Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
File:                     Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json)
Hash identifier:          TpirYeE7XDRLomJR1eIRA5Dnc6bBcMi+mByDh4BykBw=
Subject key identifier:   7C:BF:19:26:B9:34:4E:29:63:90:EE:B5:EE:68:8E:1B:04:90:5C:35
Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
Certificate issuer:       /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Certificate serial:       0196AF8DA0EB364B46C232E39112667D7862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
Manifest number:          01E8
Signing time:             Thu 08 May 2025 11:00:16 +0000
Manifest this update:     Thu 08 May 2025 11:00:16 +0000
Manifest next update:     Fri 09 May 2025 11:00:16 +0000
Files and hashes:         1: 1-KGFkp6-58CAfMM59AAzTBwEK5A.roa (hash: LpeybfjrfgjM/OjVBSR68hbsEhIa7z+y+IoR5F/Kfmc=)
                          2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: bac4tnMFHPh31v8T1HvfPYtcc8dpP+bafHsdeaox6rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:8d:a0:eb:36:4b:46:c2:32:e3:91:12:66:7d:78:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
        Validity
            Not Before: May  8 11:00:16 2025 GMT
            Not After : May  9 11:00:16 2025 GMT
        Subject: CN=7cbf1926b9344e296390eeb5ee688e1b04905c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:af:47:8c:a7:3c:bf:ec:ff:29:26:9a:47:
                    e7:37:54:ca:d6:ac:71:c8:4d:ba:94:34:ea:fa:30:
                    93:a5:d8:63:d1:04:87:ab:04:c4:95:3a:61:65:48:
                    d9:dc:10:88:94:3b:5b:90:00:ed:e0:63:96:61:13:
                    bb:f3:18:43:b7:6a:7c:a1:6f:80:31:9a:fb:e9:fb:
                    41:72:d6:82:47:db:a3:63:2d:47:04:ca:ea:9c:82:
                    af:8a:ad:fe:16:2a:f7:80:4c:da:c7:a7:42:fa:53:
                    b4:bf:11:87:75:c6:94:ac:e8:79:eb:d3:b5:f3:82:
                    2e:b7:35:92:63:d2:59:ff:34:cd:57:2b:50:e5:95:
                    23:da:95:3f:34:c4:6c:34:48:df:17:0d:2c:8e:26:
                    88:f4:82:a7:ca:ad:b1:18:c1:1d:d1:de:ca:f6:63:
                    ed:48:98:a6:a9:d6:b7:0a:e5:06:3d:64:f2:d4:f7:
                    4a:08:30:3b:6a:4a:a0:6c:a6:51:23:d0:9a:87:cf:
                    20:4e:c3:f2:ee:eb:32:f8:e0:c3:2f:16:d8:83:a0:
                    e2:24:6e:59:07:99:6b:31:25:21:e4:f1:08:db:39:
                    8d:20:3a:90:24:bb:51:ff:67:82:3e:b0:92:83:c7:
                    d7:96:1b:a4:15:75:a1:49:a1:48:34:bf:a5:8b:62:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BF:19:26:B9:34:4E:29:63:90:EE:B5:EE:68:8E:1B:04:90:5C:35
            X509v3 Authority Key Identifier:
                keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:23:69:2a:49:a1:84:fa:4f:1a:ec:61:a7:1e:d9:05:4c:83:
         be:dd:b8:39:32:82:9c:82:c9:54:df:23:19:50:6d:ce:0c:a7:
         5b:6c:67:2e:30:a8:4d:8d:c0:cc:14:8e:b9:f3:fa:6a:b4:b1:
         78:e5:bf:e7:0d:a9:60:5a:cb:22:78:63:a2:ce:c5:bd:4b:a0:
         7c:68:56:80:a2:3f:d6:b2:ed:ee:5d:ec:98:c3:d7:81:1d:f4:
         94:63:a2:6e:a9:92:71:dc:c4:46:71:83:dd:d1:3e:91:f3:22:
         d0:b4:cf:9f:e2:88:a1:73:4b:76:ad:a2:87:ac:fe:e0:de:4e:
         ea:79:94:04:f6:e7:05:2d:2b:cd:e3:ac:23:8e:1e:64:d8:ac:
         81:40:b8:26:dd:ef:6d:87:e5:79:ed:26:91:40:a1:db:1f:c7:
         a4:62:81:1a:22:07:f8:81:b2:0b:a2:8e:2b:16:b6:f2:fe:1c:
         1b:9c:52:43:1d:6a:46:da:15:c6:8a:05:a1:6e:f5:d3:54:ab:
         98:76:b7:d7:f4:07:e7:5e:cd:79:00:5a:51:f3:ee:73:06:e3:
         2c:1c:d0:ba:4d:f8:df:3d:f1:aa:b7:e5:e0:16:f9:9c:a3:cb:
         e7:e8:9c:fc:96:03:a5:37:d1:cc:1e:c0:72:7a:b4:f5:82:19:
         90:74:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:19:20 2025 by rpki-client