Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File:                     TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier:          lMWBMjrSP3xYh8gHJxzMkalJlETIYO09DQq6f72EHuo=
Subject key identifier:   84:7E:4A:FA:0D:A9:D6:E9:16:7A:AF:C2:42:23:CC:8D:04:A1:A9:41
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer:       /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial:       01965500F17BBBC0234247260B42591DEB7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number:          1454
Signing time:             Sun 20 Apr 2025 21:00:47 +0000
Manifest this update:     Sun 20 Apr 2025 21:00:47 +0000
Manifest next update:     Mon 21 Apr 2025 21:00:47 +0000
Files and hashes:         1: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: pqydIZcwcIqOVWTfDklJgIoWlQ/QG8k6ZVu/H0bGIUc=)
                          2: bOLohqMKHagd_oJ4fhpVo7NmmeM.roa (hash: zc2jSYa3eGI9kHGQfF97SUcixmU4Ya6CBO+chtxYjPg=)
                          3: rAEXG8LVncu-VzH6pWQ3O-v7vJk.roa (hash: pHtLRGskuQm7vCqkOegxgViLMoHSueDTg44n3jic3FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:00:f1:7b:bb:c0:23:42:47:26:0b:42:59:1d:eb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
        Validity
            Not Before: Apr 20 21:00:47 2025 GMT
            Not After : Apr 21 21:00:47 2025 GMT
        Subject: CN=847e4afa0da9d6e9167aafc24223cc8d04a1a941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:45:d9:58:6f:35:3a:11:6c:08:80:b6:50:a0:
                    9d:fe:c0:bd:4c:26:39:95:88:b5:bd:87:83:ef:26:
                    59:6d:0d:cb:b8:49:e3:65:f6:9f:a2:70:c5:eb:6e:
                    d7:a7:2c:40:6c:41:24:22:9b:4a:81:af:07:35:b8:
                    13:20:cc:e7:e4:f4:da:f8:87:7e:ed:2e:7b:6c:3c:
                    25:2e:f8:d0:81:38:a3:40:b8:8f:6c:74:02:ed:c7:
                    2a:fc:b2:8a:34:fa:40:bc:7c:fe:96:7d:14:c1:82:
                    5e:d0:1f:df:a0:1c:2b:67:7b:b3:01:ba:46:32:87:
                    28:c1:bc:7d:9f:51:b1:6c:83:b1:fc:1d:e9:58:ad:
                    25:ad:27:51:c8:d7:6a:61:8b:b6:2d:22:1e:c7:9a:
                    fc:12:49:6c:b7:3b:61:40:26:d6:59:be:13:ba:0e:
                    bd:45:ae:f1:4d:3c:8b:c9:e5:42:b3:1c:05:a3:03:
                    bd:32:c2:6b:a2:63:7c:54:8f:5f:03:73:60:1c:ee:
                    cb:03:79:63:58:9b:89:f3:a3:cf:9a:f6:9e:45:79:
                    aa:23:5e:57:7c:0d:20:a2:9a:41:cf:03:21:24:31:
                    2e:20:94:71:16:ca:c2:32:e9:00:6c:59:f2:8e:80:
                    0e:81:59:86:ba:94:f0:28:b1:0c:d2:78:a8:18:ef:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:4A:FA:0D:A9:D6:E9:16:7A:AF:C2:42:23:CC:8D:04:A1:A9:41
            X509v3 Authority Key Identifier:
                keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:8e:17:64:34:c3:ba:31:ec:fa:fa:3a:5a:96:9c:c3:9b:75:
         9b:9e:74:7f:70:e4:83:fb:e3:23:24:ec:4a:84:48:a8:96:34:
         85:6e:3c:f7:b8:ee:ea:56:96:46:6b:d0:91:c6:8b:d9:ae:7e:
         15:94:f4:35:ff:6e:8e:2a:51:d7:d7:5b:7c:ac:74:a0:97:28:
         9e:70:c3:c2:1d:3f:dd:f7:34:69:77:3f:06:a8:f1:74:0b:f1:
         f1:b5:ff:83:34:62:0c:94:2a:fe:f5:35:42:3a:63:c7:d2:fc:
         cd:a6:71:30:89:5e:0b:c5:f7:2f:d1:5c:5c:67:3e:d8:8a:6b:
         14:18:5a:2f:3d:f3:e8:c5:21:a1:56:f8:9f:7f:8a:89:a3:7c:
         8b:f9:44:87:5c:72:2e:92:7f:0b:5c:b5:2c:08:7a:2f:34:51:
         4a:89:1e:25:bc:0b:0a:3c:35:7f:66:79:cb:b5:e2:39:14:79:
         3d:4d:f9:e2:2d:ae:b2:85:3e:28:3a:ca:ae:13:ef:0c:20:40:
         42:95:b3:d8:d7:dd:f4:b2:e0:5b:9c:ef:34:67:e2:14:db:d0:
         d6:47:93:e3:2d:92:2f:3c:c6:e4:f3:20:6a:59:cc:30:fc:d3:
         6e:71:54:3d:9f:d4:0a:a3:e5:47:75:43:a2:20:ea:3f:eb:5f:
         48:9d:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:16 2025 by rpki-client