Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File:                     Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier:          NYh7HBYzYI1ykwSoXr+sOChoVVNlNmw+BuEfRFdGpJw=
Subject key identifier:   C3:C7:94:94:01:51:FB:5C:43:22:57:35:F6:4C:97:3D:A4:A8:F0:CF
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer:       /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial:       0196A91DEE6AA0D0305D4AAC41132273EBFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number:          0C0F
Signing time:             Wed 07 May 2025 05:00:33 +0000
Manifest this update:     Wed 07 May 2025 05:00:33 +0000
Manifest next update:     Thu 08 May 2025 05:00:33 +0000
Files and hashes:         1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=)
                          2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: Mu4bRgIbDLjT9lvQtZNebo3eIvlZjTp3HFc9rF18rg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:1d:ee:6a:a0:d0:30:5d:4a:ac:41:13:22:73:eb:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
        Validity
            Not Before: May  7 05:00:33 2025 GMT
            Not After : May  8 05:00:33 2025 GMT
        Subject: CN=c3c794940151fb5c43225735f64c973da4a8f0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:b4:9a:20:88:54:05:7e:28:68:87:9e:99:
                    67:97:52:e7:c7:0c:04:b2:9d:40:42:57:f0:a2:6b:
                    a3:c7:6e:52:e0:1c:dd:1d:ff:e0:f7:6a:b6:74:13:
                    ba:6d:4e:87:b4:58:ed:ed:ab:3f:be:5c:c1:ac:9f:
                    88:43:0d:89:7f:cb:6f:c5:97:80:d3:37:1a:8c:33:
                    ff:3c:c4:43:07:b5:8c:c4:ae:d8:23:ed:e1:34:2f:
                    1e:4a:50:ab:00:b3:cb:b8:08:fb:80:b4:9f:c3:97:
                    18:3f:d5:36:54:3e:25:a2:4f:46:e9:6f:6a:bc:c8:
                    05:a3:37:9f:75:eb:b5:46:8b:3c:df:3d:fc:55:fa:
                    7d:aa:ce:6a:20:fc:3d:87:14:f5:0c:88:6f:44:5a:
                    97:37:8e:0e:0e:2b:79:fd:8c:3a:f5:c8:0e:ef:d5:
                    44:83:bc:de:02:86:35:79:dc:7e:35:55:36:1c:e8:
                    67:20:c0:42:60:3d:23:98:0c:91:e9:12:5f:d3:bd:
                    51:71:e1:a0:11:c2:b2:52:07:ec:b2:11:1d:83:8a:
                    4c:bd:db:03:df:c0:2b:ba:ca:fb:cd:eb:12:f3:26:
                    66:51:0e:2f:64:f9:64:6c:f1:72:00:6f:c2:7a:69:
                    98:09:eb:05:50:be:73:dc:c4:09:1c:93:68:66:d9:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C7:94:94:01:51:FB:5C:43:22:57:35:F6:4C:97:3D:A4:A8:F0:CF
            X509v3 Authority Key Identifier:
                keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e5:0c:f1:19:cd:dc:96:44:0d:fe:49:2f:b1:24:e0:86:18:
         63:c4:45:9e:87:16:ac:b0:10:5e:e9:83:1b:8e:d5:5b:11:e6:
         67:37:8e:16:42:32:b1:c1:aa:66:b4:5a:ba:e4:0c:5d:ff:09:
         3c:3d:1a:6a:cc:0d:6e:14:6a:a5:f9:0e:6e:9a:33:38:70:cc:
         9c:cb:91:8d:9c:71:c2:ca:3e:bc:68:89:17:63:db:fd:5a:69:
         16:e7:d2:cc:01:0e:ef:a6:2e:ac:cc:95:c2:1a:68:f3:a7:05:
         d2:d1:6a:2d:73:56:37:21:69:78:b2:da:06:1c:a2:1c:41:26:
         66:27:95:63:68:a3:2e:0e:cf:1f:ac:c4:44:29:56:04:c6:83:
         a8:03:17:41:cf:33:5d:40:17:f5:86:1c:e1:60:da:8f:a4:43:
         56:cf:33:ac:24:04:7d:15:e5:1f:67:c4:77:a4:ca:c0:01:c9:
         3b:48:66:5b:d3:20:33:3d:f9:d8:a9:74:a0:d3:b4:e2:c8:21:
         d0:02:d8:77:d8:87:e3:c6:81:84:a7:4b:eb:98:5a:74:a6:36:
         93:47:88:59:0b:d5:17:8d:f4:5e:44:30:8d:5e:5d:fa:1a:bc:
         ab:33:42:01:35:9c:4c:c0:f4:7b:c9:4c:01:02:d4:9d:a6:4c:
         45:4f:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:01:22 2025 by rpki-client