Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File:                     TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier:          CQUM/eRtvkRYfGc/OEOstTN8ttHjjASViy3xJJoA6ow=
Subject key identifier:   D6:15:B1:AE:2A:F8:98:F3:5C:3E:FE:FF:B0:FF:C2:F2:7F:98:11:3B
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer:       /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial:       019616C6BA679913D34AAD1B4BB749928F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number:          14E4
Signing time:             Tue 08 Apr 2025 19:00:44 +0000
Manifest this update:     Tue 08 Apr 2025 19:00:44 +0000
Manifest next update:     Wed 09 Apr 2025 19:00:44 +0000
Files and hashes:         1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
                          2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
                          3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
                          4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
                          5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: XkBxPu3lkxbStqhs7P5R78JNh2l/eQS3tD9TlPOoSMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:16:c6:ba:67:99:13:d3:4a:ad:1b:4b:b7:49:92:8f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Validity
            Not Before: Apr  8 19:00:44 2025 GMT
            Not After : Apr  9 19:00:44 2025 GMT
        Subject: CN=d615b1ae2af898f35c3efeffb0ffc2f27f98113b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:89:05:93:7e:bf:0b:cf:31:e1:df:a1:b3:1c:
                    8b:0e:b4:28:61:b5:74:40:b5:7d:41:97:85:c9:a0:
                    09:29:1a:c6:e9:50:e0:78:0b:d8:5c:d5:29:b3:04:
                    f3:1d:4e:7e:a7:79:50:f2:39:73:c9:1d:bd:0f:73:
                    33:90:f5:30:89:53:a3:8d:ff:03:e5:16:bb:35:af:
                    11:bc:48:e2:d4:0c:9c:d7:15:f9:a2:8d:dd:9e:36:
                    01:31:7c:83:41:5a:8c:c5:4e:2b:b1:f4:7a:8f:d4:
                    8f:8b:36:2c:8c:05:91:a4:5b:27:09:4e:64:25:19:
                    de:2a:37:49:c3:bb:d1:2d:4f:4e:f9:5d:8a:56:10:
                    d0:57:8b:c9:51:ed:f3:2d:83:f9:e7:10:f9:e9:ca:
                    39:fc:00:77:08:c8:11:f5:7e:09:8c:f4:0c:73:f8:
                    98:10:7e:71:43:62:a3:f3:5c:9e:1b:b5:17:eb:b0:
                    05:b3:4f:37:fb:bb:0b:1c:af:ba:f7:b6:63:dd:47:
                    8f:40:b7:36:f3:4f:47:47:d6:98:14:5b:a9:fb:30:
                    b1:68:c1:6c:a9:81:6c:a5:bc:27:de:75:05:a1:ce:
                    bd:bf:f4:7e:78:35:05:c3:54:a2:86:c1:31:c5:b0:
                    3d:2b:ce:f1:bc:fb:d1:d9:39:a7:9a:50:ea:b8:49:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:15:B1:AE:2A:F8:98:F3:5C:3E:FE:FF:B0:FF:C2:F2:7F:98:11:3B
            X509v3 Authority Key Identifier:
                keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2d:62:12:a8:e1:37:62:2f:82:5e:72:18:dc:6f:f5:84:19:
         8e:c9:f2:8b:d2:38:ca:f5:f5:30:fa:e7:32:10:e0:88:3d:23:
         ca:f8:53:0b:da:ec:69:11:af:d3:d4:14:3f:83:5b:e2:8b:82:
         1a:23:c6:b0:22:bf:49:c0:a9:b4:5e:2f:52:7b:d2:f0:a1:f0:
         9a:25:71:d6:78:43:29:70:b3:79:5b:0e:0e:55:90:c4:dd:46:
         7e:84:5b:af:e1:7e:23:4f:d4:ea:2c:22:e8:f3:5d:ca:54:d0:
         5d:07:35:78:1a:e5:21:dc:b0:67:a2:24:90:06:a0:8e:48:ae:
         8e:d9:3f:78:ed:25:a7:ee:0c:ab:df:64:1b:94:12:39:4f:50:
         23:97:fb:77:bb:64:00:5f:b8:c7:48:b4:24:c2:54:09:f5:32:
         81:c6:a5:2e:32:df:a0:b7:cc:f4:98:5d:ea:cb:20:cb:e7:05:
         66:da:b0:bf:c8:34:04:ba:d8:2a:a7:b8:69:99:a4:39:a7:c1:
         1f:4c:c4:94:51:6b:a0:15:34:35:c2:8a:a2:0c:7d:7d:63:23:
         e6:3d:2d:4f:4d:2c:34:8a:6c:9d:51:35:dc:03:90:ed:c9:d5:
         9c:b4:f7:b2:8f:06:ed:82:92:79:55:c5:da:95:cb:9c:00:47:
         c9:34:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:27:17 2025 by rpki-client