Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File:                     TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier:          0UwJdZ8wFTA3JquUJj2s/xoBGIRedKMhDXzSaMHz/tM=
Subject key identifier:   F6:C6:6B:22:BA:D9:AF:96:28:86:28:1C:63:7B:6E:C5:53:56:5E:6A
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer:       /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial:       01974855319C0FF3382E6EECF19EF409C728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number:          10D3
Signing time:             Sat 07 Jun 2025 03:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:32 +0000
Files and hashes:         1: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (hash: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=)
                          2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: jQoP0T/zpRIG07RCphCSo7oj/99eD9DYD1vT/JnsD1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:31:9c:0f:f3:38:2e:6e:ec:f1:9e:f4:09:c7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
        Validity
            Not Before: Jun  7 03:00:32 2025 GMT
            Not After : Jun  8 03:00:32 2025 GMT
        Subject: CN=f6c66b22bad9af962886281c637b6ec553565e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:90:ae:fb:22:38:2c:4b:57:6a:92:7d:9f:
                    8e:23:91:e4:52:1a:96:ae:3a:8b:72:63:19:2d:90:
                    c1:fc:f8:70:29:08:82:4a:40:85:5b:6b:15:08:36:
                    01:c5:ef:b9:d9:6d:1d:b0:e1:a8:48:24:8c:15:0d:
                    f4:5e:df:b6:02:cb:42:42:79:bf:1c:a7:76:6f:bf:
                    41:6c:94:8a:c7:d3:aa:16:f6:a0:7f:a3:5a:e5:ca:
                    69:5f:43:6b:66:0f:a9:1b:44:d5:24:86:9d:b1:89:
                    48:6d:e2:f3:10:bd:59:c8:0e:03:b0:3c:1e:45:3e:
                    75:9c:79:14:06:80:97:10:20:49:4b:5f:cd:28:53:
                    a7:64:81:62:2f:3a:0c:59:32:d4:85:01:43:f0:f9:
                    21:db:8e:14:51:e8:d8:5a:d2:9d:80:94:b9:2c:fd:
                    a4:58:e7:7f:d8:0f:94:3f:fd:6a:aa:d0:14:f3:a0:
                    0c:8f:2a:35:c2:d6:23:60:eb:39:bf:d3:c4:bb:76:
                    10:91:cf:f8:e6:be:f3:70:98:37:ef:4d:34:eb:17:
                    ac:84:79:21:56:65:9e:9d:38:4e:e4:c9:40:5f:bf:
                    a7:a5:1c:c7:f8:b5:f8:79:c6:14:90:bc:c6:68:b2:
                    8f:ac:ae:13:2f:08:93:52:b2:55:5c:d8:5a:19:e1:
                    14:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C6:6B:22:BA:D9:AF:96:28:86:28:1C:63:7B:6E:C5:53:56:5E:6A
            X509v3 Authority Key Identifier:
                keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:e8:44:a0:66:05:a6:89:c1:ca:9b:ab:47:f2:52:39:62:
         66:72:ae:23:7f:88:1c:07:ad:36:d0:26:68:7c:22:a0:97:4e:
         98:4b:87:7c:0a:8c:9a:63:b6:df:10:5b:06:09:f3:97:a5:fc:
         47:2e:72:2c:c3:b2:3f:8d:d2:b7:e6:14:a8:76:1b:5e:f5:11:
         6f:3c:9e:4a:9f:24:76:50:5f:1d:e3:7b:9f:e9:f0:0e:e9:55:
         6c:b1:fd:d6:0c:54:e6:62:41:39:44:b7:9b:4a:dd:3a:2a:0d:
         16:cb:46:49:71:40:22:18:86:f8:d2:f7:f5:b5:6b:8f:35:72:
         16:fb:ca:91:0c:f3:d9:0a:68:c1:7e:45:a1:7e:9f:e5:fe:56:
         ea:4c:c0:09:f8:95:88:a8:8a:fe:ce:ed:1a:dc:83:f8:ab:63:
         92:8c:53:f9:50:63:2c:a4:f8:ca:46:6e:66:00:5f:c5:2f:ec:
         ac:2f:f1:5d:dc:cf:41:ad:d3:cc:a2:41:a2:55:5c:f5:16:4c:
         1d:e0:a5:cf:ee:99:04:24:30:46:2d:03:90:8a:d8:d9:85:86:
         77:c6:f8:1f:cc:1a:d8:a5:1c:0b:f8:70:50:74:c8:03:4a:59:
         8e:83:6f:85:37:fb:9b:90:ad:63:d5:2b:1d:7d:b2:6b:f6:4c:
         4b:0d:34:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:34:02 2025 by rpki-client