Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File:                     TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier:          cT+HqDVPvGovHgYDGwms97dv10XsK84nE0AwNE5qaME=
Subject key identifier:   9F:5C:AE:4D:07:C0:2A:C4:20:46:B1:EB:3E:C6:2D:BE:54:F9:F8:58
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer:       /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial:       01975D25D2640491C4E13CB64DB6491C2895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number:          03AD
Signing time:             Wed 11 Jun 2025 04:00:49 +0000
Manifest this update:     Wed 11 Jun 2025 04:00:49 +0000
Manifest next update:     Thu 12 Jun 2025 04:00:49 +0000
Files and hashes:         1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=)
                          2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: vaVLAt3WsdPORO00sY9uaStPWkcMrvmsLJvU+UZdYoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:25:d2:64:04:91:c4:e1:3c:b6:4d:b6:49:1c:28:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
        Validity
            Not Before: Jun 11 04:00:49 2025 GMT
            Not After : Jun 12 04:00:49 2025 GMT
        Subject: CN=9f5cae4d07c02ac42046b1eb3ec62dbe54f9f858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:68:c1:42:75:6f:57:0c:75:a2:17:fe:e4:
                    37:ec:e0:61:ee:d7:7b:63:67:42:b6:4f:15:40:17:
                    53:af:69:10:df:8b:b7:57:9b:14:62:60:63:70:f3:
                    2c:8c:3e:db:17:85:4d:1d:28:1a:ef:0b:00:95:26:
                    88:ea:f2:57:75:a3:f1:a5:1a:89:68:86:7f:75:2b:
                    c5:b2:4d:15:f7:aa:92:ee:a7:c4:b8:65:75:f9:89:
                    7f:1d:55:1c:d0:d9:91:c5:ab:e6:f1:ca:f5:42:43:
                    a4:10:54:04:9c:d3:b4:6a:14:ed:7d:f4:23:c4:84:
                    00:da:a2:ec:de:83:ee:97:c3:7a:72:5d:75:34:15:
                    4d:58:c7:01:7e:c8:da:81:aa:7a:ae:36:a9:92:32:
                    2c:7a:5a:08:64:d5:c3:55:5f:da:bf:a8:d9:6b:49:
                    b3:2e:30:73:f2:23:06:b3:35:5d:79:b6:bb:3b:ff:
                    a1:7d:82:45:68:23:cb:79:a2:44:e8:20:ba:f7:d4:
                    24:8e:07:96:8f:03:11:08:c0:ae:4c:bc:a1:de:4a:
                    b3:a9:84:48:2f:65:73:be:b8:a1:ea:0b:51:d7:85:
                    99:4b:d4:09:f6:61:90:8e:5b:f4:4d:52:29:51:38:
                    ec:77:3d:93:c7:2e:2d:ae:a3:d6:ca:d5:2f:74:4e:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5C:AE:4D:07:C0:2A:C4:20:46:B1:EB:3E:C6:2D:BE:54:F9:F8:58
            X509v3 Authority Key Identifier:
                keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4e:cb:b4:2a:f3:52:9c:a4:5f:fe:37:4c:0c:72:b7:36:f1:
         f4:82:33:5c:38:82:53:53:ac:22:c1:67:42:48:8c:90:3c:6d:
         65:03:31:ab:8e:ef:21:c3:ab:51:8a:25:fc:ed:cb:43:26:bb:
         fd:33:38:e6:a0:ff:ac:47:19:0d:27:60:f5:d2:10:f5:39:d2:
         d5:2a:43:48:59:cd:5a:1c:6e:8c:4c:99:c6:c6:73:82:29:aa:
         46:67:be:5b:c4:d8:bb:5b:1c:ad:42:e1:74:fe:0a:66:cb:97:
         cc:43:84:a4:c3:46:3e:47:fb:ed:b2:be:2d:2b:26:1a:19:9b:
         a3:be:ac:a0:ee:65:e1:67:ee:7f:12:71:ac:4a:3c:88:74:dc:
         04:24:a7:95:ca:7b:0d:b7:92:28:d9:e4:11:64:c2:61:c4:1d:
         f5:09:af:10:3d:c6:88:cb:27:32:e2:1d:51:e4:6d:e6:61:0c:
         92:ca:62:cc:00:03:36:49:4c:d6:3a:f8:a9:52:51:fb:aa:5e:
         7a:8b:53:5b:cc:6c:8a:5f:f3:cc:ce:c5:4c:49:27:fa:2a:f4:
         79:67:c7:6a:c7:81:f7:0c:a4:8e:4e:68:f2:3f:fd:83:a2:33:
         99:7e:a1:aa:2c:fc:31:85:dc:74:04:2a:3e:d5:84:a0:9e:23:
         d3:7c:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:03:46 2025 by rpki-client