Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File:                     TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier:          7bqv6Oh2ETi94mWfVdrcBi+LGRDeG7EsXTaoRhINz2M=
Subject key identifier:   39:2C:02:2B:AA:41:17:BF:7E:A3:8B:C3:CE:86:4E:6F:C1:DB:0D:8F
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer:       /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial:       0196B85A2B3E46A9EDDD373ED2AA339F379C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number:          0C2D
Signing time:             Sat 10 May 2025 04:00:39 +0000
Manifest this update:     Sat 10 May 2025 04:00:39 +0000
Manifest next update:     Sun 11 May 2025 04:00:39 +0000
Files and hashes:         1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: s2cH5ILwM8HFw7CaM3xuqQ/lmvt9giipWinKBBNAWP4=)
                          2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:2b:3e:46:a9:ed:dd:37:3e:d2:aa:33:9f:37:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
        Validity
            Not Before: May 10 04:00:39 2025 GMT
            Not After : May 11 04:00:39 2025 GMT
        Subject: CN=392c022baa4117bf7ea38bc3ce864e6fc1db0d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:62:98:9a:0c:bb:18:cd:4b:1b:52:9a:85:
                    90:52:a1:36:4b:67:6c:51:38:67:ca:65:96:6f:87:
                    42:84:1b:6d:49:00:ab:bc:2d:7c:09:e5:ed:36:9d:
                    46:51:a6:3a:14:0b:71:43:40:5b:9d:f6:13:d9:2d:
                    5e:31:e0:ed:87:14:f7:3b:66:f9:0d:1c:01:68:08:
                    92:18:31:10:cd:bf:75:65:f6:fe:1d:0d:b2:e5:f0:
                    12:63:91:94:13:aa:35:19:1e:52:ff:cb:c5:94:6d:
                    55:c7:3f:f5:0b:1c:61:da:78:46:d0:ab:06:99:83:
                    fb:db:4e:17:4e:3a:82:06:ff:5e:ce:98:97:c2:91:
                    d6:dd:b6:d5:bf:12:a2:6b:aa:fb:00:a5:62:2e:b1:
                    cd:4f:91:e0:d7:8d:20:7e:d3:88:b3:1a:c5:16:25:
                    00:16:5a:f3:02:77:07:ac:2d:7e:5a:54:09:73:a4:
                    5f:f2:35:13:d6:b8:f1:ba:b4:0b:8a:5c:73:2d:1b:
                    cc:80:15:1f:2d:8b:e1:72:e6:83:e3:90:00:f6:d3:
                    72:e2:7d:ec:a9:ff:05:9c:49:89:62:b9:76:7e:b7:
                    e7:a0:2a:45:10:04:0a:36:99:bb:a6:4a:26:12:09:
                    8e:8b:29:ad:ff:02:ea:5d:a6:9a:07:38:88:15:e2:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2C:02:2B:AA:41:17:BF:7E:A3:8B:C3:CE:86:4E:6F:C1:DB:0D:8F
            X509v3 Authority Key Identifier:
                keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3b:99:1d:0d:00:39:51:48:65:9d:9a:c3:c6:8d:03:e8:8f:
         a3:01:0c:4f:7d:b5:0d:cc:ff:55:1f:73:05:d3:2f:3f:18:19:
         ff:f8:ab:6c:c1:e4:03:4f:d9:4a:be:0d:f2:41:9f:6b:d7:c9:
         1e:58:d6:a2:71:38:1b:84:3a:56:a9:cf:96:67:6e:b6:db:a6:
         2d:69:8d:1c:a7:32:cb:f5:c2:62:6d:fb:53:9e:50:9e:08:49:
         98:4d:1f:69:01:18:41:50:fe:29:1f:a0:77:2e:42:ce:78:43:
         c3:4b:af:d3:fc:3e:c2:ca:45:e4:e6:6a:2a:4f:a9:eb:d4:8c:
         20:98:1a:c6:98:76:6c:7b:88:8d:d3:a8:f2:0f:c9:7c:bc:5c:
         02:66:76:83:38:c0:7e:03:3e:75:59:30:87:87:ea:17:53:ed:
         78:6b:b7:58:2e:a7:29:f0:33:94:62:75:00:3a:0f:af:f4:6a:
         12:f9:26:d7:69:a3:05:ab:60:ca:7c:ef:0b:d5:19:78:08:81:
         74:98:30:bb:a6:8b:42:56:46:bd:e4:df:42:bd:15:14:25:36:
         cd:14:c6:0a:a0:cc:08:36:ca:9a:ab:f4:5b:52:02:9b:13:29:
         09:9d:67:14:f7:9a:08:a0:4a:33:fc:8d:93:f2:94:ea:99:03:
         d2:c0:5a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:39:52 2025 by rpki-client