Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File:                     tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier:          nrrDqYnWETViGt25BMtQLNIG4T+dgD+/cjFqFuUOQGQ=
Subject key identifier:   0C:EC:4B:29:AC:CC:C1:B3:10:84:80:DD:8B:68:6B:3E:C0:17:FC:90
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer:       /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial:       0196CD618D74C4FD027B8495754458CA52BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number:          153C
Signing time:             Wed 14 May 2025 06:00:44 +0000
Manifest this update:     Wed 14 May 2025 06:00:44 +0000
Manifest next update:     Thu 15 May 2025 06:00:44 +0000
Files and hashes:         1: 4lhTaQhjom1qkpeBd0ZsbdWiEJ4.roa (hash: XdHlLCQ2Kh6iuUQP6DmaSkVFP47PPhEh+iIit9uDq/c=)
                          2: Loamkgq2liGt_WerD0xhgg9VD4c.roa (hash: HJiMbQmWc3n1Lwl3vm8HBtMiaI2Ev5JS4MMKRu/Y4gU=)
                          3: kTZKdp3t576jj7V1laKryCYz0Og.roa (hash: HbtSMYd2T/15rtkOhZspTZMKwAPA+sik9h0BqyVd10U=)
                          4: rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa (hash: UNrRcAyslLxjeDmqjrPzHbwMyZ4AtgV3GxOrJgdzxQg=)
                          5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: kqpNkGQ+isYkdnGGIkLGJYVxGiYqoEJ1WqQLtfKO4NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:61:8d:74:c4:fd:02:7b:84:95:75:44:58:ca:52:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
        Validity
            Not Before: May 14 06:00:44 2025 GMT
            Not After : May 15 06:00:44 2025 GMT
        Subject: CN=0cec4b29acccc1b3108480dd8b686b3ec017fc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:a3:f8:fa:9a:e2:06:64:2c:f0:c8:4f:8a:
                    81:aa:93:b2:3e:82:3d:7a:51:ed:cc:37:b8:59:95:
                    fa:a9:83:57:d4:6a:03:a0:b5:75:30:79:e5:16:0e:
                    c4:ca:4c:58:a4:84:c9:68:5a:18:ad:11:10:7a:8d:
                    4e:13:db:79:65:2a:d5:13:1d:27:f2:e4:99:34:d1:
                    a4:3d:11:61:ac:ea:10:5a:3d:33:06:52:1c:5d:39:
                    5c:5a:51:59:71:f2:3f:93:47:44:b4:aa:93:5c:b8:
                    ff:fb:03:5d:45:ca:64:f6:e7:fd:45:b6:78:08:99:
                    86:e6:ba:b8:95:a6:8d:90:07:4b:1f:c8:03:03:8c:
                    a7:80:22:5a:4e:3d:88:a2:81:de:9f:d0:99:6d:2a:
                    b5:83:5a:77:0c:ee:0b:bc:06:5e:9f:1e:3a:e5:3c:
                    7e:a7:a3:de:a7:70:5a:4b:bf:58:e5:56:48:5c:aa:
                    d6:e0:8f:a8:b4:9c:b6:be:6d:34:bd:fa:32:75:d0:
                    9e:b4:9e:ed:02:a7:b7:93:7f:e0:c5:79:c6:8f:5d:
                    66:24:96:35:45:83:75:e6:fd:17:a8:13:0e:68:ed:
                    02:ae:77:cc:56:6f:a9:5e:1c:98:0f:76:49:1a:c6:
                    8a:e9:b7:77:f6:03:70:a3:bb:37:23:47:ea:60:43:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EC:4B:29:AC:CC:C1:B3:10:84:80:DD:8B:68:6B:3E:C0:17:FC:90
            X509v3 Authority Key Identifier:
                keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b3:65:5d:c9:5d:11:fb:b9:a9:5a:e3:fb:5a:90:dd:04:e0:
         70:79:84:46:39:98:ca:5b:8d:1e:e6:7d:b0:0b:ff:8c:b0:fe:
         b8:b8:b6:40:de:02:26:9a:f7:0a:1b:95:4f:aa:19:50:9a:1e:
         bc:be:44:cd:ba:b8:14:01:86:f6:33:88:c3:eb:74:bd:1d:a7:
         12:18:ac:e8:c6:4d:cf:9a:ae:e4:7d:1f:a7:1b:7b:1b:8c:8e:
         3a:06:b0:5a:af:15:33:44:7a:99:62:e9:f9:54:94:30:33:fb:
         a5:92:6f:00:5e:00:b9:d8:0c:b6:44:19:2d:8f:af:6c:78:a3:
         26:6c:5e:10:94:5a:a4:ca:bd:e5:b1:e4:7d:b9:d3:a4:ed:8f:
         59:f2:cf:b9:c8:c0:f6:41:7c:34:3c:3d:2a:e9:e0:c9:60:52:
         8d:95:2c:72:21:d4:86:84:65:8f:67:6c:f0:2e:cf:f5:f1:f8:
         11:7b:98:00:07:b9:0f:f1:ec:56:6b:8c:5b:1e:dc:5a:47:a1:
         c0:3f:5f:28:a5:48:6d:33:ee:d6:d4:8b:e7:4a:6b:8b:c0:76:
         3d:fd:7c:d4:12:aa:5c:98:66:b8:04:21:1b:27:96:f8:95:35:
         ed:81:ee:d9:d2:d1:a2:a4:7f:06:1a:46:c1:9e:7e:ee:24:49:
         a9:49:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:19:34 2025 by rpki-client