Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File:                     ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier:          7tAQFxcQ3Fo69IsHBPdRN/EmHTYuUXZB8U/CGQIzAEY=
Subject key identifier:   6D:13:12:18:92:C5:0D:C8:99:9C:5F:19:96:89:95:53:B8:0E:26:CB
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer:       /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial:       0196AD31994E6475F4A20F3C2D2DF7D91599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number:          03CE
Signing time:             Thu 08 May 2025 00:00:30 +0000
Manifest this update:     Thu 08 May 2025 00:00:30 +0000
Manifest next update:     Fri 09 May 2025 00:00:30 +0000
Files and hashes:         1: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (hash: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=)
                          2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: x1eXp8GmnVSob2LVxiGf/vg3VoqdwbGf3JaQTbfbvoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:31:99:4e:64:75:f4:a2:0f:3c:2d:2d:f7:d9:15:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
        Validity
            Not Before: May  8 00:00:30 2025 GMT
            Not After : May  9 00:00:30 2025 GMT
        Subject: CN=6d13121892c50dc8999c5f1996899553b80e26cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:d0:36:73:78:c8:54:34:59:b1:ea:d3:7c:
                    b6:0d:fa:c1:34:11:c4:a0:11:cf:e3:d6:ae:df:b3:
                    ed:34:82:82:68:60:35:b9:da:f4:1c:6c:96:fd:fb:
                    89:b0:d9:d1:61:8b:87:ae:97:4b:78:cd:97:a3:7d:
                    6e:59:07:73:d3:2f:28:93:10:ee:b2:ed:1f:68:a2:
                    4a:02:b7:ab:34:23:8d:57:bc:35:da:a9:9b:98:c5:
                    e0:43:3d:a9:99:6c:7b:ae:21:c3:c3:dc:7d:0f:aa:
                    bb:a3:67:f2:41:66:c3:e6:60:78:c5:8b:3f:90:aa:
                    81:de:04:0b:a9:22:d4:ba:38:b1:00:a2:01:6b:6a:
                    d9:9e:b7:a0:4b:97:d1:a6:56:cc:75:c9:29:20:6d:
                    a4:85:d3:7c:fb:80:35:f5:ec:53:51:7a:45:d2:17:
                    aa:de:38:82:67:f8:7c:13:6d:3d:ab:45:53:57:59:
                    c1:bc:aa:bc:c4:2f:f0:86:6f:da:fb:28:a9:88:cf:
                    a3:c4:9d:29:52:4c:1f:58:b9:00:ba:a2:08:be:b4:
                    f3:92:8d:4d:fd:12:67:bb:85:93:d9:87:5f:17:02:
                    2a:fe:d4:d7:6a:45:d4:49:7e:d2:b9:f4:d5:88:34:
                    d3:f1:65:28:81:16:1d:d4:70:14:93:3c:f0:e0:11:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:13:12:18:92:C5:0D:C8:99:9C:5F:19:96:89:95:53:B8:0E:26:CB
            X509v3 Authority Key Identifier:
                keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:da:9b:83:67:66:5b:07:b9:09:b0:c8:e1:f1:1f:fa:1d:83:
         67:4e:43:de:89:f3:2d:8a:6b:96:48:5c:2e:26:e0:6a:60:0e:
         36:08:f3:19:a8:81:38:68:48:35:4b:a7:21:7b:24:27:58:68:
         21:17:c9:c6:78:34:a2:8d:cc:51:af:5c:32:55:0b:ed:5c:51:
         ae:e1:3d:ce:61:3d:81:35:17:63:5b:6a:dd:24:ab:bd:ff:7c:
         a5:72:32:37:8e:59:ff:8c:41:d9:f3:f6:c6:6b:f9:d8:d3:ec:
         22:10:fe:e6:e6:c8:fc:11:ec:da:55:45:e0:c3:18:df:25:3f:
         00:6f:bc:a4:c1:e4:5c:b0:8e:e0:c4:ca:58:9f:5b:ba:9d:3b:
         a8:68:b3:22:a5:97:e8:86:fc:c3:d7:cf:8e:70:71:0a:75:6e:
         6b:cb:56:37:dc:8b:cd:c8:83:0b:f9:c7:53:b0:54:20:64:16:
         bf:45:5e:2f:98:30:31:33:48:06:f2:5b:f0:9e:a5:c1:ce:26:
         f7:f1:ad:e7:8d:c3:28:cc:c2:ee:fb:7f:97:65:28:0c:44:fe:
         ed:6c:a3:7e:2c:db:e7:a3:1b:d7:6c:11:a9:d5:cc:b1:bf:e1:
         a2:35:20:82:a6:59:a8:69:9e:01:51:01:04:25:8e:8c:b9:20:
         27:cd:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:02:00 2025 by rpki-client