Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File:                     tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier:          6qKnUvF2lGN8rWJ1R9CUpEIF3zFpDRrZBV6sPFBRTGg=
Subject key identifier:   28:6E:6E:22:F9:45:B2:74:C8:9C:D7:2C:23:86:BD:EA:58:39:69:84
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer:       /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial:       0196545BE0FB8E29EB2E7E65F73AFBFE6890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number:          1500
Signing time:             Sun 20 Apr 2025 18:00:28 +0000
Manifest this update:     Sun 20 Apr 2025 18:00:28 +0000
Manifest next update:     Mon 21 Apr 2025 18:00:28 +0000
Files and hashes:         1: iRWK7zhmEqe5kSfNzw4pTeBGjvE.roa (hash: x9g5RUDfgJ6Mixu1OZfai6p4BgXIl99taX8ijSdqumo=)
                          2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: pEP+Q+dxo3RTBbSmdZ1EKlK5cfFqq6hTkFvkm58Ywvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5b:e0:fb:8e:29:eb:2e:7e:65:f7:3a:fb:fe:68:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
        Validity
            Not Before: Apr 20 18:00:28 2025 GMT
            Not After : Apr 21 18:00:28 2025 GMT
        Subject: CN=286e6e22f945b274c89cd72c2386bdea58396984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:47:bb:9c:b8:c1:c4:b4:52:ac:c9:0c:f5:
                    fa:62:2b:ca:39:97:d2:3b:d5:ae:94:fe:31:49:8e:
                    c6:b7:82:7d:d7:96:71:87:49:4f:7d:10:0d:2c:5d:
                    80:da:42:06:f0:75:6a:44:ef:41:fb:3b:f0:6b:ed:
                    34:33:7c:2c:53:77:f9:b8:67:33:20:f5:15:78:72:
                    07:43:43:16:a6:bf:a1:c5:20:d5:da:04:a9:1b:53:
                    f2:e5:78:21:bb:8d:80:e1:5c:70:46:8e:4f:c6:68:
                    3a:d9:d7:6a:17:34:7b:04:11:e4:59:12:6e:87:af:
                    29:af:ce:8d:00:a0:1e:1e:e8:13:8a:fc:bd:cc:38:
                    65:76:98:cb:98:cf:83:ee:c5:b4:15:38:72:19:ff:
                    3f:b5:3c:e4:82:91:03:c6:e0:6a:76:6a:d6:08:00:
                    2c:e5:e8:e1:ca:9e:0b:4c:23:d7:da:7f:57:b1:08:
                    61:d9:65:8c:b5:21:a6:9f:5b:e8:9a:c8:74:f1:d6:
                    f0:ec:70:96:da:da:3b:41:f1:b8:53:1f:99:40:9d:
                    a4:31:e9:c0:2f:b1:f1:6b:2f:af:b5:a9:a7:48:da:
                    eb:db:28:2e:8d:66:92:de:b3:40:59:03:ab:64:bd:
                    cf:eb:b3:2c:3f:33:63:bd:6d:d9:5b:d7:97:e2:f9:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6E:6E:22:F9:45:B2:74:C8:9C:D7:2C:23:86:BD:EA:58:39:69:84
            X509v3 Authority Key Identifier:
                keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:05:2c:99:d8:41:dc:3f:af:e8:78:03:5b:da:26:2c:b1:
         12:27:16:2b:66:40:6b:69:b1:78:00:97:ee:37:64:6f:b2:a9:
         ca:8c:69:88:7d:50:4a:d9:ad:1e:ad:0e:fb:a0:a4:c6:f1:7c:
         ec:9d:a7:1c:22:ce:e8:42:74:8b:bf:c4:a0:a5:b8:96:91:28:
         47:fd:d3:01:32:9e:69:a0:ce:6e:08:2d:8a:05:f9:82:a7:2c:
         63:90:b8:4b:d1:6b:36:61:82:3d:c9:a6:58:31:fe:1d:6e:ef:
         85:16:3b:27:f5:b1:bb:dc:9c:0a:04:f4:4a:ea:48:ff:2b:d9:
         e4:7b:03:02:ee:6f:f8:17:5f:19:af:00:74:5e:63:e7:91:fa:
         37:03:08:93:76:c9:39:1d:0f:e2:fd:94:53:56:ba:9b:f2:93:
         fc:ed:07:99:c8:a0:d5:94:e9:28:af:d0:e6:80:ac:87:c3:23:
         c8:66:e2:43:23:12:31:aa:d1:98:9d:22:fd:bb:b2:ca:26:8b:
         52:5a:a8:25:e2:aa:63:02:69:84:92:81:61:d3:8e:e8:2a:30:
         51:39:eb:11:68:24:fb:cc:23:99:a8:3f:9f:16:8f:53:55:72:
         7a:c8:a2:06:73:71:30:e7:4b:92:61:0d:0a:d5:dd:1c:98:ca:
         c6:89:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:46 2025 by rpki-client