Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File:                     tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier:          cwwo6dOuiH+rluoP9b5RVqErBKs2xA5UOpzqFVmGKgo=
Subject key identifier:   E5:2E:DB:83:37:84:B1:CA:26:3C:CA:48:6A:C8:CA:A0:A9:E0:77:5E
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer:       /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial:       0197B77C817CE384E85C1529D0F84106E29C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 17:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:19 +0000
Files and hashes:         1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
                          2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
                          3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: o/fZ5DM4SU5ke/KtfMN58GPtqY/XaYRjCW73w5xZjls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:81:7c:e3:84:e8:5c:15:29:d0:f8:41:06:e2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
        Validity
            Not Before: Jun 28 17:01:19 2025 GMT
            Not After : Jun 29 17:01:19 2025 GMT
        Subject: CN=e52edb833784b1ca263cca486ac8caa0a9e0775e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:21:b3:8e:24:98:23:41:4c:58:ff:99:b9:
                    58:00:6a:e0:0c:be:fc:2a:d9:61:7b:41:f8:52:52:
                    2f:a2:30:4d:c5:0a:00:e8:8b:b1:a9:7c:7f:54:2b:
                    b9:3d:30:ed:86:2e:fe:69:34:97:cb:0e:3f:2f:be:
                    73:ce:c4:61:32:36:ad:a6:90:f8:72:25:94:55:eb:
                    bc:b7:66:65:89:6c:4a:55:b8:da:e1:11:30:6f:49:
                    24:6d:47:24:a5:00:b8:e3:ab:dd:77:54:51:7d:22:
                    59:80:87:e2:45:45:ed:bf:b6:c0:c2:af:24:84:cc:
                    8a:b4:0c:41:07:08:2f:72:d2:eb:66:94:98:5e:14:
                    d7:a3:82:34:df:f2:51:92:e8:81:67:78:3e:21:ea:
                    37:04:7a:2f:01:11:cd:67:20:53:58:16:fe:7f:1b:
                    aa:20:55:fd:4a:dd:c3:d4:ed:83:45:23:f1:62:88:
                    f1:8c:aa:6e:bf:cc:31:7d:15:bf:b0:2a:e4:c9:1a:
                    e3:bf:42:43:6d:f4:0b:30:76:40:37:30:86:5a:f3:
                    47:22:16:9d:5e:83:d5:1f:ea:91:5c:81:6a:bf:91:
                    a2:dd:8c:55:5f:8c:86:95:1d:3b:74:9e:47:17:b0:
                    b9:43:d1:51:56:c6:98:3c:e5:63:99:0d:45:ce:93:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2E:DB:83:37:84:B1:CA:26:3C:CA:48:6A:C8:CA:A0:A9:E0:77:5E
            X509v3 Authority Key Identifier:
                keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b3:18:8e:7f:6b:fb:9a:5a:c6:8b:ef:b5:b7:45:f0:a4:9d:
         38:95:8f:0e:ad:f5:d4:aa:10:89:cb:7a:ce:e8:3a:6d:cd:42:
         eb:c9:06:59:72:c1:f4:be:c7:d4:86:24:c2:ff:0a:3f:62:15:
         37:4a:39:c6:20:33:4b:1d:6f:91:69:15:be:fe:43:88:d1:1f:
         c2:71:d1:a6:38:e4:3e:99:c7:c1:4b:04:99:f7:63:59:1d:22:
         52:bd:21:25:96:5c:f4:2d:05:78:48:60:3e:a4:3e:55:c6:50:
         8d:92:53:59:c9:94:32:d5:b6:b4:dd:34:47:22:e8:d9:7c:23:
         c3:85:a3:ba:41:ea:64:96:97:61:0d:c6:8f:b3:16:5f:c7:ab:
         72:fc:49:4e:82:b4:49:99:cc:0e:90:44:c0:94:80:18:42:b7:
         01:fd:36:34:67:4c:c7:e2:2f:56:e0:7c:f2:e4:50:be:df:0f:
         fc:d4:ff:1d:a3:df:f3:c7:c0:c8:f1:32:ba:5a:c0:c4:96:43:
         1e:62:7d:6f:4e:27:fd:c4:72:49:2c:5b:7c:4c:9f:db:a6:d6:
         38:b6:dd:04:8f:85:90:26:65:9a:5b:9f:40:9b:3e:8c:44:6c:
         65:2b:c5:93:30:3f:c8:26:bb:0f:87:56:0e:10:68:48:e0:22:
         60:18:5b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:55 2025 by rpki-client