Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
File:                     TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json)
Hash identifier:          UqQj/XGsZssaGwhl8uWCjShRgru0p7dI17dlpPm27T4=
Subject key identifier:   11:39:61:18:E3:C2:77:F8:4A:06:0B:F1:A3:4F:25:88:85:D3:4D:6D
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Certificate issuer:       /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial:       01974AE87A8D926B1788CCC293FF1F2B9E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
Manifest number:          0DD8
Signing time:             Sat 07 Jun 2025 15:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:39 +0000
Files and hashes:         1: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: XEdi+9s0sciUq+UhYvVQY72NhS5lgE62Ql7YcbaAY8s=)
                          2: yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa (hash: SH391E3HYBBZSzKR5WZ5E1ALuIU3dss9i9wIgwa0Lyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:7a:8d:92:6b:17:88:cc:c2:93:ff:1f:2b:9e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
        Validity
            Not Before: Jun  7 15:00:39 2025 GMT
            Not After : Jun  8 15:00:39 2025 GMT
        Subject: CN=11396118e3c277f84a060bf1a34f258885d34d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:74:17:81:61:c9:f7:88:75:ee:30:82:66:
                    52:ee:30:5f:f8:b3:0c:ac:e3:30:fc:30:0d:c4:be:
                    c4:3c:4e:b3:13:9b:df:3e:cd:8b:5c:6b:cb:91:07:
                    9e:07:22:2d:b0:c9:0b:8e:01:62:64:f4:19:cd:73:
                    df:69:50:ca:bb:53:2f:93:a2:c9:5a:0a:02:c3:53:
                    d8:d1:cc:54:97:89:64:16:a0:9b:33:d3:75:cd:65:
                    f6:70:95:bd:60:56:11:80:cf:7c:a5:de:ad:ea:c0:
                    3a:a9:40:f1:4f:6d:21:32:2f:35:d8:10:26:c3:64:
                    71:e8:56:3c:3b:9c:c9:b1:03:ab:e5:cc:41:82:7a:
                    1a:00:9d:cb:29:31:d2:f5:93:70:f3:91:c8:30:2e:
                    32:15:84:95:16:e2:89:cf:61:34:d2:2c:12:f7:f8:
                    f4:a4:0c:7b:a3:ae:07:41:d6:23:fb:98:e6:b7:8e:
                    27:ad:35:f7:ef:9f:a4:24:06:d9:74:f5:c8:be:5d:
                    35:bf:f3:2a:e1:0a:61:eb:26:df:cf:9a:3b:03:5e:
                    bb:1f:19:eb:ac:da:a5:ce:88:1f:d6:9c:de:de:23:
                    70:cf:95:34:aa:de:59:4b:7d:54:9e:62:99:0c:44:
                    ef:f1:f5:c2:ec:d7:6d:1a:0e:97:db:56:28:49:fc:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:39:61:18:E3:C2:77:F8:4A:06:0B:F1:A3:4F:25:88:85:D3:4D:6D
            X509v3 Authority Key Identifier:
                keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:16:52:51:20:cf:31:16:a7:39:2b:a1:c8:aa:de:7e:4a:9b:
         e0:56:e4:c1:e2:ab:46:2f:09:ef:00:38:bb:4f:7c:75:4c:90:
         d6:a0:dc:2c:ed:5d:fc:70:a9:84:4a:7d:62:88:26:e0:37:85:
         e0:13:fb:a4:33:d9:46:9d:d4:8d:a0:f5:2a:03:a0:1c:91:87:
         0b:4b:98:cc:27:e7:23:c7:4f:d9:6b:8c:d8:fa:e9:33:17:ca:
         86:2b:de:18:32:a8:7e:3b:3e:03:ff:3f:d6:b1:92:53:57:01:
         61:9c:04:f6:7b:2c:13:78:92:fc:3c:71:a1:f2:27:aa:86:a9:
         a5:4a:3f:e7:e6:33:ed:b7:6c:64:f3:7d:ed:2b:71:56:fe:61:
         e9:0b:8d:17:53:ac:0b:71:5d:c7:18:99:de:61:4a:06:7e:2f:
         5a:67:84:0c:d7:45:bd:87:ac:2f:ef:fa:08:1b:27:02:42:44:
         59:fa:4b:20:18:9e:df:1c:1e:d3:16:7d:6d:50:79:37:af:34:
         01:f0:59:a0:8c:9b:36:c3:75:77:52:3e:7b:36:01:a5:d0:34:
         7b:93:57:a8:e8:cd:61:03:61:eb:ab:3d:2a:f4:90:a3:f1:a6:
         d0:6e:3d:dc:18:fa:31:ec:76:71:1c:13:24:9a:4f:da:7e:c6:
         11:6f:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:29 2025 by rpki-client