Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File:                     TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier:          safKFZr5PsOYSbQQSYRAHeHOq/eotUqjRJOxCF7jpO4=
Subject key identifier:   05:47:0D:98:2C:3D:8D:EE:75:D8:4F:CC:9E:31:0F:8F:8B:F0:45:39
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer:       /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial:       019750EAD22667A4FB1027B595E58B5CA3B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number:          0715
Signing time:             Sun 08 Jun 2025 19:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:55 +0000
Files and hashes:         1: Lns1LMe1--aCWobzDFBGvJLb-v0.roa (hash: 3lUaKCTyCDmb++7MRYHqVolI8pfAgpID3s0wPUzmsmk=)
                          2: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: 3lq0fkOfzOfy3XFgaqcySmrl9c/M9eK4VPqkBk1l5t0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:d2:26:67:a4:fb:10:27:b5:95:e5:8b:5c:a3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
        Validity
            Not Before: Jun  8 19:00:55 2025 GMT
            Not After : Jun  9 19:00:55 2025 GMT
        Subject: CN=05470d982c3d8dee75d84fcc9e310f8f8bf04539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:e3:2b:d0:ea:2b:6e:bd:c4:e0:81:31:1d:
                    06:c0:52:2f:9e:4c:73:13:53:e3:01:ec:d5:75:77:
                    16:32:25:40:5e:00:cd:04:cb:b3:93:db:3a:b2:21:
                    e2:1c:32:b6:bd:b2:b2:75:95:6f:e1:52:a4:76:38:
                    67:6a:11:ef:d9:ad:31:57:13:ec:06:16:bc:b6:e4:
                    2c:67:87:35:03:7c:36:c6:28:a2:df:27:c3:d9:e4:
                    b8:e6:2f:5a:72:13:0a:1f:d6:2b:8e:9f:f5:d0:40:
                    ab:88:46:2d:6b:3a:80:3b:b4:88:4d:04:aa:04:42:
                    50:fb:b1:62:2a:ca:1e:3c:64:86:09:fb:d6:42:f8:
                    33:2d:63:74:04:8f:57:f5:aa:5c:9f:07:37:ec:48:
                    cc:a9:ec:30:08:d1:81:05:c5:38:0f:2a:aa:b5:e2:
                    6f:14:96:7d:33:b7:ed:0f:de:a5:32:48:fb:24:37:
                    fe:0d:9c:44:f6:56:85:44:70:01:38:f2:da:a3:80:
                    1a:9b:51:f5:86:88:b5:b5:b5:62:5b:9c:4a:1a:1f:
                    1c:50:e2:c9:94:b3:53:ee:a6:a2:c3:98:29:49:b4:
                    6f:a7:39:60:d2:63:d0:17:0f:99:39:cb:53:c9:aa:
                    94:00:aa:dc:b6:97:89:5d:76:2f:db:51:ea:a1:db:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:47:0D:98:2C:3D:8D:EE:75:D8:4F:CC:9E:31:0F:8F:8B:F0:45:39
            X509v3 Authority Key Identifier:
                keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:eb:81:f1:4b:e9:8f:35:20:8b:d1:50:41:63:b8:aa:33:bf:
         28:ec:a2:84:1d:1e:4c:79:44:9c:54:1f:83:fd:79:fe:d3:e8:
         fc:01:fd:87:6c:cc:98:b7:11:1c:5d:95:5b:4c:21:a2:68:e4:
         ef:93:a0:e0:0e:00:37:e1:de:5d:cc:c4:4e:b6:40:27:cf:3c:
         08:6f:74:f3:a6:8c:c1:c6:9f:ac:5a:97:63:88:08:4e:2b:a3:
         ea:fe:5f:46:20:6d:09:52:39:cb:c3:74:a2:65:6e:aa:11:70:
         42:4c:43:80:81:f8:d6:d3:95:4b:61:f6:f5:20:fb:93:b6:2c:
         33:3d:9b:a0:d7:12:59:28:02:2f:0a:0d:b3:4b:86:fe:3c:36:
         80:80:d8:9b:f4:dc:e8:97:78:1a:b8:39:2a:10:f8:d8:c3:c5:
         69:92:f3:50:97:8e:cf:e3:76:ab:a3:ee:2e:94:1c:de:4d:a8:
         15:27:90:42:67:3b:17:2d:31:e2:83:80:a7:e8:ab:33:0e:c2:
         3a:a9:62:8b:2b:f1:08:41:a1:53:4c:75:3f:bd:9c:3d:80:8a:
         a6:0c:95:c9:13:26:44:00:d8:72:47:46:44:3a:26:c5:f8:2e:
         27:61:39:98:f8:7c:ae:5c:39:be:46:ad:12:e8:5b:bd:b2:c1:
         84:4e:14:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:40:44 2025 by rpki-client