Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File:                     1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier:          6iTvXiM6WmohVtxvA8iOoPTIY/tg81ZDTHdcfGEctoU=
Subject key identifier:   CC:9B:04:A9:FF:60:31:2C:7A:57:38:4C:41:FC:61:FB:F8:5E:45:26
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer:       /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial:       0196AD9FAC581FB24DCB147CE8C03B45A4DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number:          1177
Signing time:             Thu 08 May 2025 02:00:44 +0000
Manifest this update:     Thu 08 May 2025 02:00:44 +0000
Manifest next update:     Fri 09 May 2025 02:00:44 +0000
Files and hashes:         1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: Eonx32zzY0bzGPyVwI8ZLT+em+PSx1ayY8Uqe2zCVe8=)
                          2: S1K-LNOfEdqMwJPR6JwjXy3twNM.roa (hash: 6+dgtQWWnCxkd6rViHnDLK3NWbLzGQNeNx6DA6f+PL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:9f:ac:58:1f:b2:4d:cb:14:7c:e8:c0:3b:45:a4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
        Validity
            Not Before: May  8 02:00:44 2025 GMT
            Not After : May  9 02:00:44 2025 GMT
        Subject: CN=cc9b04a9ff60312c7a57384c41fc61fbf85e4526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:8a:ce:f6:8e:66:89:87:1a:e8:72:a8:3f:
                    a2:f7:b6:44:ce:4a:25:96:f6:d7:f9:0c:b6:72:3b:
                    46:a3:bd:54:b1:78:14:5b:41:fe:c3:74:ef:af:a1:
                    66:17:27:7b:fc:6f:31:cf:e1:8d:ed:a8:b3:b4:3c:
                    a6:dd:ee:5c:48:00:6b:a0:3a:9c:7c:3e:15:73:9d:
                    2f:ff:74:97:52:f9:f4:e0:a8:ff:8b:ff:cb:f8:73:
                    b3:c4:68:bf:b5:2c:3e:6e:5f:3e:20:d6:36:e6:c5:
                    17:59:c6:2b:37:ae:38:be:26:9e:05:85:6d:a2:9e:
                    2e:70:12:e2:ee:07:8f:ac:1d:03:73:a0:3c:98:0c:
                    2c:7f:f2:31:c8:fd:ac:b0:e1:40:dd:10:98:41:c0:
                    67:e9:63:c0:29:44:ae:88:e5:05:61:13:39:e2:58:
                    3f:47:d4:ba:54:2d:bb:d4:7e:8d:59:10:12:70:42:
                    f0:4a:c6:d8:6f:ba:00:f6:5d:ca:59:34:23:7c:7f:
                    df:25:06:3b:f4:94:b8:ad:f3:be:04:58:3a:fb:d0:
                    4c:ca:f0:cc:98:2c:7a:80:65:e1:cc:4c:7d:13:66:
                    9c:b5:a3:a2:8d:01:ad:47:44:94:2c:54:2d:45:e1:
                    ef:0d:02:94:75:5a:d6:7a:c4:a3:34:10:bd:85:4d:
                    a7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9B:04:A9:FF:60:31:2C:7A:57:38:4C:41:FC:61:FB:F8:5E:45:26
            X509v3 Authority Key Identifier:
                keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:34:3f:9c:7d:31:71:2f:70:1e:56:e4:fe:39:58:f5:82:
         9d:2b:54:fc:bd:fd:e7:1b:42:23:ac:42:57:fa:37:06:80:a7:
         b2:85:ec:d4:42:61:90:18:8d:a0:f5:72:8f:78:67:02:89:ac:
         ea:96:c5:00:e5:04:c6:26:bb:d6:f9:bb:dd:96:86:66:fa:1c:
         f2:71:1d:f5:ac:7f:14:85:64:0b:61:91:dc:bd:49:96:4a:92:
         b2:37:14:7a:d7:3d:20:d0:42:98:df:18:d1:50:68:dc:24:a7:
         09:f6:2b:4f:ac:bf:f9:e4:73:73:23:87:11:87:8f:09:2a:cd:
         11:f3:b8:41:93:a3:da:c2:be:34:6b:42:3c:a4:69:07:6e:05:
         40:1e:59:27:ab:a3:5c:6c:dd:4c:a2:19:12:71:6d:98:53:63:
         f5:31:ba:4b:02:a2:72:a9:17:9e:aa:d3:45:27:4a:65:eb:1e:
         fa:8e:f1:33:df:1c:20:bf:49:aa:0e:0a:07:ee:02:4d:29:a1:
         34:bf:84:1e:30:fc:20:55:80:eb:40:ad:50:8e:41:7b:92:6e:
         87:47:45:0f:92:de:86:f2:8c:ce:19:35:89:6f:31:98:0f:0b:
         32:7c:23:c5:1b:13:13:a7:db:b3:c8:37:28:a9:8f:38:b3:aa:
         52:ae:5a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:25:52 2025 by rpki-client