Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
File:                     1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft (raw, json)
Hash identifier:          tCrh/O4Mhc/GwHWaqC5ulMbuN2f9MxdST9SCi9S70Pc=
Subject key identifier:   5C:4F:7D:14:A7:D3:1A:69:C9:D7:95:10:95:2E:12:99:D7:84:12:9B
Authority key identifier: FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA
Certificate issuer:       /CN=fadbe65b28ff25667409cce635be096e3e6defca
Certificate serial:       0196B8239252B352BDF538048EA9A1BD021B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
Manifest number:          05BD
Signing time:             Sat 10 May 2025 03:01:00 +0000
Manifest this update:     Sat 10 May 2025 03:01:00 +0000
Manifest next update:     Sun 11 May 2025 03:01:00 +0000
Files and hashes:         1: 1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl (hash: LttrofS6FpptIxfx5wfWVqhGpL3qjDwOwiqtxElyyMo=)
                          2: 2hMUvTWNED7AdzekMGtePAfBbmA.roa (hash: qNOC6BJXbdCeJs6n66War8yhlL56sKGqTTY348ypj5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:92:52:b3:52:bd:f5:38:04:8e:a9:a1:bd:02:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadbe65b28ff25667409cce635be096e3e6defca
        Validity
            Not Before: May 10 03:01:00 2025 GMT
            Not After : May 11 03:01:00 2025 GMT
        Subject: CN=5c4f7d14a7d31a69c9d79510952e1299d784129b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:de:1d:3b:0d:aa:ec:e4:12:c1:83:b7:6e:
                    fa:7d:62:49:ac:d7:e0:48:ea:ba:11:55:87:1a:68:
                    bc:03:ae:09:8b:1a:02:8d:13:96:c9:70:cf:1b:7f:
                    6f:66:8f:c8:35:2d:11:91:1b:80:44:07:37:cc:9c:
                    b8:0f:9c:e7:cd:67:61:a6:18:fb:fb:58:20:2b:c9:
                    f3:7b:6e:e7:96:e4:c7:80:f0:19:f3:9b:30:4e:c2:
                    2c:b9:e0:b6:cf:a0:36:23:3a:b9:98:2d:90:80:11:
                    c9:5e:52:69:c4:ac:58:03:49:6f:68:ca:37:6e:c5:
                    b3:22:b9:5b:b3:f2:c3:c6:82:e6:7f:fa:f9:8d:d1:
                    90:ab:3e:c7:0d:5e:67:c8:da:32:cd:6b:31:02:10:
                    a9:09:f9:f2:ea:ee:b0:eb:67:d8:bb:8c:82:49:6e:
                    2c:b5:59:e8:0a:d3:e3:95:c8:70:f0:0a:ec:c6:c2:
                    48:87:a6:76:12:71:c1:bc:21:59:8d:53:dd:dd:8a:
                    bb:44:0f:22:03:c3:57:16:c2:4c:83:bc:db:b7:3d:
                    62:a6:9e:2f:65:6f:a3:c9:5e:98:ce:0d:d4:a1:f0:
                    33:bc:fe:2a:57:e5:3b:37:0e:4d:d2:9e:e2:79:c1:
                    a5:e3:5f:5a:45:f0:5d:34:27:44:11:c9:8a:c4:43:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4F:7D:14:A7:D3:1A:69:C9:D7:95:10:95:2E:12:99:D7:84:12:9B
            X509v3 Authority Key Identifier:
                keyid:FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:b3:ec:d2:f2:58:ee:e9:8e:8f:94:de:fa:e4:7d:ed:71:cf:
         01:86:b7:bf:5a:ba:2d:d8:34:bd:0a:63:e8:13:f0:f7:d7:c6:
         07:26:86:6a:c6:c4:9e:e3:3a:eb:b8:a6:1b:6e:e0:f0:11:c5:
         11:5a:9e:2e:df:76:9e:14:e0:f7:28:5d:99:74:74:52:19:d4:
         4a:a2:2c:a6:1d:84:d0:c5:4b:c3:94:80:1c:86:54:00:65:95:
         73:99:80:23:c2:50:de:96:89:8d:64:d1:06:68:b5:72:a1:b8:
         30:93:1f:5e:c1:8a:02:4a:da:52:56:eb:62:58:31:36:6a:0b:
         1c:28:4a:bc:ca:fe:ec:ae:f2:99:b1:ca:23:67:ac:6c:73:f9:
         d9:81:4c:b9:78:a1:7e:62:41:67:b3:6c:2d:b1:27:2d:05:49:
         58:9f:3b:ea:1c:fd:84:cb:e1:eb:8a:61:09:37:b4:cd:99:50:
         36:80:37:66:55:36:6c:1f:e1:a8:2d:d3:ba:9a:d4:33:56:59:
         2d:27:79:41:0f:7b:a5:e5:c5:51:8a:c5:a8:1e:d0:97:79:37:
         45:5d:ca:80:e3:2f:d2:2e:1b:b1:b5:ab:54:ff:eb:a8:e2:70:
         53:f8:f9:b3:48:67:26:be:f0:5e:31:14:bf:fb:60:ee:5d:54:
         cf:88:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:13:17 2025 by rpki-client