Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File:                     ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier:          cKKFuGe+/EU7nURSctNzXQGBI4/1PN+EPDYwpiNAJuY=
Subject key identifier:   19:05:52:16:B4:14:04:D9:AD:04:FF:6B:24:B5:58:69:8F:32:04:13
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer:       /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial:       01964BC6C0F9F852B1F8D8863BFB0A6D5155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number:          0CB2
Signing time:             Sat 19 Apr 2025 02:00:38 +0000
Manifest this update:     Sat 19 Apr 2025 02:00:38 +0000
Manifest next update:     Sun 20 Apr 2025 02:00:38 +0000
Files and hashes:         1: 2bbjZnItd_WfSUsxeSim-v-qB-g.roa (hash: U3T6Blvywe2N+XOmN4d0Sfw2WTnfp19mqzXdb2WW/M8=)
                          2: hs7awmW5u-N7i3rafiPiNllc2Bo.roa (hash: zx9QQVE6GtEBw9ZKQW610wAAxlFBO5GbObUYOTrSVsA=)
                          3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: Fq6SHCuugXYNtc0SROjDXS+TgWAmR1wvvrT1+c5MM1E=)
                          4: ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa (hash: uOUVs3Rq9AKXwjmauSrDsTRXthAY0OABda9jaa1tn6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:c6:c0:f9:f8:52:b1:f8:d8:86:3b:fb:0a:6d:51:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
        Validity
            Not Before: Apr 19 02:00:38 2025 GMT
            Not After : Apr 20 02:00:38 2025 GMT
        Subject: CN=19055216b41404d9ad04ff6b24b558698f320413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:20:27:ac:23:f5:72:b4:3f:74:7e:27:3d:3d:
                    e9:b0:3a:3c:6b:51:7a:58:25:14:74:c3:78:8e:8f:
                    ee:af:d7:fc:bd:d4:93:b8:82:65:f1:69:37:4c:e9:
                    ef:e8:bf:57:2d:86:d2:78:df:19:f8:43:6a:3a:aa:
                    08:98:a6:8d:e3:af:a3:0d:26:2a:86:fc:1a:da:8e:
                    1d:d1:1d:c6:34:76:66:7a:72:56:46:8a:3c:03:6a:
                    81:03:fa:9c:ab:75:1c:e8:be:e4:99:f5:ea:fa:fe:
                    da:aa:66:d8:1c:67:07:b7:bc:c1:59:d6:2d:8d:12:
                    ef:3f:d1:c7:7b:00:e6:3c:07:55:f2:ee:da:04:ad:
                    3c:b2:53:ee:d4:f0:b5:26:a1:25:aa:45:12:42:1f:
                    15:69:30:46:3e:79:06:1a:05:76:3b:75:be:46:a8:
                    fb:10:9f:81:03:cd:94:f9:cc:ea:15:46:28:68:54:
                    94:24:13:c6:19:f0:d1:c6:68:ee:02:61:0f:a0:44:
                    71:31:24:62:ad:65:5d:1f:f8:eb:c0:ac:93:64:3d:
                    de:51:7e:f7:ba:5d:ab:56:44:89:76:09:1e:91:4d:
                    74:96:88:ca:cc:f6:46:59:b0:62:c6:40:c8:c1:4b:
                    57:b6:1e:2f:e6:53:1c:9a:28:86:fc:49:c6:df:54:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:05:52:16:B4:14:04:D9:AD:04:FF:6B:24:B5:58:69:8F:32:04:13
            X509v3 Authority Key Identifier:
                keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:54:57:03:99:38:0d:27:48:49:72:b1:86:88:6c:06:c2:cf:
         25:24:8b:35:57:1b:bf:6f:c9:5a:8d:75:87:4a:43:48:53:ea:
         d4:5f:4a:bc:c2:be:ec:72:7e:b6:d6:c1:3a:e5:fe:f5:c0:d3:
         a7:1c:c6:4d:17:26:56:e5:39:38:43:25:2a:14:10:5a:42:b5:
         b7:45:09:a8:95:6a:a2:88:05:fb:26:65:62:48:30:ad:32:7f:
         31:46:8d:b8:23:1b:77:68:d7:cb:d9:19:1e:28:dd:d9:1c:c5:
         e5:0f:4b:f9:52:ad:88:f4:cc:84:be:40:48:96:94:05:53:6d:
         fd:01:d8:91:5d:b8:52:ed:a4:ab:76:7b:b2:89:f5:ab:7b:ba:
         95:37:c9:01:96:af:af:03:40:25:ce:98:6f:f7:e0:3e:97:35:
         1f:3e:1f:36:02:44:ec:ac:6e:0e:33:a1:fe:da:88:f1:a5:34:
         a8:aa:79:2a:cb:eb:fa:b0:f5:28:6a:74:32:74:12:b6:da:91:
         32:70:90:fd:e6:31:33:59:23:3a:85:86:9a:96:04:d4:aa:12:
         27:4e:88:25:d8:e2:31:62:82:8b:05:b5:f1:64:9b:e0:a9:6f:
         ae:a7:f9:e2:25:d1:03:44:83:ea:b6:24:ee:de:12:2c:1c:d2:
         bd:52:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:23 2025 by rpki-client