Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
File:                     TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json)
Hash identifier:          SSTNmOenENeydwl6WmS7eSI350QS3INM//58OoV8iyo=
Subject key identifier:   EF:46:0E:FE:10:24:35:D0:F7:62:5B:5F:3B:8C:70:CE:0D:43:EA:CE
Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
Certificate issuer:       /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Certificate serial:       0197B6A047F0B3ABCDD295A752CE09182A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
Manifest number:          034F
Signing time:             Sat 28 Jun 2025 13:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:46 +0000
Files and hashes:         1: M1M7HuPtGiosGSo4FBz1zc0zdo4.roa (hash: NcnqoCTtbPhCjxo06sSrzfv3k+hjFXX2MJeaGNHx2bI=)
                          2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: xyHtHBSDoFH05QrvS+yMaubGfj8nWlukzHH56mO52eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:47:f0:b3:ab:cd:d2:95:a7:52:ce:09:18:2a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
        Validity
            Not Before: Jun 28 13:00:46 2025 GMT
            Not After : Jun 29 13:00:46 2025 GMT
        Subject: CN=ef460efe102435d0f7625b5f3b8c70ce0d43eace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ea:e2:64:c0:79:6e:8c:43:b0:41:85:3d:53:
                    88:5f:28:16:de:74:5c:cf:53:19:c6:69:41:1a:12:
                    d5:7d:bd:fa:25:79:18:d9:9e:8b:25:c1:a6:85:09:
                    ac:b4:76:de:bd:4c:6c:6e:f8:7b:8c:1c:e0:9c:cd:
                    bf:85:1c:ba:03:38:96:4f:26:4d:bd:d1:59:e0:51:
                    dd:4e:63:d2:ac:e2:65:f7:f4:d1:1a:d7:2b:e7:36:
                    33:c4:6d:34:20:5f:89:7c:1f:46:8b:5f:a8:a0:86:
                    de:34:0b:f8:e1:23:91:47:34:b5:c8:c5:80:c6:0e:
                    f0:87:6d:71:b2:32:d4:f2:25:fd:2e:86:23:c0:9e:
                    89:af:48:00:ac:f8:59:ab:f6:58:5f:66:73:f8:8a:
                    6f:cb:02:83:b8:dc:49:8a:b4:3e:0d:a4:ce:05:64:
                    cc:d4:09:44:8b:7b:e2:3e:52:2f:7b:0f:9b:1f:37:
                    07:62:b8:72:27:4e:97:2b:91:40:79:c5:fc:28:d0:
                    d8:69:1c:0d:d5:30:89:ea:05:e2:63:ef:87:6f:b3:
                    5d:ad:55:34:0d:8c:50:f2:00:ce:c5:44:30:5c:3c:
                    fc:dc:57:68:16:c7:22:45:b0:da:75:53:0c:ba:3b:
                    18:82:78:b5:4d:26:e9:c6:89:1f:09:6a:55:6d:5a:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:46:0E:FE:10:24:35:D0:F7:62:5B:5F:3B:8C:70:CE:0D:43:EA:CE
            X509v3 Authority Key Identifier:
                keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:02:5e:09:4e:86:4a:a8:f5:8f:3f:67:40:3f:6e:13:c4:b7:
         60:36:f3:0e:e9:88:ad:5d:58:e4:47:4e:53:02:5e:d3:37:ac:
         81:b3:b3:4b:17:68:15:c2:24:58:b1:e6:08:43:16:d5:8f:a3:
         91:2d:a2:71:40:1a:f8:b1:92:e7:4a:e1:f6:63:36:09:01:76:
         00:5a:db:ac:b8:34:ae:76:86:e3:e8:47:45:2a:32:f1:71:9f:
         e3:2e:dd:28:3f:5a:90:88:ea:c0:32:2c:63:7e:a3:3c:73:97:
         ad:d8:df:ba:11:a0:72:64:29:9e:13:d4:c3:13:07:7b:6b:2b:
         5a:fb:8b:7e:94:49:e7:90:31:44:e1:51:37:f9:f0:94:14:30:
         e2:81:a6:a4:f7:6b:8a:96:08:09:0a:54:28:f6:91:a8:0b:72:
         12:24:df:e6:30:6a:0f:59:a4:eb:ea:d2:ec:4a:ce:ac:a9:80:
         66:d9:cd:06:f8:ca:74:db:5a:82:cc:12:02:1b:42:58:de:e6:
         a6:7f:f2:b7:c8:71:e7:36:a7:b1:7b:77:5a:78:26:f2:d9:53:
         24:51:00:3a:db:3d:9e:73:f0:72:ce:aa:f2:0d:51:6d:6f:3a:
         fb:64:02:a0:09:df:f5:38:7f:36:58:18:62:72:e8:07:dd:7f:
         eb:2e:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:25 2025 by rpki-client