Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File:                     Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier:          tow+/IDKpKHddrW0+Evz18P4Er5p2lOT++AYsnSO7Do=
Subject key identifier:   4B:D5:16:28:96:43:A0:45:28:6B:D8:12:67:72:1A:61:52:BE:A0:B0
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer:       /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial:       0196A49C8AE2CEDF7B97943FB8BCF9FCA442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number:          1533
Signing time:             Tue 06 May 2025 08:00:44 +0000
Manifest this update:     Tue 06 May 2025 08:00:44 +0000
Manifest next update:     Wed 07 May 2025 08:00:44 +0000
Files and hashes:         1: 5jwygws2szQICkFAbQDt0DfTE24.roa (hash: CRuVg76LibQeWgQvKJXvsry4Ac92m/NILVupnVOrdIE=)
                          2: 8i0pFHh3jLLr_PpCWW1tgeOnNls.roa (hash: zniHfjj60ALgt1todbQ0gmqBBGRN1w6Z180L0gimowg=)
                          3: M-D765qKLa5rpx98GwEizjipWV0.roa (hash: sZVekYH0lnyQrwkjPmHgYKbukfVk03AtK4DNYJI9l9w=)
                          4: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: owILvTLN8r5rQeMi9sKo5MC9adGnuqqMMVmAjrAZEzk=)
                          5: ehgAzBDC5TDJSiS2woTLYA9Z-4E.roa (hash: K6RVhNClpsXwi3nvwOK5VpovbryAZNiXfSXsDcn1PP4=)
                          6: vOfFSwnv08l6OdPeZZK6ruAsY5E.roa (hash: HCrYAQ+7uNSAWRDrRhQ/VN8mpYkiEOW8ifFbRzWfvZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:9c:8a:e2:ce:df:7b:97:94:3f:b8:bc:f9:fc:a4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
        Validity
            Not Before: May  6 08:00:44 2025 GMT
            Not After : May  7 08:00:44 2025 GMT
        Subject: CN=4bd516289643a045286bd81267721a6152bea0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:da:84:b3:67:b6:90:05:d4:22:1d:a8:35:
                    fc:f8:13:cf:e5:22:6a:31:1a:cd:10:56:b9:3d:85:
                    c3:b8:c5:7f:85:3e:16:66:4f:5f:4a:03:a0:82:d9:
                    64:73:3f:a3:39:fe:cd:07:a1:fe:77:83:01:a6:a0:
                    5a:83:fb:b2:bf:18:c3:20:07:c4:0b:0c:57:58:3e:
                    18:88:3a:94:0d:b0:f0:50:e1:26:6e:5b:a3:6e:a9:
                    de:f8:ec:99:91:5b:f1:dc:a0:16:25:b9:bd:73:c1:
                    87:eb:cc:3f:24:e8:1f:cf:60:46:d5:50:ed:49:5b:
                    42:7f:1d:8d:e0:68:b1:4e:86:ee:53:0c:62:ea:61:
                    d6:7f:9d:25:54:69:1a:ee:df:5a:f5:54:43:70:1b:
                    bf:71:c3:3c:d2:f1:a3:04:ad:06:fa:e9:d0:d5:cc:
                    30:6b:72:a4:3e:08:9a:12:93:9a:c0:52:e4:36:08:
                    bd:62:79:31:ff:f1:dd:b4:6c:a9:c6:9a:4d:32:b1:
                    c8:07:70:57:9d:74:09:be:f5:76:71:58:b9:90:04:
                    52:83:7a:65:aa:36:32:48:79:21:98:92:bd:31:5e:
                    4b:39:e3:47:f4:38:1a:8d:84:c5:de:6e:df:b9:b3:
                    6f:8c:85:38:e3:5d:07:52:49:1f:b2:6e:3e:94:85:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D5:16:28:96:43:A0:45:28:6B:D8:12:67:72:1A:61:52:BE:A0:B0
            X509v3 Authority Key Identifier:
                keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3f:b5:eb:b0:07:d4:fa:a4:cc:50:90:3e:66:ba:56:fb:d4:
         ba:4d:42:ef:bb:cc:9f:fc:8e:c5:2b:62:85:e8:8c:af:be:9e:
         da:ac:0e:95:f7:89:4a:37:32:29:e0:f8:02:58:98:16:6c:90:
         01:2a:b5:a7:eb:c0:7a:14:81:07:1d:e0:9a:00:e6:4f:49:ea:
         2d:c9:ca:57:3f:06:76:d7:c1:c5:32:21:5e:85:0a:dd:2e:16:
         b9:13:87:f4:a2:c4:fa:87:19:3f:63:ab:7d:68:6f:71:04:9c:
         a1:f0:72:77:62:f0:6e:c0:35:cd:5f:a8:4a:32:e0:ab:c1:aa:
         c7:84:68:a8:2f:e8:8b:44:a7:7d:e2:de:91:fd:bc:64:3f:30:
         8f:a0:e0:b1:19:84:3f:84:2b:0c:43:38:cd:91:3a:5a:c1:15:
         d5:e6:92:1b:71:39:d7:b7:52:59:48:41:cb:65:59:7e:4a:16:
         a9:1c:8c:b2:ee:ae:ad:87:10:03:96:54:ab:87:71:3c:82:52:
         7b:d8:5f:a3:b7:6c:24:fe:38:4c:0d:6f:9f:86:4b:23:ef:85:
         af:76:d2:cf:a3:2d:35:63:20:96:0e:23:1b:d5:96:8a:2e:76:
         41:69:08:7f:4b:eb:00:a9:06:fc:ac:d3:66:06:76:6f:68:44:
         73:20:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:59:55 2025 by rpki-client