Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
File:                     TgfHPboamfW7wV94xjkKqZwmmCQ.mft (raw, json)
Hash identifier:          0wtWG1K5hjYBVSfWG2kYXkyT074ivjIw99AyCoCc+Cg=
Subject key identifier:   BC:46:D9:F1:58:A3:5A:00:ED:69:1A:27:8B:D0:E1:FD:F5:58:AF:7C
Authority key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Certificate issuer:       /CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Certificate serial:       0196D69C218B7DCA70965764BA41A23DF433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
Manifest number:          1308
Signing time:             Fri 16 May 2025 01:01:18 +0000
Manifest this update:     Fri 16 May 2025 01:01:18 +0000
Manifest next update:     Sat 17 May 2025 01:01:18 +0000
Files and hashes:         1: TgfHPboamfW7wV94xjkKqZwmmCQ.crl (hash: LvPtJNiu7BZAT9qnyervk5mkB6M+XHPuBvuxYysqarw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d6:9c:21:8b:7d:ca:70:96:57:64:ba:41:a2:3d:f4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
        Validity
            Not Before: May 16 01:01:18 2025 GMT
            Not After : May 17 01:01:18 2025 GMT
        Subject: CN=bc46d9f158a35a00ed691a278bd0e1fdf558af7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:06:af:48:fd:ff:5b:bd:2e:6f:83:c4:c4:
                    f7:1d:46:b4:60:e4:db:a6:c7:a7:1b:8b:a7:71:c9:
                    93:c9:73:eb:bf:60:74:15:fb:83:2b:fb:be:09:af:
                    0f:fd:dc:f6:54:eb:c5:2e:12:df:36:99:b5:c1:f9:
                    1d:8b:96:a5:30:c2:bd:18:a3:2e:3f:22:ac:ba:46:
                    7c:78:0f:d8:44:c2:cf:80:d4:4f:d4:e5:35:f0:11:
                    3d:d2:79:ac:95:f3:49:8d:6c:d1:4b:0a:45:ac:db:
                    ce:93:9a:67:d2:82:fc:8d:de:40:9f:fb:24:2a:3b:
                    3e:a0:fd:63:c7:e3:29:c4:a8:a3:cf:41:17:2b:df:
                    30:8b:02:e0:ae:3f:c7:4c:b5:97:36:cc:57:21:64:
                    58:32:1d:9a:2d:a1:d7:2f:71:7c:c1:23:7c:56:6a:
                    2d:6f:31:4a:86:f5:cb:04:ca:80:94:74:21:8a:15:
                    04:c6:49:36:cf:70:fb:16:df:5d:ad:06:f6:a3:f9:
                    24:44:f5:39:6d:58:cc:22:e4:2b:35:2f:97:37:65:
                    b2:10:31:53:c1:0f:55:89:46:5c:df:b1:0c:0e:ba:
                    41:66:b1:fc:6d:a8:da:d1:29:3f:84:ec:08:56:87:
                    4b:26:89:b2:a7:95:bf:0f:4b:84:3c:cd:a9:c3:e6:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:46:D9:F1:58:A3:5A:00:ED:69:1A:27:8B:D0:E1:FD:F5:58:AF:7C
            X509v3 Authority Key Identifier:
                keyid:4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b0:53:3f:28:c7:07:f6:41:ae:42:81:cf:51:9c:f2:a5:c2:
         f6:a7:b0:91:79:c0:cf:11:b1:99:b6:66:a7:7c:8c:68:50:50:
         dc:42:4c:f7:f3:2a:0e:7d:05:c8:82:f2:94:a5:7a:f0:0c:0c:
         cd:9e:2b:4f:69:dc:73:03:a7:05:59:5f:4d:70:81:d1:39:1c:
         52:b0:da:58:22:fc:8c:69:30:ff:55:ea:e6:17:5b:8e:31:1b:
         52:aa:62:96:77:aa:80:96:12:c7:85:43:d0:12:45:5c:64:e2:
         e6:bb:48:e3:8a:9c:80:3e:6d:db:ed:2f:e3:64:ff:e1:41:6d:
         28:9c:06:56:7b:3d:19:08:67:a1:db:30:05:2b:40:41:26:78:
         60:67:30:f2:4e:08:7c:ba:c9:02:a1:64:92:6c:d9:19:0e:59:
         c9:c2:71:ed:9e:e1:8f:d1:fe:10:8f:5f:30:b1:e8:9b:c9:fc:
         5b:e0:37:c4:9b:b9:d5:aa:ac:2e:41:e6:6c:5b:2f:83:0c:94:
         68:d5:87:64:f8:f7:2c:9b:fd:2e:31:8b:22:11:02:5c:e8:e0:
         51:20:5b:5b:99:97:5c:79:43:8a:ad:0f:57:d5:30:78:51:82:
         c8:76:5f:40:03:11:cd:a1:d2:45:1c:14:81:e0:aa:7a:1e:6b:
         b3:d5:06:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:20:20 2025 by rpki-client