Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          BAUC+wdNrZC6wiY7GMVdTpF/dVJr4ozSmnkI0CJfHhI=
Subject key identifier:   07:7D:78:C4:95:A6:D5:E4:20:96:22:A9:08:09:D5:26:43:65:58:66
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       0196A3F7CBDC994C78223826C48C4D26E124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 05:00:47 +0000
Manifest this update:     Tue 06 May 2025 05:00:47 +0000
Manifest next update:     Wed 07 May 2025 05:00:47 +0000
Files and hashes:         1: HhltdqvEvMp1haFhX3fIv16Ni_Q.roa (hash: NacxfWEhGCqjQzcJPOYmDDogo7Rv0RM9x208Jen3m0s=)
                          2: sI2dGOEr8nZk6D1YNbEa7wlaZyM.roa (hash: kx5EWM4e9UqILncO7G7gUfdu6rl4RFiOFynpDnpX02c=)
                          3: sxbnQp-HZOAWEFzphM2K1lCVnVg.roa (hash: kEKMwrabqx6d8HV9sni4rJcCg8Olec1gaFW1f6LNEvE=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: pmdqIlypkWqGkZeArklebgmW06EkiOlBMixRulxZYXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:f7:cb:dc:99:4c:78:22:38:26:c4:8c:4d:26:e1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: May  6 05:00:47 2025 GMT
            Not After : May  7 05:00:47 2025 GMT
        Subject: CN=077d78c495a6d5e4209622a90809d52643655866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:af:83:5f:5e:68:62:be:e1:50:ce:60:56:
                    7d:4f:0f:a8:b0:cb:ce:a7:ea:dc:21:32:30:cb:34:
                    4a:4c:93:ce:e8:e4:ea:36:f1:d4:e4:d5:9d:05:2b:
                    e1:a0:59:b6:45:2c:97:05:86:77:01:aa:c4:44:2f:
                    77:a9:e8:be:3e:55:ed:25:14:6a:12:fa:6f:0d:a1:
                    58:75:76:6f:35:81:a1:17:86:35:d6:b4:b8:1a:02:
                    70:d0:dd:6a:eb:ed:48:51:70:69:44:25:3f:ed:d0:
                    f7:9f:96:b3:5f:16:30:4f:df:c2:67:6d:b4:66:b3:
                    e2:48:7c:54:66:7b:34:6a:94:46:74:22:0e:2f:4e:
                    72:10:b7:8e:07:d3:70:2f:61:74:b3:6e:66:43:e9:
                    a4:25:3f:5c:75:80:11:50:e3:fd:3e:6e:16:66:63:
                    29:77:6b:0e:43:83:01:ee:1e:d3:ad:bf:ca:a3:72:
                    25:77:77:c6:1a:78:de:e5:c6:aa:ee:5c:0b:e8:17:
                    cd:69:6f:35:e9:d1:e4:e3:87:14:60:1a:c8:75:20:
                    66:f8:d1:86:ba:84:41:c4:20:d1:b5:ed:6a:24:60:
                    5e:da:75:a5:61:b6:50:04:6e:51:a2:6b:1d:f7:21:
                    7d:fa:25:bf:54:55:cf:f9:04:db:d3:f9:c4:cc:a5:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7D:78:C4:95:A6:D5:E4:20:96:22:A9:08:09:D5:26:43:65:58:66
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:c4:d0:95:77:55:e9:2c:df:b2:09:a3:20:3f:08:d5:cb:
         35:cf:ab:f0:62:fd:fd:53:61:9e:bd:a4:94:8e:d1:ab:09:61:
         4f:a0:1c:52:00:8e:fb:c3:52:0d:2d:cb:ae:d4:e9:8d:41:a8:
         28:9f:4f:37:90:90:d4:85:f6:74:49:16:2b:ca:79:eb:c1:95:
         2a:b3:ca:5a:87:17:c4:46:46:f3:16:86:99:92:c3:f9:50:52:
         c7:a0:93:31:46:89:fc:e8:f4:4c:47:ff:e6:af:57:be:a9:21:
         20:f4:90:83:43:25:cc:c4:4e:6f:d2:7c:f6:29:c2:a8:b7:b4:
         83:85:fd:6a:30:e6:a6:ac:2a:fc:ac:f4:31:ce:67:be:22:af:
         55:f9:3a:e4:d5:bd:d3:7a:87:f5:88:dd:59:27:c4:ea:8f:de:
         3a:2b:64:ed:c2:36:ec:d5:1b:5e:3c:fb:a8:d2:33:39:9c:34:
         7f:92:fe:93:e3:b8:26:be:79:ce:af:27:60:9b:b8:9c:76:ed:
         bb:c0:e9:e9:4d:09:17:b2:69:1b:c7:4d:36:05:5d:e9:d6:d3:
         53:04:fa:9a:26:d7:52:a0:70:f9:34:4b:7c:e1:94:e2:aa:79:
         3b:fb:b8:ea:45:2b:da:7d:ca:69:87:0b:a6:79:2f:eb:f7:36:
         58:7e:82:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:17:57 2025 by rpki-client