Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File:                     tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier:          stW3T45Hz0djL8ai8Lwovx5JhvH+1rbbH8XP7GsQVHs=
Subject key identifier:   96:27:87:A2:0D:32:CA:53:A4:15:7F:EB:05:79:2A:D3:29:ED:80:AC
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer:       /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial:       0194BAF22E0F0BB75504F14938441A5035B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 06:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:21 +0000
Files and hashes:         1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=)
                          2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: rmUN80ijUr9+Ta+xs1zwKAhbOE2Iufm6cii2B/iad3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:2e:0f:0b:b7:55:04:f1:49:38:44:1a:50:35:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
        Validity
            Not Before: Jan 31 06:00:21 2025 GMT
            Not After : Feb  1 06:00:21 2025 GMT
        Subject: CN=962787a20d32ca53a4157feb05792ad329ed80ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:9d:be:8e:c2:b3:5a:db:92:ca:45:cb:1e:
                    32:2c:2b:e4:05:2e:16:f3:29:61:83:87:a3:49:8e:
                    94:18:f8:5d:cd:f6:bb:a5:6e:78:ed:1c:ac:36:59:
                    2a:74:d1:71:a5:77:a4:03:bd:52:a2:54:c9:94:bd:
                    4f:ed:74:01:10:25:29:d1:8b:eb:3c:58:16:5b:b0:
                    e9:84:d7:ff:f4:84:b8:f9:65:ef:a9:9f:49:91:11:
                    64:94:a5:84:16:95:67:92:2e:f6:e8:9e:54:13:91:
                    05:c3:5b:42:6c:cb:4d:0b:7c:cc:df:7e:26:d0:c8:
                    45:e8:ce:b2:a5:cd:7a:d7:69:cb:05:25:82:04:2c:
                    f1:2c:b6:f7:46:37:4f:8b:4e:54:4e:66:24:e6:c6:
                    dd:21:bc:b9:7c:43:a3:bb:f3:60:f5:2f:6a:8e:e3:
                    57:64:1e:d4:9d:e4:f7:50:a4:c9:c9:7f:4d:17:74:
                    e4:9e:7d:fe:b9:2b:8b:34:0d:23:38:c8:39:0f:e7:
                    92:08:25:64:0d:ba:58:54:34:c1:a0:88:49:99:1f:
                    dc:91:a4:c5:05:a3:23:df:9c:e5:91:50:d9:43:4b:
                    df:d8:17:34:b0:68:e5:3d:75:49:1b:a8:3e:5a:0d:
                    43:83:24:2b:a9:31:ab:9c:f2:c7:30:5a:6e:8d:00:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:87:A2:0D:32:CA:53:A4:15:7F:EB:05:79:2A:D3:29:ED:80:AC
            X509v3 Authority Key Identifier:
                keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:74:75:0f:0f:4c:13:a7:6c:fc:45:54:52:74:00:47:43:d5:
         45:0b:f0:f3:3f:7e:f0:b5:38:a4:6c:72:a0:aa:5f:14:6c:38:
         e8:cf:b0:c3:d2:59:1f:71:7e:ae:1c:87:01:31:2a:08:a7:5f:
         55:ad:2b:5d:56:44:fe:19:0f:11:98:0b:3b:8b:65:53:99:43:
         a0:b4:bc:d5:ac:d2:b9:52:e0:87:db:03:42:ff:12:f6:ff:e9:
         1d:a3:05:4e:ee:de:b1:45:58:6f:cc:9f:20:a5:ce:c5:81:15:
         c1:35:b0:51:01:88:1f:d1:80:6c:e0:5f:49:e3:f5:9e:df:6c:
         b6:41:b5:7a:65:8c:07:29:06:a3:3c:44:53:a0:fe:b4:ff:48:
         8d:47:b2:de:fc:37:67:c3:8c:db:26:fa:9b:a4:7e:30:9a:83:
         8c:21:76:b7:2c:6e:03:44:9c:0e:2b:37:e7:06:c4:de:98:90:
         2f:4d:17:1c:4b:71:30:94:0e:b6:a2:8b:33:8e:33:90:aa:b7:
         f2:6b:c1:1a:ad:86:5f:ae:15:27:30:65:57:1f:c4:f0:55:7a:
         00:93:7c:5e:69:0c:20:80:d1:ea:c9:e9:ff:f7:80:10:e6:76:
         86:01:2b:bb:c0:f3:24:77:96:3d:6f:9c:0f:83:e7:87:f3:a2:
         ec:69:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:16 2025 by rpki-client on console-fra.rpki-client.org