Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
File:                     tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json)
Hash identifier:          HvDD5dnKJiRlNsiZsD6L5FaJ6DQMtpImlB+ZQpTNROo=
Subject key identifier:   05:E8:00:BB:F9:D6:23:F2:7C:86:8D:98:8B:B6:C0:72:38:0D:31:2D
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Certificate issuer:       /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial:       019747B10C7139608A27495261873B2FA15F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
Manifest number:          1337
Signing time:             Sat 07 Jun 2025 00:01:14 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:14 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:14 +0000
Files and hashes:         1: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: P96XNJGFUVQUR3fk1+DaC2KzNTtkC/S9VktRAh+I3vk=)
                          2: vBSjooCv1VbYtFGvr_WsQil5zco.roa (hash: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b1:0c:71:39:60:8a:27:49:52:61:87:3b:2f:a1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
        Validity
            Not Before: Jun  7 00:01:14 2025 GMT
            Not After : Jun  8 00:01:14 2025 GMT
        Subject: CN=05e800bbf9d623f27c868d988bb6c072380d312d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:89:8c:9d:4a:ae:9f:4b:58:60:6b:32:ad:
                    b2:bb:e2:71:9b:ab:7b:35:3f:0c:49:04:29:8c:a7:
                    15:8e:9e:0e:69:59:e0:ae:85:62:3d:ec:1a:d8:e1:
                    38:c3:2e:3b:38:a5:f6:0f:e2:1d:da:91:12:a2:d4:
                    a1:c8:c6:3a:8f:ea:e1:7b:36:50:35:01:68:91:81:
                    e5:b6:0c:a8:47:da:63:a9:2c:9c:0f:45:7d:c7:a9:
                    22:0a:7e:7b:b5:8d:69:56:24:75:05:f4:19:00:46:
                    5b:d0:de:55:59:67:98:20:1f:86:c2:21:6b:7c:c8:
                    72:ff:84:e5:2e:56:be:0f:85:22:fe:82:b5:b5:bf:
                    df:eb:b3:83:a8:fe:e1:02:7f:80:fe:b1:66:09:87:
                    f9:e7:fb:48:39:a0:ee:69:93:d1:41:18:8c:7a:f2:
                    51:ba:83:1a:a5:a8:23:4b:89:c6:f5:38:32:fd:79:
                    cd:cb:a7:17:20:17:df:5d:d6:b7:c7:50:6e:ed:c4:
                    97:14:b8:95:6c:da:45:83:33:56:42:89:bc:c7:c7:
                    78:29:39:19:f1:c7:bb:72:17:00:18:c5:c1:77:3e:
                    d8:e0:84:58:ee:55:62:7c:6e:aa:45:98:4e:03:bb:
                    13:81:1b:13:c4:76:4e:f5:e4:1e:48:2f:ac:bd:72:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E8:00:BB:F9:D6:23:F2:7C:86:8D:98:8B:B6:C0:72:38:0D:31:2D
            X509v3 Authority Key Identifier:
                keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:ae:97:fa:47:42:3c:b8:b2:c7:98:1b:90:b4:02:17:ba:
         03:5b:ad:c4:99:6e:4d:5e:5e:a9:45:af:54:dc:9f:84:47:46:
         84:b3:a0:07:94:43:03:59:3d:87:a7:96:cf:5b:97:02:70:c1:
         f5:f8:e8:61:20:bd:aa:93:42:4b:bf:97:f1:d2:63:2e:a5:1a:
         87:4e:59:ed:ad:16:f5:97:5d:3a:88:ab:ea:00:ee:e2:94:91:
         68:e5:eb:cb:81:d8:bf:1d:2b:50:b9:58:0f:dc:f9:0e:1f:48:
         47:09:af:5c:a8:6c:6a:18:49:24:fe:fd:60:5e:e2:9e:be:b5:
         79:2f:55:d0:32:93:ef:13:48:a2:34:d5:b3:58:0f:bd:6f:21:
         4d:8e:fb:8e:de:2b:e6:a3:50:bf:6a:07:c1:a0:e3:41:4b:31:
         e6:81:05:05:af:1a:30:d2:4e:e5:d0:83:f0:aa:75:14:32:fd:
         cb:10:d4:43:5d:f7:a1:7a:ba:f6:20:14:b4:8e:d9:52:07:99:
         a6:97:05:3f:6e:28:c0:bc:0b:4e:3a:a9:4f:e5:37:06:32:31:
         f3:45:65:41:ea:69:95:1b:4d:45:10:1d:43:5f:b3:4d:cb:ed:
         6e:2c:03:8d:3d:3c:62:c3:c9:1f:95:c0:e1:39:0b:25:07:6b:
         81:2e:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:38 2025 by rpki-client