Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File:                     t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier:          H4QnSPyDGACY+nSl2sD0MXkW1pTOj4w44ITICvZoHgo=
Subject key identifier:   B2:46:2D:3B:A2:C1:5A:AD:EA:5B:F7:CC:E9:54:CA:19:8B:91:A0:DD
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer:       /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial:       01958B8489D44A9A340B576A8910A7C5822A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number:          0FB1
Signing time:             Wed 12 Mar 2025 18:01:13 +0000
Manifest this update:     Wed 12 Mar 2025 18:01:13 +0000
Manifest next update:     Thu 13 Mar 2025 18:01:13 +0000
Files and hashes:         1: CWinuPyhpx9dz9dUy6hm9U-hSH0.roa (hash: kzRVIrmXy5CpUKL1SvqWwqKDXVmBwcHxugVImN5DgH0=)
                          2: _YcVUBg4pBpfDLeQd5mPM0GEYXY.roa (hash: TyordHwYJ+m11Vugk833ssnB80M13ALr7nNUHskLV34=)
                          3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: ratl2O9FYp06Q+c+VZZUbWXR8zjyWx9APUu5ZUFTtp0=)
                          4: yXmhizI4Z65kZAreixYHF_jmabo.roa (hash: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:84:89:d4:4a:9a:34:0b:57:6a:89:10:a7:c5:82:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
        Validity
            Not Before: Mar 12 18:01:13 2025 GMT
            Not After : Mar 13 18:01:13 2025 GMT
        Subject: CN=b2462d3ba2c15aadea5bf7cce954ca198b91a0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:82:59:8c:7a:9a:3f:2c:9a:87:ec:c1:00:
                    c6:89:59:31:71:8c:39:fe:f3:bc:12:80:dd:8f:6a:
                    f2:ba:e6:f2:2a:16:63:ab:33:9a:46:fa:71:4b:a7:
                    0f:77:98:23:95:57:a2:e5:c6:1f:9c:b2:20:5c:34:
                    1f:d6:3c:8f:0b:31:62:b1:4c:1f:36:3b:d2:7f:b3:
                    e3:eb:49:88:e6:bf:d4:99:ae:77:5b:e0:80:0b:ad:
                    19:a7:87:f4:21:a6:0a:71:21:b0:7c:eb:8a:4f:4e:
                    99:fc:25:76:01:d4:ae:1a:d0:29:43:1c:0d:f1:7c:
                    64:6a:2d:e4:4d:4a:df:a4:55:12:e8:30:5e:e7:2e:
                    2f:5e:14:01:be:c5:97:11:79:41:57:d3:24:76:78:
                    7a:c4:71:eb:aa:9b:63:2c:d1:f3:e8:46:52:a0:8b:
                    b0:25:f7:21:40:21:03:cf:e4:97:62:35:4a:a7:d3:
                    1d:9a:d4:2b:f1:1b:8b:b6:b7:61:73:a8:ea:bf:40:
                    e7:e3:40:a2:c9:c2:7a:fd:1d:20:93:79:34:01:d7:
                    4a:14:ef:ce:5c:a7:97:9e:da:70:66:4b:6a:d4:3a:
                    e3:0b:7f:74:c5:6c:6c:16:b8:8b:0c:c0:e4:50:e5:
                    11:93:b7:fe:f7:1e:c7:12:f0:e9:96:bb:35:f3:5a:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:46:2D:3B:A2:C1:5A:AD:EA:5B:F7:CC:E9:54:CA:19:8B:91:A0:DD
            X509v3 Authority Key Identifier:
                keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:14:20:35:fb:15:22:96:58:19:98:f3:82:ec:59:22:b3:8f:
         04:d0:0b:a7:b8:82:2a:63:c8:71:7f:3d:38:73:6b:fa:98:3f:
         09:b3:e1:98:bd:97:5b:32:dc:0a:79:f3:4c:43:c1:c6:de:6b:
         3a:93:5e:80:1e:fe:9e:b8:98:c9:47:74:f2:ab:3f:1e:32:9f:
         a7:7b:58:d3:c8:57:1b:95:b2:18:98:d2:7d:84:36:96:75:58:
         08:95:df:df:10:6c:e4:1b:4a:3d:9d:b8:af:57:d0:ef:e4:42:
         88:d6:ae:06:99:f7:f1:49:7a:c7:6a:81:41:ca:70:98:4b:a9:
         05:d6:fa:14:e4:68:a2:7c:91:39:86:36:d5:2b:88:ce:e9:44:
         01:59:55:ab:5d:9f:49:c7:81:37:e8:49:2c:0d:fe:68:8d:1b:
         3b:67:6c:0b:20:08:17:93:e9:c2:02:51:c8:11:b3:88:98:54:
         82:25:a6:51:3f:d1:a9:ff:35:9d:a5:b4:9e:4f:d9:98:1e:7a:
         46:a8:3c:b6:a3:65:0e:6d:1f:d6:97:aa:bd:d2:b3:0c:77:5a:
         d1:76:71:dd:c1:cd:f2:7a:83:fb:b1:96:ec:00:18:2d:b9:00:
         96:2c:6a:6c:1c:9e:af:57:88:f2:ee:03:57:54:1c:57:75:82:
         70:46:05:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:05 2025 by rpki-client