:
         3e:fb:75:42:04:b5:dc:1a:bf:fb:1f:95:fb:07:44:6d:07:6f:
         da:80:68:f0:2b:57:f3:f7:3b:12:3d:fa:75:58:0e:15:7b:f8:
         b3:1a:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:18:21 2025 by rpki-client