Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File:                     TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier:          YxAXUtUYfw1+tmM1XCaZLFCWnl+8CcejScTBuJXWUhI=
Subject key identifier:   C4:EA:21:D0:84:11:21:50:F3:3B:B2:A8:F7:34:86:97:A5:81:85:31
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer:       /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial:       0196C8A90AA2C304AB2E8D5104235E479181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number:          0F54
Signing time:             Tue 13 May 2025 08:00:43 +0000
Manifest this update:     Tue 13 May 2025 08:00:43 +0000
Manifest next update:     Wed 14 May 2025 08:00:43 +0000
Files and hashes:         1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: qvB0GiKPf12pP3WlLgUhvnrBq4Ph3WIX8m6YChHgLEY=)
                          2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:a9:0a:a2:c3:04:ab:2e:8d:51:04:23:5e:47:91:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
        Validity
            Not Before: May 13 08:00:43 2025 GMT
            Not After : May 14 08:00:43 2025 GMT
        Subject: CN=c4ea21d084112150f33bb2a8f7348697a5818531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:20:43:1d:59:2d:51:95:d2:2a:61:0c:37:
                    ea:96:12:68:82:a5:a3:f4:10:8b:26:e7:00:e2:05:
                    9f:7a:7d:8c:8e:8f:22:a3:e7:79:42:44:5a:15:28:
                    ba:98:21:ad:19:d4:2f:50:02:00:04:a2:14:3a:b5:
                    20:8a:18:94:6d:bc:5a:f9:ec:c6:14:75:45:3d:9b:
                    c3:68:6e:41:2a:cf:26:a5:d9:5f:b2:07:1b:12:2e:
                    10:25:4c:ae:9a:6d:5a:77:0e:be:4a:2a:6b:d6:eb:
                    a4:cf:07:ab:54:50:49:e1:1f:dd:b1:ad:79:a1:9a:
                    1c:38:9c:a9:9a:92:6c:f3:e8:fb:b3:de:8c:24:45:
                    85:a7:8a:2a:b6:89:d9:17:82:10:67:ff:a9:05:58:
                    5a:ad:12:31:ca:5c:91:40:1a:34:f0:61:cb:22:e5:
                    1a:2b:17:f8:8a:6f:a5:fc:e9:50:44:2d:ae:da:86:
                    af:f4:fb:0d:b3:7a:d1:ca:74:e2:0d:16:9d:2c:ad:
                    f6:3f:8e:1d:dd:fa:54:20:7e:fb:97:69:27:b0:d0:
                    4b:42:1c:78:9c:20:21:cd:97:45:91:10:ea:43:88:
                    34:56:e8:83:e1:f0:19:76:eb:a9:bb:e7:d0:5c:a0:
                    3e:6a:28:87:41:be:83:6c:f4:5b:6a:42:af:c4:d8:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EA:21:D0:84:11:21:50:F3:3B:B2:A8:F7:34:86:97:A5:81:85:31
            X509v3 Authority Key Identifier:
                keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:6d:b1:d1:0a:b0:5a:3e:6d:4d:ab:38:3b:12:c7:a4:d7:
         fd:9d:78:e4:cb:f1:25:8d:f7:66:43:f4:70:f5:5c:2b:e8:b5:
         ba:e5:0a:eb:a7:b3:c0:9d:45:70:fa:7f:11:f4:04:0a:98:08:
         d8:66:4a:de:17:1f:72:e2:f0:c2:ec:f7:d5:51:22:a5:54:8c:
         33:b6:af:89:04:1f:df:29:0b:4a:f9:eb:5d:dd:37:3a:d2:7b:
         33:01:50:09:fb:a6:33:da:ad:6f:e5:e8:53:75:bc:d3:f1:04:
         b3:9b:44:fe:f1:db:c0:9a:98:0b:8a:ea:90:86:6d:c1:57:30:
         6c:c6:31:3a:e3:6d:68:0a:3c:c2:b9:c4:e6:da:76:a8:eb:30:
         b1:bc:2b:5e:ac:11:ca:0e:07:01:46:5b:86:15:88:04:c9:bc:
         d9:e8:49:d9:89:9b:cb:97:fb:0b:54:1c:30:06:e5:6a:c8:a3:
         df:13:e0:72:b1:87:6f:69:e6:3d:d4:bc:9c:ac:6a:d8:b6:6c:
         c1:41:9a:cf:78:19:f9:d0:15:ac:8c:c5:e0:22:c6:50:46:70:
         60:28:fb:7b:51:ab:ad:66:cd:c3:5a:e1:fe:60:64:df:db:9a:
         ca:0c:5e:7d:43:e3:d6:ad:1f:d9:f1:b9:c7:a6:33:94:5e:0b:
         21:cf:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:02:29 2025 by rpki-client