Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File:                     Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier:          /MPNy4ERLYAdhCTi9t12zAZFxDbv0WUD8dcAYZPG0KU=
Subject key identifier:   69:EB:DD:BB:55:A1:2D:11:12:CE:F4:BD:6B:9C:27:84:86:A3:77:CE
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer:       /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial:       0196D475E4F3BA8055F8B242C9E2230D3236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number:          1540
Signing time:             Thu 15 May 2025 15:00:18 +0000
Manifest this update:     Thu 15 May 2025 15:00:18 +0000
Manifest next update:     Fri 16 May 2025 15:00:18 +0000
Files and hashes:         1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 6/lQuBkifaqO2opCVix/BDCdGtrqzYL8Rvzgh6wUVso=)
                          2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:75:e4:f3:ba:80:55:f8:b2:42:c9:e2:23:0d:32:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
        Validity
            Not Before: May 15 15:00:18 2025 GMT
            Not After : May 16 15:00:18 2025 GMT
        Subject: CN=69ebddbb55a12d1112cef4bd6b9c278486a377ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:25:48:48:0d:45:3f:68:e1:81:00:1a:cf:
                    6c:d9:47:a3:e4:24:9e:a8:b3:ee:a4:7f:bd:47:8a:
                    8a:e5:df:99:9a:e7:b6:d3:a8:5a:e9:a9:e8:59:60:
                    cb:b7:36:3d:f2:6d:21:0a:04:d6:19:18:e4:09:3b:
                    85:47:0e:81:b2:40:7d:94:92:24:4e:16:00:61:7b:
                    32:48:97:cc:ff:85:9f:13:5e:ca:6a:77:74:7d:1b:
                    98:60:1d:0d:d3:63:d9:e5:fa:f7:82:5f:db:1f:42:
                    60:88:c9:bc:01:ac:2b:04:42:bf:62:8f:42:6c:57:
                    43:84:54:d6:c1:1c:c4:01:e6:07:30:99:34:d3:d0:
                    e9:28:84:02:bc:87:38:dc:99:d0:fb:5a:f1:78:48:
                    cc:b3:d8:b2:1b:85:08:1e:b6:48:e6:9e:91:3d:47:
                    58:42:58:25:45:0d:2c:dc:47:3a:8d:3d:7f:e9:7c:
                    f0:c4:cb:85:0f:90:8f:61:b2:a8:55:4e:ae:cc:54:
                    28:9e:73:b1:d0:b7:b9:ce:e4:86:87:b2:5e:36:3b:
                    9c:6c:70:2b:b5:c5:a5:08:36:63:8b:5b:85:27:2e:
                    d7:88:57:01:61:14:ff:bb:6e:b9:7a:ba:4f:50:6d:
                    68:5e:5a:4b:0b:3b:b0:e5:82:85:b7:42:ec:30:e2:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EB:DD:BB:55:A1:2D:11:12:CE:F4:BD:6B:9C:27:84:86:A3:77:CE
            X509v3 Authority Key Identifier:
                keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cf:be:87:e0:ab:ed:4e:61:fd:0e:cc:82:53:5b:35:ee:b8:
         9e:39:c3:82:3e:90:e1:11:55:9b:ef:ba:27:f2:31:00:c8:3a:
         59:20:af:69:13:7a:5e:ad:4e:42:c2:18:bb:37:52:89:a7:98:
         5e:a8:06:f5:45:70:51:3d:f5:03:e9:5b:b4:eb:a2:e6:b9:4c:
         82:15:4b:46:5d:89:fb:e0:1c:b1:b3:17:8c:90:f1:97:b4:96:
         81:16:91:1c:00:a2:2a:cf:a3:37:69:ad:57:f6:e7:13:18:9f:
         d0:e5:b7:3a:16:4e:91:80:54:72:40:8f:0d:16:80:fb:96:e0:
         40:e6:f3:a5:7f:a9:88:53:15:fa:26:82:05:05:07:12:d1:cf:
         d5:7c:ed:c4:77:d1:aa:0d:4d:3d:73:39:4d:1a:e0:25:b2:4b:
         78:91:32:c5:7b:84:6f:88:fb:e0:1a:3a:f1:7f:c8:b5:84:c0:
         59:96:50:8a:9f:34:aa:0d:30:74:5f:56:1c:f4:76:88:91:ee:
         57:98:f1:49:01:8d:92:3d:7e:43:25:51:70:47:80:c5:fe:44:
         3f:28:ad:c1:9e:04:09:01:ff:8f:6d:d2:f3:0b:b9:2a:ec:68:
         d9:dd:c0:cc:ef:02:23:77:ff:28:95:53:a1:3f:d6:28:da:95:
         fe:7c:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:22:26 2025 by rpki-client