Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File:                     TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier:          tu4qFVPLGLiC2nXX5+m7OBz9/ElUPf/yM4A9RKl9JvM=
Subject key identifier:   82:CB:5C:A8:B5:72:C1:1C:D0:9C:2B:01:48:B2:ED:83:EC:46:B3:03
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer:       /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial:       019644B1C0BA342F657A17D13C1107B8EB0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number:          1240
Signing time:             Thu 17 Apr 2025 17:00:21 +0000
Manifest this update:     Thu 17 Apr 2025 17:00:21 +0000
Manifest next update:     Fri 18 Apr 2025 17:00:21 +0000
Files and hashes:         1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: khFT4XBQGn+0svH9UW2M/JoFV6FEym837cEzhdNhuik=)
                          2: j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa (hash: mypsPRsnwnV3Yo/ZoSy7EsoVz4ps6Bh9fIm4sESstXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:b1:c0:ba:34:2f:65:7a:17:d1:3c:11:07:b8:eb:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
        Validity
            Not Before: Apr 17 17:00:21 2025 GMT
            Not After : Apr 18 17:00:21 2025 GMT
        Subject: CN=82cb5ca8b572c11cd09c2b0148b2ed83ec46b303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:14:1c:d9:d4:70:38:ef:9a:56:d1:6a:b2:
                    83:c1:74:1e:58:d8:33:d6:c7:83:cc:a8:0b:85:35:
                    ce:9e:70:2c:75:c8:d7:98:01:a0:3c:fa:fa:21:17:
                    8e:70:bd:4e:0c:fa:88:3d:55:6e:ee:fc:a1:2f:48:
                    b2:92:79:f8:4d:24:2e:ea:29:ef:26:d2:c6:f1:3d:
                    8c:22:8c:fe:09:fd:d4:64:d2:e6:bb:e0:9e:36:52:
                    1e:28:0a:2c:c6:9b:84:57:a8:f8:fd:0d:06:9b:5c:
                    f7:f8:53:de:2a:20:9b:d8:a2:72:80:9c:23:0d:9a:
                    a5:73:45:5c:92:84:79:6e:d0:8e:fa:1e:25:14:2b:
                    e3:72:08:58:a1:0c:1a:22:71:d0:a3:58:a7:82:b5:
                    7d:2c:b3:78:a8:bc:b5:97:25:c9:83:9f:70:41:53:
                    33:bc:53:9c:32:2c:65:f9:30:51:99:76:96:30:28:
                    cb:e1:29:67:c4:e8:eb:f9:4f:00:8c:46:62:5d:28:
                    df:27:31:b4:3e:34:2b:26:a6:16:38:2b:c4:67:39:
                    6e:87:ef:32:bc:f8:6a:7d:42:e2:6d:7e:54:cd:a3:
                    55:88:4a:ec:1f:7d:a3:ad:f4:15:1e:ed:ef:7f:6e:
                    6b:c4:00:9f:d1:ae:7c:6c:76:54:05:53:b3:9e:35:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CB:5C:A8:B5:72:C1:1C:D0:9C:2B:01:48:B2:ED:83:EC:46:B3:03
            X509v3 Authority Key Identifier:
                keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:47:75:87:51:34:f9:f0:90:6a:ad:23:f2:59:e4:2f:3b:
         48:d9:0c:94:7a:e3:de:13:9c:c2:20:d8:e5:a8:1f:7f:64:e2:
         32:8d:35:e8:61:b6:8a:ef:ca:52:ab:f5:1d:6c:94:a4:d8:79:
         ee:2d:70:aa:a5:da:1e:2f:b2:52:d2:9d:ca:aa:0b:e7:a1:d6:
         43:eb:9f:0e:e6:8d:4d:35:91:71:77:e1:4e:30:0c:59:e4:14:
         e9:d0:e8:11:a4:af:ba:3e:fd:55:9d:dd:05:57:ec:44:7e:00:
         03:0e:78:c3:1e:b6:36:ae:09:21:74:9f:29:fe:6f:3f:ae:87:
         dc:c0:da:8a:0e:fe:5b:7e:c1:6b:ae:97:80:9b:31:f0:36:9c:
         af:f1:1a:3e:15:9c:9c:2f:92:45:f3:0a:40:4f:e1:41:be:1f:
         63:a0:c4:fc:23:f4:ad:61:4c:62:f6:8e:5a:11:16:63:23:a3:
         73:92:18:ee:26:e9:cf:cf:25:7e:ef:28:79:ec:b8:3f:2b:f1:
         f5:08:1c:04:fa:35:d5:77:16:f7:8e:1c:8e:6f:7b:eb:8f:56:
         47:7d:40:fa:b9:fa:4c:b2:19:a1:18:c2:5a:08:8f:92:cb:b5:
         0b:18:ec:50:93:25:3c:e5:e8:65:4a:86:12:a7:86:4e:44:52:
         32:66:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:50 2025 by rpki-client