Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
File:                     tKW-MwcSDmXjxBZcnI50jBwSp6I.mft (raw, json)
Hash identifier:          3jMXCEBDSEnSMtsMrpw1IrrtgFiK46eywT4WQSwdMVQ=
Subject key identifier:   DA:57:95:FA:A9:5F:9B:59:FE:61:D5:3F:17:11:36:C9:77:B4:1A:81
Authority key identifier: B4:A5:BE:33:07:12:0E:65:E3:C4:16:5C:9C:8E:74:8C:1C:12:A7:A2
Certificate issuer:       /CN=b4a5be3307120e65e3c4165c9c8e748c1c12a7a2
Certificate serial:       01951090078C0A9C709172F212521B3E5A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
Manifest number:          03A6
Signing time:             Sun 16 Feb 2025 21:00:29 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:29 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:29 +0000
Files and hashes:         1: pHJ5oRo1kF5oiX8KeKirS42gdJI.roa (hash: pWmX7zoUYI3ChoG1HELYfAkOPLPYyR79PMNSLK6H1B0=)
                          2: tKW-MwcSDmXjxBZcnI50jBwSp6I.crl (hash: alHvydVq4cmlZNhne2d1AOdJMT8FLhBmVR9qPD40nlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:90:07:8c:0a:9c:70:91:72:f2:12:52:1b:3e:5a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a5be3307120e65e3c4165c9c8e748c1c12a7a2
        Validity
            Not Before: Feb 16 21:00:29 2025 GMT
            Not After : Feb 17 21:00:29 2025 GMT
        Subject: CN=da5795faa95f9b59fe61d53f171136c977b41a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:94:42:bf:35:fe:25:29:49:d3:fc:6d:f6:be:
                    2b:7c:5b:b4:d0:f0:7e:ab:dd:02:76:dd:e6:86:12:
                    c8:ab:14:70:2d:ac:0c:69:5c:7a:61:e4:da:ea:17:
                    89:be:8a:27:51:f2:44:16:46:3f:be:4c:3a:65:d5:
                    1e:34:bd:12:5f:ad:a8:a6:32:12:00:9c:54:e3:e5:
                    ea:84:ab:74:58:bf:88:74:c7:70:9a:f9:96:75:a9:
                    52:52:01:88:34:e8:31:23:68:80:91:80:5a:36:89:
                    e5:b5:70:44:02:dd:10:cc:10:c4:9c:36:74:76:bc:
                    b9:90:07:a2:9c:ca:d3:cf:86:3c:51:2f:2a:a1:6f:
                    05:4f:e8:e5:ba:17:7b:b6:75:76:42:c4:1a:11:79:
                    b6:8c:df:42:91:d3:8b:ff:c8:ef:91:b2:8d:41:40:
                    86:6a:ec:15:2a:b2:f1:61:c5:98:a7:0f:31:71:31:
                    be:5b:68:d2:ad:77:b5:d1:c2:c9:a7:06:fc:e2:d7:
                    28:40:8b:48:41:33:89:05:03:47:73:e9:69:ae:01:
                    cc:59:95:7a:ba:10:88:56:e2:37:c9:6a:cd:1b:c3:
                    b1:da:db:8b:75:dc:76:0e:3c:6e:bb:43:2b:86:d2:
                    9d:5a:4d:8f:cb:e8:4f:14:26:26:d2:20:f5:81:d1:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:57:95:FA:A9:5F:9B:59:FE:61:D5:3F:17:11:36:C9:77:B4:1A:81
            X509v3 Authority Key Identifier:
                keyid:B4:A5:BE:33:07:12:0E:65:E3:C4:16:5C:9C:8E:74:8C:1C:12:A7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKW-MwcSDmXjxBZcnI50jBwSp6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fe276f-946a-446b-8453-170eb1c9fec8/1/tKW-MwcSDmXjxBZcnI50jBwSp6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:72:2a:2b:90:cb:d2:42:bc:1e:49:e9:22:06:40:a9:12:69:
         45:de:68:37:97:ca:28:44:59:b4:48:8b:00:d9:03:c2:88:5b:
         89:06:e8:e3:b1:de:e7:51:7a:55:82:36:32:19:ea:ab:14:fe:
         ff:a8:34:f1:5b:2b:09:13:0c:b2:07:2f:8b:06:e7:04:8b:5c:
         b4:5a:77:ff:79:d2:09:4e:54:b0:e0:c4:51:ba:31:ad:e4:ec:
         f8:98:8e:65:c5:58:96:aa:9b:8e:a9:14:83:a1:b4:48:61:c1:
         43:be:8f:34:87:e4:57:1c:d4:a9:bf:58:0a:75:31:8f:5d:8e:
         d4:5c:ae:85:9f:77:90:64:0b:0d:b6:61:ff:30:7d:81:1e:47:
         62:71:af:2a:9b:9d:3a:c3:91:5f:c9:aa:47:00:44:44:48:1c:
         5c:53:5e:a5:bf:d2:67:34:73:86:94:16:5e:39:2b:bb:76:70:
         e8:78:8b:9e:0f:96:17:60:3f:04:4f:fe:80:b5:16:39:31:6b:
         5d:e6:e8:10:49:cf:89:c3:03:f5:e0:63:19:ec:df:3d:d0:5e:
         bb:8e:ec:64:d1:7e:12:1d:aa:5e:fb:b6:a0:ba:24:9b:66:b2:
         59:f7:04:49:4c:26:9f:42:a9:62:2e:39:8a:a8:59:ee:d9:bb:
         5d:6c:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:11 2025 by rpki-client