Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File:                     tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier:          Z3goXkLucn/fQ9s0CnAuv8NANPAyyddFzDQi9iG3QnU=
Subject key identifier:   CB:B2:5B:0D:50:27:BE:66:29:66:8F:C8:FB:BA:D9:05:C1:AE:FC:79
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer:       /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial:       01963FFA72ECA922A2601FC4C266822AA517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number:          05C3
Signing time:             Wed 16 Apr 2025 19:01:40 +0000
Manifest this update:     Wed 16 Apr 2025 19:01:40 +0000
Manifest next update:     Thu 17 Apr 2025 19:01:40 +0000
Files and hashes:         1: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (hash: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=)
                          2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: oGP4drKvgruvIZ5KR8QEvbN0d3vm6x/ZuUkHe9HGpNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:fa:72:ec:a9:22:a2:60:1f:c4:c2:66:82:2a:a5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
        Validity
            Not Before: Apr 16 19:01:40 2025 GMT
            Not After : Apr 17 19:01:40 2025 GMT
        Subject: CN=cbb25b0d5027be6629668fc8fbbad905c1aefc79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:e3:8c:e3:58:b2:0e:07:68:aa:cf:df:3d:
                    7e:79:f0:d4:b0:fc:0f:4b:f8:32:e1:30:d8:41:2e:
                    0e:4f:70:69:0a:de:19:75:ed:01:ad:6a:a8:a8:44:
                    51:47:c7:b9:13:90:66:05:bf:52:cb:c0:26:90:e9:
                    4a:c3:95:fa:3f:8c:40:04:61:7e:33:cf:f9:7c:ef:
                    98:76:28:25:ff:99:d8:47:b3:19:42:df:38:5d:07:
                    f4:a6:ac:13:b9:c3:e3:0e:44:a1:92:2b:cc:14:fa:
                    e4:68:17:26:af:93:bf:88:27:a1:b1:9c:2c:79:9c:
                    f0:44:2b:75:fc:75:37:4f:74:0b:d1:bf:63:96:85:
                    39:83:b9:d4:a9:a4:d4:d7:d2:df:1e:48:76:22:9e:
                    f8:88:ab:5c:26:90:52:2b:e6:1f:fb:47:1a:6d:c7:
                    d0:4d:28:1c:9d:8d:f3:02:a7:bd:2d:5c:31:5d:51:
                    6b:37:b1:f4:8f:56:70:2b:fb:d6:9a:4b:46:a4:14:
                    10:f5:7c:7f:ed:95:b5:5e:96:83:5d:50:07:d7:b0:
                    a6:d1:4e:0a:2a:d2:1c:eb:cb:f3:5a:61:7c:7e:84:
                    9b:d0:bb:b5:5c:a8:6a:88:3c:ee:04:c8:3c:a2:b2:
                    56:7e:23:5f:3c:9d:0b:60:2d:4c:4b:c5:34:19:50:
                    78:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:5B:0D:50:27:BE:66:29:66:8F:C8:FB:BA:D9:05:C1:AE:FC:79
            X509v3 Authority Key Identifier:
                keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6c:4b:93:2a:1e:68:ed:f8:fc:88:21:51:1e:d5:1b:b8:d2:
         99:cf:34:00:7c:0c:d9:ff:32:b5:53:14:e4:7e:0e:a5:71:a0:
         ff:08:71:ab:85:55:ee:9a:44:2f:91:ad:45:b0:9a:af:fe:fc:
         5d:3a:19:9f:64:90:05:40:d7:1e:d6:f1:b8:ba:3b:af:1b:c3:
         e8:e9:fb:f1:b6:a9:d8:9b:0d:c2:12:21:1e:8b:d1:0e:06:14:
         bb:f1:85:6f:9e:06:3f:c4:a3:c3:58:a9:c5:0e:4d:11:22:db:
         91:d8:7f:34:40:5f:28:65:57:95:03:42:6a:0c:b5:ac:6f:6d:
         73:b9:5d:f5:b5:72:97:63:aa:bd:0a:39:b2:13:36:39:83:bc:
         fb:dd:43:3a:2c:b3:7e:3e:8c:25:d6:8d:e5:5c:17:22:09:25:
         a3:24:04:a1:cf:9a:b8:4b:eb:ec:c1:27:c0:7d:69:cd:9d:c3:
         1a:66:a9:26:94:be:14:52:e3:e1:d5:44:7a:94:0a:4b:33:d1:
         c3:3d:0b:50:87:42:af:7c:42:34:9b:e5:e3:d6:13:47:90:a6:
         0a:76:34:9c:e1:7f:d2:ff:85:d2:64:3c:58:db:09:2d:2c:eb:
         3b:a3:78:58:d1:93:ac:6f:cd:14:f8:13:75:f2:c7:0e:da:73:
         d0:69:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:57:58 2025 by rpki-client