Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
File:                     tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json)
Hash identifier:          PEm9yWpjcPSM6t93zLW2z6/PZ2dHXW2boqDVufaJdfk=
Subject key identifier:   55:5D:AE:04:91:85:21:81:C8:A3:83:6B:6D:A4:AA:9E:86:00:50:B0
Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
Certificate issuer:       /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Certificate serial:       0197B6A0576F004EED078E35E0371B53D378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
Manifest number:          1469
Signing time:             Sat 28 Jun 2025 13:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:50 +0000
Files and hashes:         1: EMcvovEYE0weVYExSrcia69GSOA.roa (hash: OJBdQmyJiJbXqpTEN6hCoMQhIqdAMMZRqxqDd5UOvg4=)
                          2: TUnXBzr-7-tBP6GdN78mI5ahxe8.roa (hash: xFiJ6sW6C+HN63QoP5r6OyDOw7tPBAVqmIPMSnDnKbc=)
                          3: qS4NQoySScwU3zHXzq6HsEt5IDs.roa (hash: jlv4YTMjTvaq8qodzyyZpHbeudK0kBUwOoEXewAmNyo=)
                          4: t_X4QuW3--N3561kP8RWk8vRzAw.roa (hash: 2ahNsLwCOZ1nVC1o0aItVno4KD1+MsUZ68JOkj0O5Wo=)
                          5: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: fuhIxex9K+iuOAI6A1jPGbaiVSi+wwDhAeIXUIYdRso=)
                          6: xtJ3lZ04sv_4bqAlJ24ZbtoJeiU.roa (hash: ZKVGTwwxi9fVOYidTSfA/TmCkWo94r19B530igg9je4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:57:6f:00:4e:ed:07:8e:35:e0:37:1b:53:d3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
        Validity
            Not Before: Jun 28 13:00:50 2025 GMT
            Not After : Jun 29 13:00:50 2025 GMT
        Subject: CN=555dae0491852181c8a3836b6da4aa9e860050b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:a5:05:8c:f0:3a:9d:26:a8:07:c0:9d:b0:
                    cb:ff:f0:82:50:e0:47:fc:5a:01:a2:01:96:6c:b8:
                    ee:42:a0:69:06:e7:0d:f1:cb:be:4d:3b:9c:bb:82:
                    02:d5:9f:37:d9:36:c9:1b:12:51:db:2e:10:f3:a5:
                    42:5b:91:dc:6b:cd:c7:cc:a0:08:3f:b4:0d:cd:33:
                    79:01:88:11:91:44:d6:0e:fc:9f:b8:5c:ce:ae:67:
                    2b:aa:4c:79:c6:2e:ab:3b:60:a5:b3:8c:12:05:a6:
                    cf:6e:cc:78:c1:a8:7b:5f:dc:97:f2:da:87:23:e8:
                    3f:77:d9:be:2d:08:ca:59:77:26:45:b8:49:1a:2f:
                    51:ff:ab:60:51:30:69:c3:68:5b:8d:df:c6:62:c7:
                    1b:aa:9c:86:34:92:12:0b:b7:b5:cc:0f:13:6b:38:
                    1a:0e:9f:e4:23:fa:39:ff:9d:d1:1e:c0:10:08:02:
                    94:1d:5f:4d:b8:a1:d3:f6:38:d5:30:d2:f1:08:56:
                    0f:d7:f2:8e:b4:80:98:19:18:ac:4c:7e:b8:b1:3a:
                    bc:8e:ee:d4:25:72:64:4a:16:ca:cd:97:7c:a7:21:
                    31:47:34:c0:03:9b:95:bf:7a:4a:b1:21:ae:77:9e:
                    c8:59:5a:45:ec:83:ab:e6:9d:53:77:97:30:06:d8:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5D:AE:04:91:85:21:81:C8:A3:83:6B:6D:A4:AA:9E:86:00:50:B0
            X509v3 Authority Key Identifier:
                keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:08:2a:84:2e:bf:bf:ac:18:85:6b:c5:23:ab:dd:d4:95:
         98:e3:df:b3:15:36:e8:81:c8:cc:0b:84:1a:d7:bf:19:8c:72:
         73:64:1c:a2:bc:90:54:8c:ff:ae:5c:b4:4e:96:0b:83:31:71:
         4e:02:08:87:1c:76:86:43:83:4d:6a:e4:80:d7:8b:2e:0c:8c:
         6e:ae:32:6b:36:63:4b:b7:5b:a1:50:16:53:67:88:04:cf:f4:
         00:8b:ef:ea:d4:d7:8e:eb:01:64:a9:93:cf:67:4c:a3:a4:2f:
         34:5e:9c:c6:52:0f:c9:68:0f:84:f6:9a:a3:82:0f:a0:57:30:
         bc:74:7d:b1:88:1b:2f:12:73:15:f3:fa:0b:8c:8e:09:76:84:
         ec:89:22:14:ca:c6:6a:8a:2d:a1:95:f1:70:28:ac:a4:3b:17:
         cd:f2:86:dc:82:cc:ca:a7:25:13:d4:bb:8a:b5:96:f8:46:57:
         43:d8:1a:13:6a:5b:62:dd:19:00:02:b1:d5:36:40:53:cb:43:
         af:21:a2:60:69:3a:c3:fc:69:92:65:2e:da:0c:b5:8f:36:f1:
         59:c3:e8:2f:c8:63:a7:78:44:75:bf:48:6f:4b:07:46:b3:d3:
         62:50:5c:e8:a1:6f:31:00:29:8b:b5:72:40:7b:44:a7:28:05:
         72:87:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:07 2025 by rpki-client