Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File:                     Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier:          M6Q/dQkq6aKKf/otKtHlWdQSKl7hyaXRwbVaRi9kyF4=
Subject key identifier:   90:73:85:E4:33:58:16:87:96:21:67:5A:60:9F:50:A5:64:C1:DA:9C
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer:       /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial:       019653EE600DF79923576CBC29063C3AEBDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number:          03AF
Signing time:             Sun 20 Apr 2025 16:00:53 +0000
Manifest this update:     Sun 20 Apr 2025 16:00:53 +0000
Manifest next update:     Mon 21 Apr 2025 16:00:53 +0000
Files and hashes:         1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: ukWzbfv7Yu1C4XxppOLdaPPwmwwZSI4jZHSkbxyayhU=)
                          2: h73609pmEogi1mr5yal1sNR_aIM.roa (hash: xECkne1ZTJO+2XS9UZa/R12Y+brbcjW087xGv2+aPVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:ee:60:0d:f7:99:23:57:6c:bc:29:06:3c:3a:eb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
        Validity
            Not Before: Apr 20 16:00:53 2025 GMT
            Not After : Apr 21 16:00:53 2025 GMT
        Subject: CN=907385e4335816879621675a609f50a564c1da9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:70:95:6b:d3:b6:3f:61:21:fc:6c:2c:5f:
                    bb:b8:eb:70:fa:2f:15:a3:39:14:ad:5a:d5:f1:bd:
                    db:3d:0d:d9:c0:7f:c4:9d:d7:9c:d3:fa:3b:47:f8:
                    dc:33:29:97:94:e1:c8:7a:b6:11:00:77:3e:64:c0:
                    84:f5:6f:79:e0:07:bb:86:84:e9:dc:6d:f2:28:72:
                    bc:0f:b9:62:9c:e4:a6:49:eb:ff:f3:90:87:b2:ba:
                    4c:ba:23:90:0d:02:bd:25:7c:00:14:c1:88:b4:ff:
                    b1:cf:89:af:ea:37:00:c1:e7:78:03:8f:23:03:8e:
                    09:c0:39:4e:ec:a0:2f:6e:f5:45:ad:b7:53:43:23:
                    36:86:cf:dc:57:fe:e5:b9:38:d0:6b:22:fb:6f:cf:
                    19:d3:01:52:9c:5e:4e:2b:d2:91:6e:ca:e6:37:36:
                    bd:1c:ec:2c:54:bf:a7:fe:9e:1d:99:3b:45:0c:0b:
                    3b:c3:63:ce:86:f8:55:0a:23:47:c7:d8:79:97:f5:
                    c9:30:39:ee:66:00:f8:34:70:d4:dd:16:fb:1f:06:
                    1d:21:44:ab:d9:41:27:e2:8d:1a:b2:ce:49:2e:36:
                    16:40:4e:52:53:d4:36:df:93:4c:c4:55:69:93:a7:
                    1f:4d:c9:3c:0f:ba:c7:12:c2:73:65:21:c2:d4:aa:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:73:85:E4:33:58:16:87:96:21:67:5A:60:9F:50:A5:64:C1:DA:9C
            X509v3 Authority Key Identifier:
                keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:41:6a:d8:7a:79:b4:82:e0:26:d6:29:99:1d:87:31:02:d6:
         b2:c5:b2:02:04:d3:70:96:1d:76:4a:2f:4e:2e:55:71:00:6c:
         d5:3f:1d:cd:4c:18:c7:39:8f:87:1d:df:64:38:5e:ad:9f:5c:
         d9:8f:50:44:d7:7f:25:63:a8:5e:03:31:b0:65:1d:02:2a:56:
         32:81:b4:be:40:21:8e:6e:d4:80:e0:aa:69:0b:2d:b8:dc:7e:
         ff:32:da:9b:24:f3:b7:f5:f1:59:dc:34:97:8e:73:9c:2a:8a:
         4d:66:38:e1:a4:37:4f:e9:ab:71:78:7a:63:16:5e:7c:37:c9:
         8d:29:2d:ae:fa:bd:76:92:26:1d:e0:0c:59:8c:a4:9e:0b:ba:
         95:73:e1:ab:1d:05:08:65:8b:c8:78:c9:99:b6:22:88:45:73:
         c5:bf:ac:31:03:3d:6b:cc:3c:95:de:fe:b5:85:33:f3:2e:e0:
         e2:e4:03:d7:0f:4b:f8:08:0e:ed:f1:c6:3e:43:c7:e8:cb:61:
         35:6e:ae:8e:7e:77:5d:0a:37:04:8a:e1:8a:e9:40:f0:4a:75:
         ec:ba:52:bc:47:ed:83:94:4f:8f:39:2d:a2:0b:df:f3:bd:3f:
         9f:92:4a:f2:8b:f6:df:c0:c0:c8:82:2e:c8:fe:e6:04:1f:67:
         4e:14:25:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:45 2025 by rpki-client