Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File:                     TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier:          oljOzR2K2Fp8CW9NwLTo7/1guu7ITOy0N2klPvd2024=
Subject key identifier:   C7:39:ED:0D:13:3B:3A:81:53:9A:A0:DB:A9:30:4B:48:54:18:BA:48
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer:       /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial:       01974B1F1B97F656E495DE39BAD3B1457786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 16:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:19 +0000
Files and hashes:         1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=)
                          2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: 0otjVTYu329uyeG0jjey0gQHk/0wHkpCzhpKn7epc3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:1b:97:f6:56:e4:95:de:39:ba:d3:b1:45:77:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
        Validity
            Not Before: Jun  7 16:00:19 2025 GMT
            Not After : Jun  8 16:00:19 2025 GMT
        Subject: CN=c739ed0d133b3a81539aa0dba9304b485418ba48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:52:72:66:5f:6c:c5:89:38:61:ac:24:19:
                    28:fd:96:1b:10:b2:e4:7a:bf:f3:2f:76:45:fc:9f:
                    60:9e:b7:6e:08:17:cf:1c:73:80:b8:ce:59:22:d7:
                    4c:81:74:cb:d3:1b:db:5d:10:93:a3:46:99:14:95:
                    9b:99:4c:2a:68:12:d9:77:3c:58:f7:f0:84:ab:40:
                    e9:ed:e6:e6:01:31:8c:26:00:84:5c:0d:8c:98:68:
                    bd:96:f9:31:12:e0:96:7f:66:4f:f3:1a:d4:9a:48:
                    48:bc:cf:dd:6d:ac:a2:ff:d8:cc:3b:90:44:dd:15:
                    5a:a9:58:04:65:70:8a:c8:2e:ca:7c:de:11:74:8c:
                    fb:7f:24:af:db:93:36:12:11:26:97:1b:14:4a:38:
                    23:89:3d:09:af:2d:76:f7:c7:4f:4e:7f:96:f1:d6:
                    0e:8d:10:fa:08:f9:30:0d:ef:4b:8c:63:4a:6a:78:
                    36:9e:35:8d:9b:8a:f0:94:14:9a:6a:11:08:66:3e:
                    5a:b4:c5:6e:0b:a2:5e:1d:4a:65:aa:1c:85:49:8e:
                    0e:89:2f:77:95:32:46:6e:6c:e4:9c:6b:60:de:6f:
                    48:a9:05:e7:e0:36:63:4a:c0:64:7a:35:b3:8e:17:
                    80:ae:e7:7a:f2:bd:2d:14:19:fd:6c:37:dd:88:c3:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:39:ED:0D:13:3B:3A:81:53:9A:A0:DB:A9:30:4B:48:54:18:BA:48
            X509v3 Authority Key Identifier:
                keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:84:1f:b8:fc:64:59:bc:ee:9e:32:a4:11:3e:63:07:f9:
         91:4e:02:b2:3d:f2:81:86:c7:6b:76:1b:02:38:68:0d:36:fa:
         fc:7c:40:93:92:97:13:58:7b:42:5f:60:aa:c4:a1:22:2f:f9:
         bb:38:ab:67:a1:c2:d8:3d:4b:12:44:20:bb:e9:cb:6c:89:81:
         16:cd:a6:b2:aa:6e:1e:6d:43:ce:52:68:b2:62:a3:03:c0:a1:
         37:61:a8:77:4d:0e:88:a0:38:e3:c2:64:25:23:42:85:68:da:
         94:d8:a3:0a:9c:93:02:71:d7:d8:4d:17:8e:5c:ea:37:21:38:
         71:a0:46:27:d3:be:d2:cf:35:91:09:a4:49:8d:0f:5d:96:6f:
         4e:bd:ce:c8:54:a9:e6:b9:82:32:33:c4:c8:52:54:a3:27:0c:
         b1:fb:02:03:8e:a6:14:39:64:5c:5e:9e:49:34:1e:c5:18:db:
         92:06:9c:72:d4:70:07:27:4f:79:44:1c:32:4a:d5:a5:ff:2c:
         23:87:e1:bf:9a:68:28:ae:f9:f1:e5:e6:b8:ef:06:2d:33:c7:
         69:26:fc:03:f9:9f:be:08:13:47:80:04:01:7f:e7:cb:4a:ba:
         4b:81:31:4f:44:42:4e:38:6f:4d:54:7b:c6:4a:59:df:f4:4c:
         f4:df:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:55:48 2025 by rpki-client