Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File:                     Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier:          5dt9GJIqxBFZN9n9mCw9NFFuWA7U1wh4m/LVtS2ckS8=
Subject key identifier:   B5:9B:FD:89:11:12:6C:30:7E:8C:7B:25:91:0B:86:89:C9:CE:69:85
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer:       /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial:       01964FA39FD0E24EF7719EF4C4414657507E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 20:00:45 +0000
Manifest this update:     Sat 19 Apr 2025 20:00:45 +0000
Manifest next update:     Sun 20 Apr 2025 20:00:45 +0000
Files and hashes:         1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: Or8ToAuftXhHrsnspK0tJh0NfVrNXJZqP0mSfzeu/GQ=)
                          2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:a3:9f:d0:e2:4e:f7:71:9e:f4:c4:41:46:57:50:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
        Validity
            Not Before: Apr 19 20:00:45 2025 GMT
            Not After : Apr 20 20:00:45 2025 GMT
        Subject: CN=b59bfd8911126c307e8c7b25910b8689c9ce6985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:31:48:d5:cb:59:f6:3b:b9:bd:92:db:67:76:
                    ff:e8:c5:ab:88:c5:55:e1:28:41:ef:ba:6e:c3:11:
                    19:08:19:f3:ea:09:5e:71:1e:13:2a:e0:05:6d:44:
                    ba:bb:cf:dd:2b:bf:ec:e8:c6:85:4d:62:23:68:4d:
                    cb:80:7d:0a:e9:ef:9a:1c:05:77:aa:86:62:16:4f:
                    ab:de:58:b8:de:f4:98:98:53:de:71:a4:43:28:c4:
                    da:a6:21:ad:8c:46:26:6e:c3:66:5d:ad:e8:4c:19:
                    9a:fa:b5:78:0e:c1:02:53:05:4b:a6:b5:36:04:a0:
                    98:dd:a6:19:91:77:92:4e:ee:0f:6c:b0:a0:61:de:
                    fb:fc:22:b0:b8:48:68:5a:86:1f:ea:1f:99:c4:eb:
                    dc:ca:d3:3a:3b:94:e9:31:83:be:bc:05:e0:77:f5:
                    29:8d:b3:3a:cb:b5:91:2e:5c:a9:b2:f9:81:08:17:
                    39:a1:35:8a:bf:1d:03:ee:25:92:af:69:de:46:da:
                    be:18:cd:35:11:75:4e:97:b3:8d:52:b1:12:62:6d:
                    56:d3:ea:57:d8:3a:57:3c:e4:25:b8:b9:f6:57:bd:
                    a8:03:f1:e6:23:0f:fc:15:fc:f3:44:4b:8c:d0:4f:
                    80:87:68:a3:db:dc:63:15:d4:89:2e:cb:1c:e5:dc:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9B:FD:89:11:12:6C:30:7E:8C:7B:25:91:0B:86:89:C9:CE:69:85
            X509v3 Authority Key Identifier:
                keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3f:cc:c8:dd:62:5f:99:35:e5:da:6f:c2:5e:64:8b:c9:3d:
         b4:a4:87:e3:b3:c3:8d:83:15:0d:3d:20:66:63:a2:dd:d4:ca:
         cd:a4:7d:14:ba:f4:59:01:58:c4:6f:41:2f:e8:7c:16:e7:e0:
         b9:ae:7f:28:b3:2a:db:f2:e9:b1:e9:4a:ad:6f:ac:cb:3a:ba:
         8c:4c:26:6c:87:df:f0:b9:79:b7:32:85:f5:e0:39:a4:0e:47:
         e7:03:47:1c:45:b6:db:e9:38:41:2f:74:16:92:ac:19:71:ab:
         c3:95:93:dd:ef:db:3e:b8:ef:dc:c5:2f:75:50:6d:60:d2:0a:
         5f:9e:6d:e9:6b:bd:91:99:b9:c6:cb:44:d0:f8:30:42:ed:5e:
         be:ed:cb:4d:37:6d:62:ef:67:aa:32:26:65:7e:2a:37:e0:c7:
         88:06:ff:e5:42:f1:49:90:05:bc:a4:19:91:cb:f8:19:75:a1:
         6d:37:2c:3f:7b:3b:45:73:97:17:a4:85:b2:50:93:55:db:1b:
         7a:e5:a8:fe:c4:c6:79:ac:2f:36:43:85:ac:10:9f:17:2b:78:
         6d:e9:bf:8e:20:99:f5:c7:f4:c9:46:5a:46:7a:da:ae:7e:59:
         0c:7d:32:7c:5e:16:0e:d6:39:6a:cd:6b:8b:1c:ef:3d:68:58:
         ca:62:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:20 2025 by rpki-client