Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File:                     T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier:          RJO7OOwt8IU1EWRE2c/qcbrbkebSrQE+1uVWanzFZsM=
Subject key identifier:   C2:74:47:B2:F6:B0:65:F7:E2:15:F7:FD:F3:FF:31:73:E6:69:DA:9C
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer:       /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial:       01974D0D7AADE101182B360D6BB37DBF81E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number:          14BC
Signing time:             Sun 08 Jun 2025 01:00:18 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:18 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:18 +0000
Files and hashes:         1: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: sPZC2Vwjccr40ykTrtSuLPSITFztm4Z0B8ztdwpD2ag=)
                          2: YKTSjuC1HFTX7b7hXOaQuasHjw8.roa (hash: DCJ4Y27xyiCClFTgENixBHPREjuVymaDjhE/h8glQl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:7a:ad:e1:01:18:2b:36:0d:6b:b3:7d:bf:81:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
        Validity
            Not Before: Jun  8 01:00:18 2025 GMT
            Not After : Jun  9 01:00:18 2025 GMT
        Subject: CN=c27447b2f6b065f7e215f7fdf3ff3173e669da9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:e1:4d:6b:09:fe:c6:ed:b0:aa:3f:0f:89:
                    c1:ea:db:72:34:fd:81:46:75:18:3f:b0:3e:8f:27:
                    63:6c:1b:59:3e:6e:a7:c2:71:72:0c:e4:28:62:8e:
                    e3:cb:78:41:08:d8:22:de:03:e9:8c:8e:e9:b7:37:
                    76:bf:50:cc:e6:23:6b:ad:6b:45:d1:9d:9c:56:08:
                    97:76:72:4b:bf:18:e3:2c:f7:13:df:d1:75:78:ed:
                    51:5b:9e:1b:97:96:f0:ee:f2:48:d3:a3:aa:29:2a:
                    50:f0:a1:83:86:80:7e:6d:b0:4e:f8:be:9a:ac:2f:
                    37:48:95:1c:f0:d7:25:91:85:6a:95:0d:6b:f6:49:
                    ff:1a:92:61:a0:4c:43:04:fe:a7:0a:a5:09:1f:26:
                    c4:fa:00:7b:00:29:6c:2a:43:18:05:89:67:b2:4d:
                    27:9a:8d:69:b3:3e:bd:77:a5:4d:78:ea:a4:38:f5:
                    1e:e0:fe:05:e9:9d:5d:94:b3:f8:ba:0e:01:09:b0:
                    06:3f:cd:88:15:13:63:96:29:f2:b7:a3:bd:27:1c:
                    05:f3:e9:46:2e:20:fa:da:06:bc:0c:15:fb:68:38:
                    46:1b:39:b2:72:d9:f9:14:58:6c:57:f5:5a:19:3e:
                    4a:02:0a:ff:35:b0:7d:84:35:d4:c8:9e:b1:bf:7b:
                    90:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:74:47:B2:F6:B0:65:F7:E2:15:F7:FD:F3:FF:31:73:E6:69:DA:9C
            X509v3 Authority Key Identifier:
                keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:84:b3:2a:7b:0a:07:ac:88:7f:aa:7d:9e:af:21:dd:d2:07:
         8d:2d:61:28:34:ca:1e:da:fd:ac:91:e6:fc:40:34:98:15:cc:
         93:2a:e4:fd:8d:19:67:35:1e:71:c9:84:b8:6e:37:c9:d1:fa:
         d1:f2:b8:11:31:a3:f8:42:3f:d1:61:7d:bc:c8:47:de:12:57:
         15:64:76:34:1e:ee:da:09:fd:32:41:93:94:7a:01:21:d3:b3:
         29:9e:a2:6f:82:da:fc:cc:6c:ad:8b:6e:ab:7c:c6:1c:84:35:
         96:5d:2d:c7:f9:17:7c:e2:ca:c3:d6:6a:0b:1c:38:b9:8e:c2:
         c1:87:3a:68:d3:bd:50:d5:8a:24:de:65:de:ca:1c:93:96:a5:
         2d:79:90:6b:a9:f6:39:6c:21:ea:ff:d9:fd:51:9d:c3:13:b5:
         02:1f:eb:cc:74:7d:7f:6a:a4:56:db:3c:5f:5b:1d:f7:4c:7e:
         67:e4:5f:1e:97:7d:9d:ce:44:3e:d1:48:1b:a0:d7:13:4b:91:
         fa:47:0a:05:2c:88:0c:75:b6:a9:65:e7:b3:59:eb:26:e1:a5:
         3b:11:b2:15:fc:d3:62:a3:40:aa:d2:9e:40:32:45:c3:2c:6b:
         8a:3a:15:00:b9:78:0a:ca:a0:9a:95:31:7c:3c:d0:ac:e3:0e:
         58:c7:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:12:31 2025 by rpki-client