Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
File:                     TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json)
Hash identifier:          QqJMl7nP/FeCnjWQg6o/DJg4f+/BQiVdchSALp6jft8=
Subject key identifier:   B2:6A:7F:DB:1E:EE:56:43:7B:94:5C:B2:01:75:A2:15:0C:59:C0:1B
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Certificate issuer:       /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial:       0197B70F40FAC894DF6EE103E8967C73281E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
Manifest number:          0E10
Signing time:             Sat 28 Jun 2025 15:01:59 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:59 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:59 +0000
Files and hashes:         1: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: j0bDAw5hTZWJ9Zt6vTyArWDBLtsNjmwQwwCB/QnwpuU=)
                          2: yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa (hash: SH391E3HYBBZSzKR5WZ5E1ALuIU3dss9i9wIgwa0Lyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:40:fa:c8:94:df:6e:e1:03:e8:96:7c:73:28:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
        Validity
            Not Before: Jun 28 15:01:59 2025 GMT
            Not After : Jun 29 15:01:59 2025 GMT
        Subject: CN=b26a7fdb1eee56437b945cb20175a2150c59c01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:81:2a:c3:70:bf:0a:a7:2f:b4:7d:fd:3e:
                    1f:b7:ff:c1:62:31:03:f2:d6:42:83:56:91:f2:d6:
                    3b:8f:29:2f:f0:fd:b2:8a:d9:d0:4d:d2:2f:07:9f:
                    00:6d:41:ea:09:15:15:48:a1:22:4d:fe:66:98:a9:
                    9a:22:6f:10:e6:07:24:d5:86:24:6e:30:0d:51:c8:
                    e3:2e:a4:a6:e1:d3:27:2a:3b:7d:a2:88:12:88:76:
                    49:83:ca:76:ff:0e:26:66:76:38:cf:72:5a:cf:b3:
                    85:cd:9f:50:d5:1e:89:ee:c6:12:58:01:24:2e:26:
                    d9:86:ba:40:10:98:c2:21:b4:7e:0b:d1:cd:c2:60:
                    6c:09:bb:b6:a0:7f:7d:16:66:2a:9a:ac:ff:29:2d:
                    b1:6c:8d:26:2e:c9:0b:b7:07:3b:b3:40:64:eb:60:
                    6d:b6:fd:e7:2a:7e:e2:0c:ab:70:73:35:cb:91:ec:
                    d7:77:d0:06:c5:56:0e:8b:f7:b0:e9:82:b5:38:87:
                    69:9a:d7:3c:38:49:5f:00:7d:d0:e3:3e:b8:2a:c3:
                    3d:4b:39:e7:a4:48:75:a9:79:7c:50:4d:7c:0f:4e:
                    26:e4:fb:4d:a2:bb:69:3b:49:3e:b1:ee:f1:a7:8d:
                    9b:90:1b:d6:b7:7e:8d:57:0c:74:23:76:36:af:a7:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6A:7F:DB:1E:EE:56:43:7B:94:5C:B2:01:75:A2:15:0C:59:C0:1B
            X509v3 Authority Key Identifier:
                keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:df:00:bf:df:9a:d6:91:c6:ea:fe:ae:5c:92:0f:f2:ef:cf:
         02:d6:d8:91:6c:26:47:5d:c6:aa:d5:67:06:f8:6a:2b:92:9c:
         4c:e2:3f:f7:00:a8:e1:65:46:35:87:29:ed:f9:fd:17:9a:b2:
         90:d0:f3:da:85:2c:42:2b:3b:13:be:18:c7:b2:ba:eb:9d:a5:
         cf:3d:a2:cf:77:40:90:de:5d:a0:23:47:e0:ba:a8:e3:a8:4a:
         fa:bc:f3:1a:3e:a9:d0:79:47:b8:f3:39:da:55:88:fb:b1:3c:
         d9:8c:16:b9:f9:53:b8:88:1c:af:a4:1f:0c:8e:c7:b1:b0:b2:
         f6:9a:d8:a9:0a:f6:4a:ad:fe:6b:4c:34:ef:60:30:66:42:5c:
         b6:7e:91:a3:27:3a:1b:51:73:63:41:7c:28:51:59:f9:55:fe:
         0d:b9:ae:4d:63:a7:37:55:ff:99:41:a9:fc:e8:8d:a5:a8:eb:
         1e:63:d7:c1:be:9c:7d:5e:35:1b:ab:34:9a:09:6b:d1:3b:2b:
         17:9f:c4:f4:69:76:81:e6:93:02:30:52:c2:73:c9:86:ac:ea:
         db:6f:96:68:be:91:5d:b8:3f:77:fb:97:58:8f:ca:d0:3e:09:
         bb:4e:db:c8:7d:ec:bd:1e:cd:61:47:d8:b8:d0:fd:77:db:48:
         3b:60:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:29 2025 by rpki-client