Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File:                     tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier:          GfU9pKRLL1PdHiB0YQ7iWpk3cnL0nM9OTniG/qynjSE=
Subject key identifier:   6E:DE:15:D1:89:0F:8F:B3:E9:F1:D5:E1:5B:6E:E4:E0:E8:97:16:51
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer:       /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial:       0196C2020E8958C25E2297841DA1E7F0DDA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number:          153E
Signing time:             Mon 12 May 2025 01:00:36 +0000
Manifest this update:     Mon 12 May 2025 01:00:36 +0000
Manifest next update:     Tue 13 May 2025 01:00:36 +0000
Files and hashes:         1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=)
                          2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=)
                          3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=)
                          4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: Dy0CzeCxEL7NUopJYCeHbNxpHIB7v81sa3CBaq2/qoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:0e:89:58:c2:5e:22:97:84:1d:a1:e7:f0:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
        Validity
            Not Before: May 12 01:00:36 2025 GMT
            Not After : May 13 01:00:36 2025 GMT
        Subject: CN=6ede15d1890f8fb3e9f1d5e15b6ee4e0e8971651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:f6:0e:6e:cf:ef:e7:87:db:88:75:f9:59:
                    8c:8f:ec:9b:28:ac:bd:8f:08:89:2f:97:2b:7e:ef:
                    e1:3d:48:5f:b0:ac:8d:33:53:00:a0:32:81:c9:36:
                    bc:d0:7f:7a:e0:12:7c:2e:80:0e:72:7f:e5:fd:d0:
                    91:70:79:33:82:a5:f8:de:18:96:99:56:5f:fb:bd:
                    0b:33:87:45:7b:bd:8c:e6:a4:b0:b1:8e:45:1e:9f:
                    e3:1d:ce:36:2d:7f:03:47:b8:41:d6:3e:07:08:09:
                    44:1a:21:15:43:46:3a:fa:80:d6:65:43:ae:e5:2b:
                    8c:d3:84:6f:eb:e1:01:c6:b5:be:b7:17:09:d2:04:
                    d5:a9:3d:32:aa:09:bb:28:17:4a:37:09:cb:61:5c:
                    50:4e:57:e0:c0:3f:55:6b:2a:bb:2f:c7:45:c1:58:
                    55:4c:61:18:2b:d9:3c:3f:69:ca:bb:17:67:dc:87:
                    0c:30:b6:37:8f:6e:57:82:da:bb:d1:41:d1:ca:6e:
                    a8:f6:bd:5d:19:2f:b3:18:ec:2b:54:fe:13:96:66:
                    ad:75:76:9c:49:5a:b4:6d:7b:31:d6:fa:20:50:3b:
                    fb:70:4b:3b:3e:81:e3:ae:68:8f:a4:63:53:03:a6:
                    80:ef:bc:0c:d2:48:e3:9a:a1:87:06:34:09:44:14:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DE:15:D1:89:0F:8F:B3:E9:F1:D5:E1:5B:6E:E4:E0:E8:97:16:51
            X509v3 Authority Key Identifier:
                keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:22:47:8a:e2:1e:ff:3e:ac:e8:ad:ca:0c:3f:b6:8b:84:5b:
         31:39:45:fe:61:5a:9a:d5:ef:3c:0a:30:f2:3b:74:9c:16:06:
         2c:2c:55:c7:23:a2:23:d9:74:27:ae:12:24:56:4c:1d:08:2f:
         28:e0:5c:01:a9:b6:90:a8:4e:36:42:fc:66:7e:a4:7f:8e:f0:
         3a:7c:09:71:c0:c6:d9:ba:db:01:99:78:38:64:84:e9:8b:ea:
         9a:a5:57:2a:dc:3f:93:34:28:53:3c:6b:6d:6c:f5:ff:ae:85:
         c8:cc:c8:ce:71:e1:6c:ad:d4:2b:89:58:8e:de:0c:d7:0c:b9:
         ba:c6:d0:c4:2d:88:ee:2a:cf:53:64:37:61:a8:49:4e:71:e2:
         8b:14:f4:30:65:21:fd:b4:7b:84:72:74:c6:62:2a:c6:78:f7:
         3c:77:8e:ec:6b:c9:30:b3:52:84:fa:b0:2a:9a:f3:41:a6:0e:
         a6:ac:07:bd:80:54:a3:18:87:c0:8b:e7:47:df:0f:6d:84:56:
         db:35:99:b2:09:1d:ae:4c:4b:a4:f0:c5:89:83:af:eb:14:56:
         74:81:53:05:3a:65:97:0d:c3:ee:60:2a:56:7c:c5:07:7e:55:
         61:b2:d3:20:c7:f4:bd:5b:88:42:fb:02:25:8d:2c:ff:33:0f:
         ae:ae:45:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:32:59 2025 by rpki-client