Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File:                     tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier:          ArRg+Ad2Z6Gbd7zlnD/mhsLxrdvsCP1Zog00tyqy1rg=
Subject key identifier:   45:2A:F8:6B:89:CB:38:9C:78:76:73:A1:70:A5:2B:16:8F:13:A9:10
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer:       /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial:       01963AD31EDDE18C190D572EA15C8589EF00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number:          034C
Signing time:             Tue 15 Apr 2025 19:00:36 +0000
Manifest this update:     Tue 15 Apr 2025 19:00:36 +0000
Manifest next update:     Wed 16 Apr 2025 19:00:36 +0000
Files and hashes:         1: ktAbm-eMqyUysDj5Rz0ozhsQgoU.roa (hash: sOoFB/V0u6n0JOO4WrnOrE08EvrJyrBKeqUzyGdoIfI=)
                          2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: 2gi0oIU0hCHJWHJ9yKFJ44r7TkAFa3uT6aBfSnkGAr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3a:d3:1e:dd:e1:8c:19:0d:57:2e:a1:5c:85:89:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
        Validity
            Not Before: Apr 15 19:00:36 2025 GMT
            Not After : Apr 16 19:00:36 2025 GMT
        Subject: CN=452af86b89cb389c787673a170a52b168f13a910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:11:e7:47:10:2d:a2:b5:9b:75:ae:8b:de:
                    e8:a3:6a:43:0f:e0:95:b7:00:e3:16:0d:05:b8:97:
                    a2:b1:11:48:11:89:c4:fe:fd:3f:44:bb:3f:a1:17:
                    b8:a7:08:ee:3d:0f:22:68:94:47:d0:ae:db:1b:3e:
                    dc:d0:73:37:d4:de:25:cd:80:e0:68:bf:56:61:dc:
                    07:98:41:fc:3a:d9:48:e6:3a:11:e0:69:ce:00:a1:
                    6f:30:44:44:a8:dc:6d:7e:3f:d9:87:49:d5:e0:1d:
                    52:4e:7e:d7:2f:a3:d1:85:16:57:50:02:4c:6f:7b:
                    87:18:d7:fc:16:ba:2b:61:c3:29:b5:03:38:eb:46:
                    13:ea:f5:f3:9f:6f:92:27:4b:72:86:c6:09:a8:86:
                    c2:01:92:12:55:d0:85:c5:ca:69:41:4d:fc:38:97:
                    56:ee:ea:04:c3:11:0d:a6:0b:72:8a:4d:3b:96:7f:
                    4f:43:85:67:0a:cb:ce:9a:0c:9b:41:cb:d4:f1:1d:
                    35:37:6e:72:c5:ae:58:61:2f:9b:f4:cb:d9:b3:32:
                    63:76:0a:4d:b2:cc:54:49:70:4e:5c:c9:ed:c3:04:
                    40:59:43:16:66:c8:a1:40:90:8a:1c:4c:e6:b8:19:
                    8d:5c:0e:76:81:da:6c:7a:9f:08:46:4b:ea:71:3d:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2A:F8:6B:89:CB:38:9C:78:76:73:A1:70:A5:2B:16:8F:13:A9:10
            X509v3 Authority Key Identifier:
                keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:64:67:c3:bb:b1:f2:1c:29:f0:3f:d5:51:a5:0c:fa:dc:68:
         e9:b8:1f:b8:73:3a:75:e6:03:4d:fc:7b:78:a5:f9:b4:08:6d:
         6c:b8:f0:4e:76:c9:2e:0b:c1:f3:2f:6a:ab:92:b5:62:73:e2:
         10:d5:f6:81:b8:4a:ef:31:1e:7d:1d:3d:1e:4e:86:fe:1a:c8:
         09:cb:b7:0b:f1:92:9d:b2:e3:99:fd:ca:a1:9e:df:9f:40:64:
         82:28:5e:42:12:69:d3:04:e0:33:bb:db:cf:51:52:18:b4:fc:
         1d:c3:50:92:8b:ee:50:40:6d:70:68:28:27:ed:a4:48:e9:a0:
         9c:62:db:62:9a:fe:9b:65:f6:63:43:a4:af:a7:a1:ac:f5:4d:
         86:64:06:52:2a:58:1a:1e:ae:e7:c0:97:b6:e6:e7:96:f8:84:
         2d:da:a2:d0:f5:7b:1c:ab:a8:b6:e5:42:75:48:e4:61:a6:ec:
         75:8e:45:92:b1:15:59:35:2a:84:e1:ed:d1:20:53:c0:f7:f0:
         a0:26:ef:9a:c7:69:4a:70:d7:d7:3c:8c:27:ba:b6:8d:84:c3:
         59:a2:07:ed:85:ff:28:f7:c0:da:6e:7d:80:81:ad:68:b4:5d:
         a1:5b:ce:22:6e:c2:fc:16:5d:ec:ac:11:be:2f:83:88:46:d3:
         31:6d:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:40:54 2025 by rpki-client