Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File:                     TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier:          uCZRcClA75prK8mz2n630aY4hBcTGjeLv8rGbhFkPec=
Subject key identifier:   31:D0:EC:01:3F:F0:50:19:31:A0:A7:86:6D:74:6C:8C:42:80:82:84
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       01958CCE9C619749EC8D7B2BAEAE01FFAC69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number:          0690
Signing time:             Thu 13 Mar 2025 00:01:45 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:45 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:45 +0000
Files and hashes:         1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=)
                          2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=)
                          3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=)
                          4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: HwvaQEry41XplmG5K6ocUSYL2TYsrLlTejEuRbQqQN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:9c:61:97:49:ec:8d:7b:2b:ae:ae:01:ff:ac:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: Mar 13 00:01:45 2025 GMT
            Not After : Mar 14 00:01:45 2025 GMT
        Subject: CN=31d0ec013ff0501931a0a7866d746c8c42808284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:7b:aa:94:5c:76:86:ca:cb:72:97:fd:a0:
                    14:7c:d4:74:36:a3:8d:be:2d:34:00:33:da:a1:86:
                    bb:85:6f:2c:84:5d:57:ed:13:cb:de:70:2b:fc:2e:
                    fe:37:1e:9e:1a:7a:54:ca:64:16:ee:f7:c2:49:6e:
                    e6:f3:e1:ed:d6:e7:59:c5:83:07:f2:db:63:dc:af:
                    40:18:0d:73:e9:ac:14:9e:5e:3d:6a:5a:c5:35:7a:
                    4b:d2:e0:64:74:88:9c:8e:77:6c:c8:b8:8c:ec:1b:
                    48:e1:2f:00:45:00:7c:f6:94:95:96:9c:6c:a4:19:
                    33:b4:74:8d:f4:33:4d:4b:70:57:6c:16:51:0e:8e:
                    e0:81:76:ce:09:6a:ef:ce:e1:9e:6f:17:f8:54:af:
                    af:ce:4b:96:af:02:0e:17:00:b2:62:d4:82:2b:ad:
                    a2:58:e8:af:87:1d:ff:4e:01:23:04:cc:8c:f6:13:
                    68:f5:a5:67:85:06:74:37:f8:44:ca:6d:20:23:32:
                    26:92:aa:7a:e3:7c:7a:df:96:33:ed:72:34:61:28:
                    ff:7f:b0:a2:a1:c5:6e:c2:0f:c9:cc:86:2f:d4:c9:
                    ab:5b:f3:58:4c:08:69:f6:c8:1f:3b:9d:84:41:40:
                    b2:ce:27:34:97:36:ae:44:cc:2c:24:0b:22:5f:6b:
                    40:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D0:EC:01:3F:F0:50:19:31:A0:A7:86:6D:74:6C:8C:42:80:82:84
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:03:68:60:d6:99:d6:8a:0f:ee:9b:b8:66:99:44:13:af:9b:
         c7:de:94:f0:26:5e:31:b6:64:19:61:a2:b2:d5:3c:48:d3:f4:
         04:40:76:02:21:dd:f0:7d:c0:74:77:a3:0e:98:79:9d:f7:59:
         29:69:d2:a2:9c:97:f3:21:b1:fb:0e:d2:77:54:f1:52:d6:ab:
         86:16:61:11:11:a0:5a:96:f7:78:39:60:2e:09:40:79:8d:df:
         95:82:6b:aa:bf:90:b0:5a:f5:be:2a:d4:e7:98:5b:aa:5b:ca:
         33:12:bb:31:84:5b:67:e3:26:87:57:96:71:e8:38:09:94:67:
         e6:c3:a7:d9:e8:ac:da:83:7c:d3:81:90:33:80:18:41:03:ec:
         8c:c5:3a:e0:9c:cc:f1:de:a3:58:95:0f:75:79:d9:b8:88:bb:
         3d:a0:f7:22:e0:c3:ec:66:03:b3:7a:90:c2:33:d5:03:b0:cb:
         ef:a7:c2:50:18:73:35:4d:6b:a4:ef:ae:18:e8:ec:ac:ff:dd:
         a2:29:ce:e5:13:1f:89:49:a2:54:e6:4e:8a:5f:41:4f:cc:27:
         99:1e:da:92:9e:98:ad:f7:ea:25:d4:fe:d7:2c:1c:95:1f:16:
         b6:ff:1a:4f:ef:40:f4:ce:44:bd:c8:bc:bb:86:d1:a3:ec:7a:
         f8:82:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:47 2025 by rpki-client