Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
File:                     tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json)
Hash identifier:          +DJgt1J4qGfb/2xSgHl05kPWTS7Sx0m8gV8KtrAqHrA=
Subject key identifier:   E6:A6:A5:D1:FA:23:5C:D0:BD:78:6D:C0:89:3C:13:74:13:0F:6D:1D
Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
Certificate issuer:       /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Certificate serial:       019841AC5C0C45E64D7D35E22A0568E0725F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
Manifest number:          14B1
Signing time:             Fri 25 Jul 2025 13:01:11 +0000
Manifest this update:     Fri 25 Jul 2025 13:01:11 +0000
Manifest next update:     Sat 26 Jul 2025 13:01:11 +0000
Files and hashes:         1: EMcvovEYE0weVYExSrcia69GSOA.roa (hash: OJBdQmyJiJbXqpTEN6hCoMQhIqdAMMZRqxqDd5UOvg4=)
                          2: TUnXBzr-7-tBP6GdN78mI5ahxe8.roa (hash: xFiJ6sW6C+HN63QoP5r6OyDOw7tPBAVqmIPMSnDnKbc=)
                          3: qS4NQoySScwU3zHXzq6HsEt5IDs.roa (hash: jlv4YTMjTvaq8qodzyyZpHbeudK0kBUwOoEXewAmNyo=)
                          4: t_X4QuW3--N3561kP8RWk8vRzAw.roa (hash: 2ahNsLwCOZ1nVC1o0aItVno4KD1+MsUZ68JOkj0O5Wo=)
                          5: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: sAeFReaoSe1Lq2GRBs1WJAO/RZvjUF25HsygoTta1nE=)
                          6: xtJ3lZ04sv_4bqAlJ24ZbtoJeiU.roa (hash: ZKVGTwwxi9fVOYidTSfA/TmCkWo94r19B530igg9je4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:ac:5c:0c:45:e6:4d:7d:35:e2:2a:05:68:e0:72:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
        Validity
            Not Before: Jul 25 13:01:11 2025 GMT
            Not After : Jul 26 13:01:11 2025 GMT
        Subject: CN=e6a6a5d1fa235cd0bd786dc0893c1374130f6d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:af:fc:f8:c1:2b:6f:61:98:97:9d:06:fe:1e:
                    01:4f:89:4c:cb:32:4e:24:04:97:84:91:e2:3c:29:
                    08:25:58:81:20:f0:0a:73:68:61:98:87:0b:e8:e0:
                    0a:f9:fa:2a:36:ed:80:75:29:07:29:75:f2:cf:3d:
                    dd:82:91:32:5e:63:88:a7:59:1c:94:31:b9:f8:b8:
                    bf:41:b9:6c:a5:69:a7:4e:0b:f7:f8:27:bc:77:d2:
                    68:38:0f:f3:0b:ee:51:af:10:17:fd:61:dd:a7:4d:
                    3d:82:f0:a9:7a:11:70:62:25:8b:6c:ae:cb:48:14:
                    43:aa:ca:f5:3b:e0:06:e1:3c:c4:c0:e7:b0:11:87:
                    ef:b0:43:23:b6:b4:45:68:26:a9:bd:c3:57:17:c7:
                    31:4b:c9:01:a2:d4:53:a6:78:5d:e9:ed:01:6a:29:
                    66:39:32:0b:62:92:07:cb:31:c6:16:75:94:67:19:
                    c9:7c:3b:e4:62:f2:cd:11:fe:34:bd:53:b7:96:71:
                    22:64:50:3f:5e:85:db:00:81:a5:49:81:e3:ef:80:
                    ba:6c:af:19:a4:91:2e:f3:8e:51:03:21:3a:bb:c2:
                    06:c5:21:a4:62:28:c3:9f:60:bb:7e:d8:77:05:7d:
                    f5:04:d3:bb:a1:96:9e:b0:5b:a3:08:1c:d3:04:c0:
                    93:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A6:A5:D1:FA:23:5C:D0:BD:78:6D:C0:89:3C:13:74:13:0F:6D:1D
            X509v3 Authority Key Identifier:
                keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4f:8a:4c:b3:b7:d2:47:95:f0:cd:ec:85:7a:e2:26:2c:b4:
         2f:2f:0a:70:ba:dd:17:97:53:0b:7d:9b:9d:2a:24:f6:d5:aa:
         13:ca:b9:d3:af:39:65:57:5d:10:f2:98:eb:5e:ed:86:1d:16:
         77:f0:4a:7f:5e:37:b4:82:c8:2b:68:b0:e3:0e:28:44:c3:2f:
         0f:70:da:3b:d5:91:8c:c1:a6:cb:4a:41:e0:4c:38:bb:33:f0:
         d3:22:fa:12:c3:5e:60:54:e9:11:d7:64:17:9d:df:54:a9:be:
         36:be:9c:a2:e4:64:c8:01:96:b0:8f:ca:1d:0f:1f:9d:45:16:
         7a:0e:bc:1c:fa:3a:fc:d1:4f:67:18:19:e2:6a:6d:19:2d:13:
         c7:fe:1d:4e:76:4d:ba:30:d4:72:10:0f:44:dc:89:d6:69:38:
         af:8d:fc:9b:84:bd:35:ed:35:b5:14:ed:35:3b:af:c9:e4:a5:
         4c:6a:b7:f7:0d:1a:bc:63:b3:e1:33:6d:47:25:01:ca:e1:bb:
         93:4a:07:15:d9:7e:58:da:67:bd:b8:22:15:cd:31:0b:b6:26:
         c3:50:e1:83:7f:e7:07:ba:2f:c7:66:aa:40:e1:8d:34:3c:09:
         b4:ea:f8:8f:8d:d9:5e:03:33:0e:17:01:2e:7b:8d:7b:68:74:
         f3:73:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 20:55:39 2025 by rpki-client