Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File:                     TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier:          FIMRfAYKKnXmkc6D0nfohLXthLZ+YJoeosOo+Z69a7Y=
Subject key identifier:   AA:C9:F2:B5:01:DB:EA:8A:15:FE:FF:15:7A:B7:B4:DB:5F:A5:42:C4
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer:       /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial:       019758DB3194A623BD7630460BD370C6B9BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number:          0F02
Signing time:             Tue 10 Jun 2025 08:00:49 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:49 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:49 +0000
Files and hashes:         1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: aLxknhck9RdFu3Jj6PU745+3mLHgHQ7YUqdHtZhE0Y4=)
                          2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:db:31:94:a6:23:bd:76:30:46:0b:d3:70:c6:b9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
        Validity
            Not Before: Jun 10 08:00:49 2025 GMT
            Not After : Jun 11 08:00:49 2025 GMT
        Subject: CN=aac9f2b501dbea8a15feff157ab7b4db5fa542c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:12:64:cb:51:d4:5c:98:9a:4c:e1:04:2d:
                    0b:50:74:de:5c:6e:cb:91:af:7a:52:0c:13:2a:01:
                    f1:68:4b:85:b4:cb:f0:f0:2f:e6:ee:ef:cd:c5:35:
                    7d:70:85:08:42:f2:fe:00:92:2f:57:9f:1f:ef:52:
                    aa:15:7b:3b:cd:e9:1b:b2:d9:b2:f8:be:98:c1:32:
                    38:ec:73:4a:2b:f3:19:55:cf:30:01:aa:e1:cc:27:
                    cd:7e:ec:c7:25:d5:80:26:0b:84:a5:54:b7:21:60:
                    2e:cd:9c:2f:94:03:6b:1d:1c:3d:51:1d:93:bd:1f:
                    3a:e2:62:74:54:0d:24:00:16:c3:71:39:29:5d:30:
                    99:5b:54:05:28:6b:1a:16:d6:ee:96:e2:27:75:3a:
                    99:68:59:3f:18:81:a9:66:4f:0c:3d:d0:b4:6a:6a:
                    f3:50:f2:ec:c0:82:cd:40:9f:c2:09:12:87:49:64:
                    02:d4:7c:55:81:ff:b2:d2:e4:2e:06:ad:3c:d4:15:
                    0a:78:c3:89:30:84:cc:7a:80:04:fe:e8:7e:c7:83:
                    66:1c:80:f5:b7:ea:33:d0:d1:72:3b:4c:97:5c:96:
                    75:ee:b7:1d:7e:b9:bb:e1:e4:56:20:8f:a6:7c:74:
                    be:c2:59:36:b1:d5:ae:ae:cd:67:19:2a:ac:0d:95:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C9:F2:B5:01:DB:EA:8A:15:FE:FF:15:7A:B7:B4:DB:5F:A5:42:C4
            X509v3 Authority Key Identifier:
                keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:37:53:80:c1:f8:93:69:ed:72:0a:d1:af:ea:de:cd:de:
         76:08:60:a4:f1:16:ca:e4:70:14:b6:e5:03:56:85:ce:a2:fd:
         6e:4b:da:36:46:e9:fd:c6:62:0f:a3:d7:f4:85:b9:f5:30:8b:
         b6:60:58:ac:43:1e:d8:6a:84:f1:f9:6f:0b:d1:8e:14:ac:02:
         6b:83:44:4e:0a:7d:dc:7f:29:3a:32:ab:cd:28:37:c1:57:cc:
         5b:44:0d:73:31:82:98:54:fc:d3:9a:13:ba:73:6a:4a:d0:a5:
         0a:32:09:5e:a5:e6:b0:ee:69:3e:33:51:2d:59:f1:f8:1a:73:
         f1:4f:c3:53:25:8f:2f:ee:a3:8a:fa:9a:14:d2:5a:5d:7f:c1:
         26:0d:20:03:f5:3d:c4:8f:79:b4:a9:ca:2c:d4:db:e1:c2:0b:
         97:3c:6b:3e:6b:7f:28:37:ad:b7:f2:c7:4f:52:3f:13:41:4f:
         9a:6e:9f:2a:54:13:03:94:df:d4:74:1b:09:14:ef:4f:08:de:
         e0:12:4d:90:98:8b:a5:67:19:51:5e:71:f8:dd:35:3e:71:a8:
         ff:21:fd:59:b3:19:9c:1a:56:21:88:f8:95:b2:e1:f8:c8:9a:
         f6:31:06:45:a9:03:b0:1f:5d:e7:48:97:e8:8c:87:3d:f9:5b:
         1e:2b:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:22:45 2025 by rpki-client