Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File:                     tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier:          JAwDmICT42CO9oY2Ai8iBklOOTdJUnp3ybZ9BHbw+8g=
Subject key identifier:   50:03:C7:25:A4:CB:33:B8:6C:78:DC:C4:F2:50:18:14:7B:42:06:A6
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer:       /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial:       01974B8DA8401F59A0BACADC8FB7BA3E8CEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number:          0B30
Signing time:             Sat 07 Jun 2025 18:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:04 +0000
Files and hashes:         1: H_s46FVu3VtqmBdzQOsgFtOpwm4.roa (hash: xXfRZ05adaRJT3b+JBMiwuYhoS+v9eiqRiPqJaWYY3s=)
                          2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: XrasVrbIvOyg2tC9GZR9vLAIrywJwXOuHzWJ5RpBdpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:a8:40:1f:59:a0:ba:ca:dc:8f:b7:ba:3e:8c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
        Validity
            Not Before: Jun  7 18:01:04 2025 GMT
            Not After : Jun  8 18:01:04 2025 GMT
        Subject: CN=5003c725a4cb33b86c78dcc4f25018147b4206a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:b6:7a:46:e0:a1:d1:1d:4e:68:b0:b1:e4:
                    46:b6:80:01:85:49:08:a3:d6:83:9b:a4:78:0b:6a:
                    3c:ed:4b:52:85:bc:f2:dc:56:72:2d:cb:2a:66:5c:
                    e2:ca:25:20:cb:96:be:0a:59:8b:57:f2:e9:45:e7:
                    23:61:6d:b5:08:c0:fe:f2:af:5f:9a:83:5e:e2:e7:
                    78:34:74:b4:65:d5:7c:1d:e7:b6:5e:8d:9a:e8:7b:
                    b8:13:a1:fb:34:c4:bd:86:70:6b:1b:65:80:ee:42:
                    85:8d:03:62:5c:0b:8b:bd:4c:1c:2d:71:b6:b6:fe:
                    b3:7f:22:82:cb:b3:60:76:57:90:0f:d2:7e:78:ca:
                    74:6c:28:3c:e0:ea:6f:c5:67:90:e9:92:69:4d:c1:
                    27:63:0c:d7:42:78:f7:93:af:59:f9:3f:40:68:39:
                    51:a3:d7:54:46:c2:14:46:63:47:ae:8e:95:a3:8f:
                    da:0c:1c:9b:99:9b:91:ac:15:54:99:bc:ca:e1:ea:
                    55:ef:5f:0d:2a:39:d2:f9:03:ba:43:af:e5:1c:11:
                    8d:d0:8d:9d:b8:fb:58:e9:4e:db:a1:31:c5:54:a8:
                    af:4a:f6:7b:cf:f8:4f:db:46:5e:03:90:c9:e5:4a:
                    7c:dd:23:ab:4f:36:34:83:b8:fa:a0:1a:61:94:7e:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:03:C7:25:A4:CB:33:B8:6C:78:DC:C4:F2:50:18:14:7B:42:06:A6
            X509v3 Authority Key Identifier:
                keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:f2:f3:d9:e5:3f:92:39:c5:f0:62:c0:b8:4f:74:22:0b:
         f5:28:9d:a1:a4:0b:a2:90:19:73:f8:ca:8b:d8:07:5b:e5:4a:
         17:2e:3f:74:63:f7:7e:3e:65:3d:9c:11:32:9a:ae:e7:d7:03:
         97:42:e3:96:8c:7e:65:45:41:e2:70:07:9b:23:c9:e9:31:de:
         b9:df:9b:3b:63:34:0c:94:76:a6:c5:d6:1f:51:58:1b:e8:92:
         de:ce:94:f0:c5:83:37:03:0d:43:ea:c6:05:f9:af:24:de:0c:
         97:22:d5:80:53:81:14:8e:b4:30:a9:61:04:b4:31:02:66:34:
         38:c7:d1:d0:c3:e9:94:e7:dc:b6:71:16:5e:84:07:b8:73:bb:
         97:7b:f3:1f:72:aa:e4:ab:8d:9c:d3:01:85:38:9e:fd:ad:03:
         a1:3f:5c:8d:47:31:b5:43:08:1d:18:da:18:24:e1:da:ba:00:
         99:b1:ff:9e:84:83:4f:a6:26:63:b5:85:48:5a:c3:fb:38:3b:
         d9:3c:6f:97:dc:00:81:f1:8e:b2:e4:ba:ac:de:1a:7b:54:b4:
         0a:86:16:a3:69:05:0b:40:32:79:d5:2c:61:73:0d:61:bc:50:
         bd:49:65:a3:08:11:bc:c2:cd:56:76:93:bf:86:56:dd:6b:a8:
         83:f1:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:19:36 2025 by rpki-client