Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
File:                     TBikTVSkel6pfe39Xtg3nX7qAtA.mft (raw, json)
Hash identifier:          czaBqjxQUaZM8rLi1vP3YlGM/TiF980KDsKLnQE4g0o=
Subject key identifier:   72:D8:8A:94:1F:79:29:F3:96:D4:C2:81:F1:E2:09:C5:68:13:FB:EA
Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
Certificate issuer:       /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Certificate serial:       019613FCF1C095C0EAE37FC875961AEDB2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
Manifest number:          0E18
Signing time:             Tue 08 Apr 2025 06:01:05 +0000
Manifest this update:     Tue 08 Apr 2025 06:01:05 +0000
Manifest next update:     Wed 09 Apr 2025 06:01:05 +0000
Files and hashes:         1: A9doBQYRzqnAsYM8_xOXyY9_aSQ.roa (hash: LqION540Zg0mnXlhYgbOPsJtgA4nsXptBIy0jMQ2+yc=)
                          2: TBikTVSkel6pfe39Xtg3nX7qAtA.crl (hash: R1mTF+D+xxTK4kTqCCNeQHlm24FDnjCtnbPSUQAk4eo=)
                          3: h0ikqrJ3SuzqEepqLjnvsNWJNVQ.roa (hash: RvDiiQJF7vKX50IA4ffr+9+bGA5/Q5Ynq2tViwpnB40=)
                          4: n1aoovYMZxSs0WefrRJiB3jdudI.roa (hash: q2PjweCwbyJvPPBstb2/ErFFOd9PN++7msnJLhK1PxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:13:fc:f1:c0:95:c0:ea:e3:7f:c8:75:96:1a:ed:b2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
        Validity
            Not Before: Apr  8 06:01:05 2025 GMT
            Not After : Apr  9 06:01:05 2025 GMT
        Subject: CN=72d88a941f7929f396d4c281f1e209c56813fbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:66:4b:92:89:8f:d8:76:85:8d:5d:4c:64:
                    ea:61:fc:b1:6c:35:0e:c7:b7:a3:c1:b9:6c:31:7b:
                    49:aa:50:57:f0:78:07:f7:df:00:1f:fe:32:30:2d:
                    74:01:c3:f2:06:3d:1a:6e:16:7d:40:95:db:0f:c0:
                    b2:ed:81:01:dc:d5:d9:0c:12:19:99:76:2c:d9:87:
                    c8:d1:a9:8e:fe:00:f2:1d:ae:09:e0:9a:5b:6e:72:
                    78:44:be:42:ef:fc:9a:d3:cc:e9:d0:41:9b:2f:f9:
                    80:7c:06:42:43:f2:9b:1d:f6:0e:ba:12:21:49:82:
                    0f:03:e2:16:20:67:59:d5:d2:58:6d:98:85:c6:17:
                    0e:f5:ae:54:79:49:6a:2a:5c:cb:8f:66:56:4b:95:
                    f7:c0:dd:49:04:cf:1c:14:24:2a:94:d7:08:43:95:
                    a4:37:97:40:16:bf:86:dc:3d:ae:e0:db:fd:43:1f:
                    92:b7:32:19:9e:d5:e5:b3:81:15:cb:9f:b9:29:6f:
                    01:b0:d7:9b:41:d3:1a:e3:42:3e:92:d3:2b:1b:ef:
                    28:96:d9:a3:da:40:5b:ed:d6:ed:06:06:cd:10:5c:
                    23:9f:1d:83:84:99:a6:7a:dc:61:03:16:4e:0d:49:
                    3a:7c:57:ff:cb:37:67:f6:e6:62:cf:79:8c:de:65:
                    80:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D8:8A:94:1F:79:29:F3:96:D4:C2:81:F1:E2:09:C5:68:13:FB:EA
            X509v3 Authority Key Identifier:
                keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:ba:f8:c1:31:10:a6:90:0f:80:8d:b7:97:9e:84:80:22:
         ad:9a:e0:a0:82:18:b4:9c:e0:36:f3:73:1c:17:db:f5:8d:f9:
         c2:9e:f1:16:8d:60:73:07:a0:9a:6b:fc:55:77:d4:dc:29:08:
         47:a7:a4:76:dd:be:34:3e:e6:cb:9e:0d:9c:d0:a8:2e:26:e9:
         67:18:b9:f0:ea:37:0b:fd:44:a4:ca:de:5d:ff:18:cc:83:0f:
         97:55:73:95:5b:63:27:df:17:3f:89:99:28:16:e1:d0:37:f9:
         03:26:e9:f2:d8:6f:79:66:f7:a5:33:1f:36:27:8d:33:d0:bd:
         f5:c6:00:c7:71:45:50:76:e9:99:88:61:06:59:dd:53:d9:75:
         94:5c:6c:91:c8:97:6c:35:4b:07:b7:f0:d9:18:57:15:99:70:
         03:57:84:66:bc:50:7b:cb:c8:c9:85:b7:a9:be:9f:7b:6e:61:
         66:d4:f3:00:4a:29:be:85:be:88:4d:d1:e9:c8:64:b5:e9:45:
         66:81:b5:71:e1:90:3f:ed:04:00:40:3c:7c:0a:59:da:9c:61:
         fb:4b:db:bc:12:b8:52:4e:03:cf:8d:4e:cb:b6:69:45:c7:92:
         5b:cc:35:e5:bb:2f:a0:2d:86:ab:d5:13:e6:b3:a9:89:80:10:
         4f:99:a0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:02:16 2025 by rpki-client