Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File:                     TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier:          oIsN7C18hharAxWpVuWb4pSz6mQn+K4bITHEP/RjpH0=
Subject key identifier:   BD:46:04:86:89:B2:12:A1:47:C7:71:52:92:A3:A1:23:2F:6B:BE:8C
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer:       /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial:       019764DF875035F320A7854747FC4349A78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number:          03B1
Signing time:             Thu 12 Jun 2025 16:01:00 +0000
Manifest this update:     Thu 12 Jun 2025 16:01:00 +0000
Manifest next update:     Fri 13 Jun 2025 16:01:00 +0000
Files and hashes:         1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=)
                          2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: cS8PdGArLT+RHa/2Eedn3ZJdunwr1KXEqstwGQSIXHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:df:87:50:35:f3:20:a7:85:47:47:fc:43:49:a7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
        Validity
            Not Before: Jun 12 16:01:00 2025 GMT
            Not After : Jun 13 16:01:00 2025 GMT
        Subject: CN=bd46048689b212a147c7715292a3a1232f6bbe8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:c8:c1:f3:d3:da:77:b0:e6:b6:f1:aa:eb:
                    85:ca:f2:93:ad:b6:9b:61:7f:65:bb:1f:5a:98:d8:
                    31:f9:c6:42:0d:7f:8d:88:b9:47:9c:3f:4f:8c:78:
                    35:c1:d3:eb:f7:dd:a2:af:ee:8c:2a:cb:5a:30:af:
                    1b:b0:f6:c2:8e:3f:1f:38:43:71:fb:12:3f:1b:69:
                    20:ba:70:73:29:8d:31:51:56:b9:f0:19:79:e9:44:
                    8b:7b:06:b1:be:61:40:6c:51:a8:7b:c0:2d:d5:5a:
                    a3:56:b3:28:12:3d:db:72:a8:9b:6b:ab:e9:d7:bc:
                    31:0e:04:17:cd:4a:d3:4f:62:f0:03:10:37:7a:84:
                    a3:87:54:62:08:c3:9e:2a:34:ff:91:9e:f0:a5:26:
                    9a:b8:ae:0b:cb:a5:bf:3a:ef:d1:85:03:89:57:40:
                    dd:78:5b:db:af:3d:f8:5b:52:84:ca:5b:06:94:2f:
                    71:8e:a3:84:81:03:29:b9:4b:84:c2:da:4c:19:c1:
                    3c:3e:bd:a6:a6:07:9d:d8:3e:79:bf:99:6b:19:1f:
                    7c:9a:97:dd:6c:1e:71:9d:61:0a:c4:ff:72:e7:e1:
                    37:e6:28:8a:53:b5:23:bc:ba:fa:37:70:e0:b5:ba:
                    32:fe:14:b6:21:a9:c2:61:24:7b:b5:d7:6e:7a:94:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:46:04:86:89:B2:12:A1:47:C7:71:52:92:A3:A1:23:2F:6B:BE:8C
            X509v3 Authority Key Identifier:
                keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cd:68:4e:af:34:9b:76:e0:3a:50:93:6a:32:50:d1:c2:d5:
         24:f0:53:eb:8b:8c:5d:4b:73:ec:72:a9:43:c5:63:c9:6d:f7:
         50:50:20:b4:e0:4e:b7:15:1c:42:b7:6f:0a:bf:90:8f:ed:38:
         df:da:27:5d:7f:0d:5b:85:7e:ca:9c:24:d8:c8:69:02:c5:a7:
         6a:14:c0:d3:cd:6a:4a:e0:07:1c:b4:d5:c0:01:7e:ab:48:da:
         4a:39:94:8d:2b:47:f1:4e:83:cf:dc:93:48:f9:3d:ef:c8:50:
         09:af:d6:e5:d9:40:aa:42:e3:5e:f9:34:96:f8:2d:f5:a2:7a:
         a8:bd:e7:fa:ba:fd:bf:38:c5:a6:aa:74:5e:5c:2b:bc:fd:00:
         33:bb:24:1d:61:56:7e:4b:a4:4b:65:06:fb:b6:16:fb:af:f7:
         db:16:9d:24:f6:66:6e:02:f4:f3:d3:83:6a:e0:b1:fc:5f:d9:
         00:f8:3f:4b:41:9f:1d:ea:b5:fc:35:80:a4:ff:74:35:7c:1f:
         88:dd:1d:35:46:24:07:79:97:ea:63:70:f9:a5:df:31:1e:9d:
         a4:25:6e:9b:21:99:92:d1:7d:5c:a2:49:9b:00:94:4b:cf:30:
         64:ee:5a:9c:62:a6:a8:c7:5e:fd:5f:e3:9f:f9:e1:e0:83:1b:
         ff:86:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:30:18 2025 by rpki-client