Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File:                     tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier:          Tv6E1Np1LqT5fnuCOzIWqpB/EjaL6Hg9JuArX6W/zkQ=
Subject key identifier:   D7:3D:BD:4D:84:5F:7B:DF:B3:3F:C7:D2:87:F4:7B:19:23:83:88:CD
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer:       /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial:       0196B7EC3B76989676F689EBD98B192BFC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number:          01FF
Signing time:             Sat 10 May 2025 02:00:34 +0000
Manifest this update:     Sat 10 May 2025 02:00:34 +0000
Manifest next update:     Sun 11 May 2025 02:00:34 +0000
Files and hashes:         1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=)
                          2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: x9VrRkdWjCBzE4uytE+l+GtCD4AdRt1hC7esTqCQ/Os=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:ec:3b:76:98:96:76:f6:89:eb:d9:8b:19:2b:fc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
        Validity
            Not Before: May 10 02:00:34 2025 GMT
            Not After : May 11 02:00:34 2025 GMT
        Subject: CN=d73dbd4d845f7bdfb33fc7d287f47b19238388cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:04:e8:8b:d6:b4:3a:3f:01:7c:88:a9:b0:
                    dc:58:c0:3f:1a:3a:89:46:78:7e:df:89:f2:76:9a:
                    8c:46:94:2f:6d:ed:e7:9e:48:17:8b:1e:4a:27:5e:
                    a5:56:6c:e2:71:0c:12:aa:44:84:60:76:3a:1d:43:
                    f8:8e:e0:2c:54:c1:30:84:9f:24:3a:16:df:13:99:
                    6e:f3:cf:f2:b5:07:36:95:ad:df:54:76:b4:a7:d6:
                    53:7d:a4:58:21:09:09:fd:04:f0:82:c2:c9:01:84:
                    31:8c:89:34:11:06:f5:b3:94:37:d0:4c:f6:1d:80:
                    9d:c2:f2:69:5f:24:a5:f3:ba:74:3c:f2:53:7f:00:
                    2f:94:0b:c2:0a:a1:d7:1b:0e:2b:2b:91:6d:14:ec:
                    be:40:2a:ad:16:2e:0f:a2:6c:06:39:27:15:ca:3f:
                    63:38:bb:b2:be:43:c9:2c:7a:c8:d5:93:73:0e:ed:
                    be:6f:25:23:42:62:16:81:d6:86:50:fb:ee:8d:50:
                    fb:01:6c:63:ca:a0:05:5c:01:5b:08:df:90:13:59:
                    c9:76:e6:4a:b6:48:4c:48:60:2f:6b:c5:29:7c:8f:
                    3f:41:cf:fb:ce:76:35:89:2f:71:40:7a:1e:95:cb:
                    98:16:01:58:0a:96:b1:f4:89:78:f3:2d:d2:ab:70:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3D:BD:4D:84:5F:7B:DF:B3:3F:C7:D2:87:F4:7B:19:23:83:88:CD
            X509v3 Authority Key Identifier:
                keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:93:6a:30:34:9b:cb:9d:49:40:c8:cd:cf:43:a5:67:4a:ed:
         02:8b:45:29:10:aa:32:92:d3:31:08:7f:2b:fe:43:09:53:38:
         d5:5e:2a:11:c6:ea:c2:b8:33:3d:21:2f:3b:f4:0e:9f:ab:da:
         d4:00:f3:fe:20:ae:52:1d:e0:88:d3:5c:77:a2:e6:fa:12:b5:
         87:80:84:ec:07:c9:3d:73:51:a1:a8:ac:94:8c:b5:38:95:d6:
         61:04:22:2b:29:3f:31:b8:69:44:9f:09:24:6b:04:87:bb:75:
         2b:fa:9b:de:4e:0f:8f:f4:9e:b3:9b:63:2c:4a:c4:4f:c4:21:
         a7:80:e3:b4:b4:c5:f0:fb:d8:60:a1:99:ca:84:a7:0e:e3:e5:
         fd:ce:d3:19:cb:9a:a5:a7:3e:88:ad:e3:bd:ba:f8:18:81:70:
         cd:ef:7d:7a:ee:71:55:4e:03:70:0e:c0:27:58:91:9a:d0:3c:
         61:45:bb:ec:c8:e8:75:5f:1f:bb:45:1e:b9:09:ca:59:9b:54:
         7e:71:1b:32:cc:cc:4f:e8:f8:a9:cd:bd:34:3d:1b:b1:37:af:
         d9:13:0a:aa:c8:81:bf:0e:11:70:07:a4:da:5b:a8:31:65:1f:
         03:4a:91:b0:34:b5:7f:ac:f8:33:c5:cc:03:13:a1:aa:51:50:
         db:92:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:09:58 2025 by rpki-client