Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File:                     ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier:          u3WjEiE9UEDjS6nX1bDP+4+Pa+9pri31VBwyvhZRyNg=
Subject key identifier:   24:C7:BB:2A:96:37:07:8A:C0:54:3A:D8:71:F3:92:BD:70:F8:7A:98
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer:       /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial:       0196A8B097EDD17A6695F4BC36970B9AB5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number:          026C
Signing time:             Wed 07 May 2025 03:01:07 +0000
Manifest this update:     Wed 07 May 2025 03:01:07 +0000
Manifest next update:     Thu 08 May 2025 03:01:07 +0000
Files and hashes:         1: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: 7ovj8jMMQr0UEiX9cybydFfMHYU2URjs7Hmq0mtBWOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:b0:97:ed:d1:7a:66:95:f4:bc:36:97:0b:9a:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
        Validity
            Not Before: May  7 03:01:07 2025 GMT
            Not After : May  8 03:01:07 2025 GMT
        Subject: CN=24c7bb2a9637078ac0543ad871f392bd70f87a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:66:95:4e:2f:c2:d2:75:25:3b:be:89:b7:
                    af:60:02:ce:67:70:d3:3b:a9:c4:20:f1:e0:84:58:
                    03:cf:a1:f2:45:d4:d1:f4:1e:9a:70:75:37:ba:64:
                    c6:18:ae:95:0e:b6:53:a9:90:91:38:28:3a:b1:aa:
                    6f:62:4d:a2:d5:1c:5e:24:30:fd:a8:14:ae:e8:88:
                    70:ce:6a:2d:26:12:0b:63:41:45:4d:70:49:7f:d2:
                    06:73:44:e1:23:c8:b8:d3:34:8d:3f:64:17:94:12:
                    45:6b:1b:5a:b8:19:b2:83:ab:12:53:5c:37:18:51:
                    85:45:0a:b3:3c:d3:21:73:da:4c:19:61:21:b0:42:
                    6d:f1:b4:c6:7b:8d:a5:a7:40:58:d1:6d:92:5b:da:
                    13:79:08:96:02:8c:9b:1c:a2:95:5f:dc:ab:19:98:
                    eb:7b:c3:40:09:ce:2f:eb:02:a4:f6:3c:3f:ae:4d:
                    da:97:1e:fa:76:f8:ac:6f:68:89:64:c1:ce:a6:35:
                    46:58:16:97:f3:47:fc:9d:d1:53:60:8d:50:05:6f:
                    b8:46:57:6f:7e:28:19:31:fa:4a:ef:16:c3:7b:2b:
                    36:24:6e:36:af:b1:2f:30:15:fd:59:c1:38:c4:89:
                    3c:d4:82:ef:ce:d4:52:82:02:1e:af:b6:ff:eb:48:
                    72:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C7:BB:2A:96:37:07:8A:C0:54:3A:D8:71:F3:92:BD:70:F8:7A:98
            X509v3 Authority Key Identifier:
                keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:68:55:f6:a3:da:14:7d:73:22:a4:3b:2a:c0:62:96:ed:64:
         29:8a:b6:45:a8:7d:68:71:65:b9:53:7e:7b:76:92:40:af:06:
         8a:0b:bd:38:e3:bf:35:07:2f:55:32:9c:04:e7:48:b9:fe:73:
         0e:ce:78:7b:f6:bc:ae:34:73:c1:65:89:cb:e7:99:00:2e:4f:
         d8:db:54:60:89:3b:f6:b2:19:fc:20:4d:4c:5d:3b:8b:d2:4a:
         9b:ad:67:ea:0d:0f:fb:7b:ca:a0:bd:7a:7b:57:75:a6:0d:80:
         58:56:d1:74:bc:73:83:28:65:05:c1:a5:8f:8f:52:e4:07:51:
         7f:e7:ab:ef:46:92:4e:a7:83:90:53:5b:f7:1e:00:3f:1e:a3:
         6a:92:b5:60:7f:96:b9:01:a6:61:86:0d:15:e9:af:a3:ec:b2:
         9a:09:61:12:25:97:c1:0e:ec:e7:76:a0:11:14:47:60:cf:95:
         83:5f:2d:18:a8:71:43:6a:8e:f6:08:83:ea:48:23:bb:a4:f8:
         e2:46:51:df:76:3b:96:38:8d:c7:14:68:26:35:de:c9:90:0d:
         1a:6c:7e:e0:37:09:95:42:b2:29:7d:28:48:8b:62:0c:52:15:
         85:b1:32:ff:6c:cc:e8:19:23:a3:e1:81:43:91:23:4a:0d:2f:
         ae:8f:32:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:12:50 2025 by rpki-client