Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File:                     tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier:          62PNZ7gh0VJjxmiimSf24RYLdfPUsdAltiY9xjateo8=
Subject key identifier:   81:EE:88:0E:D8:E8:98:45:5C:A7:B6:83:49:B2:EF:BC:89:24:89:37
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       0196274DAA3570280307CF426CB480F0F62C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number:          1043
Signing time:             Sat 12 Apr 2025 00:02:03 +0000
Manifest this update:     Sat 12 Apr 2025 00:02:03 +0000
Manifest next update:     Sun 13 Apr 2025 00:02:03 +0000
Files and hashes:         1: 1-PqW8UmiSaov5LQilBVWMK5ZalY.roa (hash: TOVF5pxyQFktaD7ChGQ0pQzpTOW/D5b1AiH6KqbdxuQ=)
                          2: DBUEsMbUBbrOYrLwsjQd2fgNgQ0.roa (hash: BFgftP0Iqiz4p1YwPjrFX1V4YWIovqOFp45C1kiDgkI=)
                          3: LO8EPN-S3Pc72fViYyrMb6fJWDA.roa (hash: rAMQpq4xIPRJP3n+vjw8r64+rf/K3qCyA6DXg4GEc5c=)
                          4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: OTfguge3V2IZFVkl1CDeK5i4Pi4jToa/1Kj6L++WJbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:27:4d:aa:35:70:28:03:07:cf:42:6c:b4:80:f0:f6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: Apr 12 00:02:03 2025 GMT
            Not After : Apr 13 00:02:03 2025 GMT
        Subject: CN=81ee880ed8e898455ca7b68349b2efbc89248937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:78:1a:cc:78:1e:99:0c:d7:9d:75:ce:c3:
                    94:6f:37:be:36:7b:5d:c7:58:4d:bb:9f:7c:ca:00:
                    94:33:13:db:f7:16:3e:22:8e:b8:2a:60:89:3e:0a:
                    da:8b:e5:26:d8:bd:8d:0e:51:24:f3:77:ec:df:15:
                    e3:e0:39:6e:1c:fa:ad:f6:aa:d3:b3:cb:ac:fc:be:
                    6d:f2:1a:12:34:c3:d5:2a:11:6e:23:a3:92:ad:eb:
                    35:f6:44:36:0b:a9:bc:c5:20:b6:59:4c:bb:ce:a2:
                    73:75:80:9a:26:41:b8:66:ae:9c:53:91:35:fa:44:
                    d3:4c:1c:64:ca:f9:47:20:4e:b1:df:1f:c2:43:64:
                    7d:8d:1e:a9:3e:36:ed:1c:49:d6:51:68:51:b0:7b:
                    12:ba:00:fc:49:21:36:60:6c:65:aa:63:35:94:36:
                    e3:7a:1a:cb:cc:9c:83:29:1b:41:c2:9d:a8:6c:cf:
                    a1:91:06:9f:4d:cb:ad:90:a9:1a:5c:0d:09:6e:3f:
                    68:29:3c:6a:a6:00:17:6e:08:6f:aa:4b:30:b1:a2:
                    a6:fb:ef:39:78:80:76:42:4f:b5:27:fd:4a:bc:7b:
                    a3:bd:04:15:69:00:1b:50:5c:59:83:3e:fc:c0:b0:
                    be:96:91:60:71:35:a2:36:dd:e9:50:82:83:cf:77:
                    d7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EE:88:0E:D8:E8:98:45:5C:A7:B6:83:49:B2:EF:BC:89:24:89:37
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:03:ca:b7:a2:2f:13:e1:df:3f:5d:96:1e:55:b0:e3:42:b1:
         e0:25:f8:c0:2e:f1:b8:d7:6e:7f:f4:73:e7:ae:c0:2c:06:cf:
         f9:c3:79:16:c4:56:90:3d:44:0e:a9:29:23:d1:08:71:5f:03:
         cc:df:63:76:f4:f3:06:a3:b5:73:fa:30:6e:74:0b:eb:54:c0:
         c2:a5:e8:e0:5a:45:74:a1:68:91:fc:5c:56:91:5a:17:38:c8:
         e0:5c:97:b9:4e:a9:f1:6d:b9:90:35:c0:8b:f3:25:f8:d2:ef:
         82:a7:7f:67:71:bc:b7:a9:0e:77:c2:65:04:c2:41:b3:77:0c:
         a4:13:b1:b7:c1:74:1c:33:a4:25:76:74:e2:49:95:51:81:00:
         09:ce:55:d7:9d:0e:6f:fb:15:b1:8d:e1:c9:c3:db:c9:84:f0:
         fd:da:2f:4c:2f:38:70:40:9f:a1:37:37:e8:23:47:77:21:22:
         56:8c:57:5b:99:d6:34:fd:d1:59:c0:9b:a6:22:74:2d:d3:4c:
         a7:e3:6f:48:7a:81:32:78:98:12:3b:7d:33:84:44:23:b2:a5:
         0a:be:22:ce:f0:6e:0b:ec:1d:30:34:2a:7f:58:79:7a:54:ca:
         ea:f3:47:05:7d:0d:25:b7:00:d1:7d:d9:61:20:2f:e2:5b:90:
         b2:05:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:28:29 2025 by rpki-client