Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
File:                     T_TbtnXuCOi72XQHoafv2RkZ5zg.mft (raw, json)
Hash identifier:          ChSMLowJt31FcAXCkGVj2dw3wTQ1bOIHZs8E66t5fDg=
Subject key identifier:   C5:50:84:A3:AB:D5:68:B5:37:6D:CF:63:39:3D:74:5C:91:07:80:D8
Authority key identifier: 4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38
Certificate issuer:       /CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
Certificate serial:       01975234FE70D0813A7550742CAD05CF0CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
Manifest number:          0E97
Signing time:             Mon 09 Jun 2025 01:01:33 +0000
Manifest this update:     Mon 09 Jun 2025 01:01:33 +0000
Manifest next update:     Tue 10 Jun 2025 01:01:33 +0000
Files and hashes:         1: T_TbtnXuCOi72XQHoafv2RkZ5zg.crl (hash: m1cpX55qP5nOAg99E8431j18QygkvmwAowP5GRGHVLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:34:fe:70:d0:81:3a:75:50:74:2c:ad:05:cf:0c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
        Validity
            Not Before: Jun  9 01:01:33 2025 GMT
            Not After : Jun 10 01:01:33 2025 GMT
        Subject: CN=c55084a3abd568b5376dcf63393d745c910780d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:2d:bf:12:01:34:fe:e2:5c:51:8a:20:08:
                    4e:d4:29:ea:45:f9:2e:b0:3d:15:a0:49:7f:95:8d:
                    13:e9:34:73:42:da:95:81:66:f8:31:e1:71:25:a3:
                    fe:cd:70:80:7c:5b:e4:1b:7f:21:bf:7f:bf:2a:4b:
                    e6:ab:5f:b5:f4:f8:15:d0:46:de:79:69:b5:25:0f:
                    8f:eb:5b:82:02:3f:e4:75:d9:75:f8:21:24:2d:bd:
                    b6:de:f5:b6:e0:ce:73:56:8a:d3:9e:f6:62:62:ae:
                    27:7c:83:c4:cb:1a:9d:93:8a:74:68:5f:b6:ff:c8:
                    59:14:0c:55:60:a7:db:68:3a:2e:34:0d:0c:18:bb:
                    05:df:14:a2:5b:f1:f3:2d:f6:cb:38:2d:a4:70:61:
                    77:92:7c:13:9f:e0:d9:f2:5a:df:2a:a0:4c:3c:18:
                    4d:13:a4:0b:f9:84:9e:db:16:f1:85:a6:f2:21:a2:
                    38:d8:ca:dd:61:91:3a:49:28:20:4d:16:b8:50:73:
                    94:9a:6b:67:42:8d:f2:20:e3:63:9f:51:30:96:84:
                    91:62:8c:83:3e:9b:78:92:b4:d1:a6:60:2a:98:ac:
                    f6:1e:bf:1d:08:3d:65:9f:b3:64:63:17:98:ef:7b:
                    78:22:b2:b1:46:3c:d2:68:cf:f0:2d:6b:de:94:5e:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:50:84:A3:AB:D5:68:B5:37:6D:CF:63:39:3D:74:5C:91:07:80:D8
            X509v3 Authority Key Identifier:
                keyid:4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:71:8e:dd:9c:a7:c1:8f:74:8a:62:de:2f:81:63:1e:d4:
         ed:f2:75:2f:ef:73:b7:30:d6:39:00:eb:4a:b7:c6:8c:c4:69:
         36:61:41:23:c0:de:0c:de:cf:2b:da:bc:cd:bb:8c:b6:2d:c6:
         a0:32:df:7d:a3:0b:5d:40:a5:4f:3d:d1:0a:87:b8:03:70:63:
         f0:37:e1:d9:09:41:9b:43:b9:79:77:bf:fd:31:65:e1:09:53:
         2e:ff:77:99:69:96:52:2a:e8:b4:a6:30:4a:75:82:a6:88:7a:
         d5:fd:00:8a:97:82:bc:8b:6b:bc:7b:27:3c:9a:14:4f:e7:a5:
         6a:08:03:d9:69:2c:73:e6:a8:dc:e3:7c:cf:aa:37:39:df:80:
         82:1d:2a:c0:4a:d0:86:06:0f:e0:57:a0:1d:de:4c:8e:0f:42:
         63:e9:a1:e8:6c:88:e6:0f:f0:b8:32:35:0b:2a:fb:19:e9:90:
         91:76:45:7e:c2:2d:b5:8e:e1:48:0b:fd:ed:ba:03:8a:e4:f4:
         9d:eb:35:96:82:ca:e1:25:f2:6d:f7:35:a2:93:e9:19:5f:97:
         8c:3b:3c:36:03:b2:89:65:1c:3e:08:63:15:26:8a:2b:b9:53:
         e5:37:43:8b:ae:a9:c0:c3:7d:6e:2e:98:15:9a:30:cd:27:49:
         23:cd:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:48:09 2025 by rpki-client