Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File:                     tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier:          bo3yEifPKpbCEH2V5mEqKWwJri9jek+YS2fkDUvjuQc=
Subject key identifier:   A3:68:F0:2C:E9:A7:C0:1F:F5:73:3E:5D:FF:AB:96:BE:FF:60:77:FD
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer:       /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial:       01963C8B0A634F2790D735B173E2F134651F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number:          1102
Signing time:             Wed 16 Apr 2025 03:01:07 +0000
Manifest this update:     Wed 16 Apr 2025 03:01:07 +0000
Manifest next update:     Thu 17 Apr 2025 03:01:07 +0000
Files and hashes:         1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
                          2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: tp/giZYEYnr8re5CYiYoHuuS/AxJVg2GEMb7CTAMMtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:8b:0a:63:4f:27:90:d7:35:b1:73:e2:f1:34:65:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
        Validity
            Not Before: Apr 16 03:01:07 2025 GMT
            Not After : Apr 17 03:01:07 2025 GMT
        Subject: CN=a368f02ce9a7c01ff5733e5dffab96beff6077fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:59:1d:7d:e9:20:6c:6b:2b:43:d5:00:ff:
                    1e:c3:72:af:53:4f:6e:3b:c8:d8:92:69:1c:64:cc:
                    40:66:85:ed:74:7c:2e:39:d0:94:65:38:0a:ee:45:
                    05:a6:05:2b:0d:f7:b6:07:ed:78:ce:8e:ae:6f:c7:
                    92:88:a2:cd:4f:1b:19:cd:4c:34:59:0c:6c:27:66:
                    89:13:7c:44:d5:fe:c7:dd:4d:c9:bd:35:2f:50:b8:
                    2a:d3:8b:c7:65:1e:28:34:10:4a:45:9a:33:c0:9a:
                    2b:12:17:cd:22:c4:50:5c:39:40:6a:5a:e7:0a:76:
                    19:0f:19:e3:fa:10:39:cb:8f:54:e9:a1:2c:c0:0e:
                    41:1b:ef:2e:09:84:16:26:c5:b1:25:f0:48:26:d1:
                    d5:82:cb:b7:b7:3d:3c:c1:38:65:d1:0f:61:7f:71:
                    c7:b8:93:f0:43:b9:c1:de:89:b4:e2:7a:3d:dc:b7:
                    81:96:6c:4c:4a:09:60:68:b9:69:2a:80:8d:9e:5e:
                    60:3c:f2:d3:d3:12:5d:68:5c:c0:42:b5:62:88:c4:
                    32:fd:a7:41:21:75:c6:6e:fb:cf:2c:7b:e3:7b:a4:
                    9f:41:95:e4:f4:35:37:e3:94:75:c4:25:8a:03:4f:
                    76:4a:f1:f5:57:5a:eb:44:13:e6:86:0d:e1:eb:5c:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:F0:2C:E9:A7:C0:1F:F5:73:3E:5D:FF:AB:96:BE:FF:60:77:FD
            X509v3 Authority Key Identifier:
                keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e6:e1:c2:16:5c:d6:0c:54:c9:63:d1:e1:31:f2:71:f8:8f:
         70:db:ab:55:ee:65:db:01:f6:ae:08:a3:be:0a:33:c3:13:8e:
         0f:34:f4:30:38:a3:f1:09:35:73:6d:19:e2:2a:81:25:38:b1:
         93:d5:bd:73:9e:c0:0d:2c:c1:ed:f6:55:2d:7d:8c:37:37:60:
         44:b4:f9:c1:4e:cd:34:e9:ff:f3:cc:07:03:05:3a:84:96:0d:
         f3:b5:17:ea:62:3f:2a:5d:30:3b:19:56:49:33:a9:80:66:5c:
         9b:3a:bb:62:14:33:9a:07:5e:79:00:e2:6e:5f:7e:52:18:cb:
         3a:d0:8d:63:58:83:5c:ce:2e:31:8c:89:08:29:a7:98:cb:53:
         0b:98:7a:77:73:e1:01:5a:b0:8e:b0:83:77:c9:29:4c:d8:bb:
         0f:f4:3a:01:ab:e4:47:79:06:30:e3:4f:6f:38:10:7e:08:aa:
         44:52:d7:3f:8b:32:e7:e8:d1:44:fe:97:2c:09:b4:01:0c:77:
         b2:a2:02:70:56:12:e7:19:63:dc:fc:fa:6b:ce:16:82:44:02:
         d1:d7:d1:f6:c8:4f:74:ff:3e:be:fb:2f:c6:dc:54:b9:cd:4c:
         8f:7c:76:b5:02:1f:53:5f:1d:cf:93:6b:46:17:3e:a9:c6:40:
         67:09:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:17:45 2025 by rpki-client