Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File:                     TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier:          0BJ0qt9AL7vhLfIZ9S6GT2kDserhS5wXmom73uLDtlo=
Subject key identifier:   50:94:55:61:DE:C4:2A:36:1B:D1:7D:F8:D8:25:D9:E6:C5:A0:DE:C9
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer:       /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial:       0196C01422A5E5F0DACCC8FB90EF3DDA2DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number:          1535
Signing time:             Sun 11 May 2025 16:01:07 +0000
Manifest this update:     Sun 11 May 2025 16:01:07 +0000
Manifest next update:     Mon 12 May 2025 16:01:07 +0000
Files and hashes:         1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=)
                          2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: qgVj8kUgmS53XkZk21I/9+xrEkVhAt46hTemA3PmAeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:14:22:a5:e5:f0:da:cc:c8:fb:90:ef:3d:da:2d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
        Validity
            Not Before: May 11 16:01:07 2025 GMT
            Not After : May 12 16:01:07 2025 GMT
        Subject: CN=50945561dec42a361bd17df8d825d9e6c5a0dec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:e8:e7:4a:26:6c:5b:00:96:47:73:29:9f:
                    2b:7e:e8:46:44:50:9c:22:ff:cc:6c:15:56:9e:0d:
                    7f:a4:e1:0d:a5:f3:ac:6e:ee:85:98:01:06:3c:a6:
                    2d:ca:02:22:1a:b3:47:9b:c0:5d:f3:c7:03:7f:d9:
                    8b:82:5c:0b:da:45:d5:c2:d9:a2:6b:74:c3:36:47:
                    e8:a9:fa:6c:f9:45:bb:4d:d0:f7:d4:e5:ab:d4:ea:
                    fd:0b:e8:2e:13:97:2c:a9:de:e4:46:5b:c1:9b:6f:
                    ae:0d:91:5c:d3:03:2c:1b:6e:7b:c2:9a:2c:d2:7e:
                    ba:c4:c8:a5:29:fb:e1:c4:bc:25:26:ef:9f:83:2c:
                    8b:7b:39:9d:85:4a:e8:0d:b7:e2:69:64:f2:c5:e4:
                    ba:e5:d3:97:17:ec:57:e0:3b:42:cf:b3:fc:02:1c:
                    32:62:26:91:81:15:53:f6:64:ac:1f:63:fa:dd:64:
                    17:5b:2c:b9:4a:af:a3:ee:4b:a1:4a:b3:da:4e:aa:
                    56:ef:c4:ac:5c:06:e6:94:c6:03:22:eb:b5:79:8b:
                    cf:be:d8:ee:84:ef:b4:47:2c:ac:97:f3:6a:f3:78:
                    0a:df:6a:d9:0a:02:3b:47:8e:11:f3:a7:0f:e6:7b:
                    bd:6f:5f:67:e9:b1:e0:ee:a8:18:1e:ea:44:58:e6:
                    b9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:94:55:61:DE:C4:2A:36:1B:D1:7D:F8:D8:25:D9:E6:C5:A0:DE:C9
            X509v3 Authority Key Identifier:
                keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:c9:18:a0:68:91:cd:47:89:ed:81:0c:f4:ec:25:f1:7e:
         72:cf:a8:7e:b8:ae:3a:7f:ed:12:b5:7f:6a:29:91:ad:2a:9a:
         45:e7:ce:63:b5:c2:aa:3c:ac:8d:c4:0b:d0:8f:10:d2:3b:1e:
         59:13:3c:60:2d:f9:01:c8:d6:82:bd:b3:2e:ef:8e:bc:e2:bb:
         bb:17:aa:b8:0b:e8:94:f9:0b:b5:c1:e8:96:d1:af:91:39:03:
         74:9d:60:43:ff:08:f1:6e:b4:b1:11:b4:50:dd:ef:6a:fa:2a:
         fc:a9:05:48:85:20:da:17:c8:d2:88:cc:a5:98:58:95:4d:4d:
         51:6f:5c:39:62:ac:df:4a:81:a4:a1:0d:72:03:f8:1e:2e:da:
         12:38:c3:2d:5f:55:90:04:2a:5b:6b:01:26:26:2e:e3:f4:2f:
         e9:c5:b8:49:03:1c:c0:ed:0d:73:e2:6e:a5:19:4b:99:70:f7:
         07:0b:1a:50:95:e3:fb:ff:87:c8:55:ed:08:85:d3:d5:f6:69:
         af:5f:e2:0d:19:56:7e:90:46:59:aa:bd:d6:a4:d2:9c:e7:a6:
         ba:99:fe:03:8d:53:5b:4b:ab:75:a1:84:9a:e7:1c:24:27:b5:
         e2:88:d2:40:1c:fd:5f:2c:f8:96:5a:b7:7c:67:d5:ce:75:a1:
         87:a7:b1:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAFCKl5fDazMj7kO892i3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlM2MwMWJhMGM1Y2JmMjBhZTNlOTNjYTNkMzc5ZTYyZGY1
Yzk1OWEwHhcNMjUwNTExMTYwMTA3WhcNMjUwNTEyMTYwMTA3WjAzMTEwLwYDVQQD
Eyg1MDk0NTU2MWRlYzQyYTM2MWJkMTdkZjhkODI1ZDllNmM1YTBkZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+bo50ombFsAlkdzKZ8rfuhGRFCc
Iv/MbBVWng1/pOENpfOsbu6FmAEGPKYtygIiGrNHm8Bd88cDf9mLglwL2kXVwtmi
a3TDNkfoqfps+UW7TdD31OWr1Or9C+guE5csqd7kRlvBm2+uDZFc0wMsG257wpos
0n66xMilKfvhxLwlJu+fgyyLezmdhUroDbfiaWTyxeS65dOXF+xX4DtCz7P8Ahwy
YiaRgRVT9mSsH2P63WQXWyy5Sq+j7kuhSrPaTqpW78SsXAbmlMYDIuu1eYvPvtju
hO+0Ryysl/Nq83gK32rZCgI7R44R86cP5nu9b19n6bHg7qgYHupEWOa5UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCUVWHexCo2G9F9+Ngl2ebFoN7JMB8GA1UdIwQY
MBaAFE48AboMXL8grj6Tyj03nmLfXJWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEt
YjI3ZjU1MjY3MmUwLzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEtYjI3ZjU1MjY3MmUw
LzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJPJGKBo
kc1Hie2BDPTsJfF+cs+ofriuOn/tErV/aimRrSqaRefOY7XCqjysjcQL0I8Q0jse
WRM8YC35AcjWgr2zLu+OvOK7uxequAvolPkLtcHoltGvkTkDdJ1gQ/8I8W60sRG0
UN3vavoq/KkFSIUg2hfI0ojMpZhYlU1NUW9cOWKs30qBpKENcgP4Hi7aEjjDLV9V
kAQqW2sBJiYu4/Qv6cW4SQMcwO0Nc+JupRlLmXD3BwsaUJXj+/+HyFXtCIXT1fZp
r1/iDRlWfpBGWaq91qTSnOemupn+A41TW0urdaGEmuccJCe14ojSQBz9Xyz4llq3
fGfVznWhh6excQ==
-----END CERTIFICATE-----
Generated at Sun May 11 23:33:28 2025 by rpki-client