Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
File:                     TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft (raw, json)
Hash identifier:          +4Jbcln13mDzBNVe5pwy1fWwMV6ZzKVgKSOM43tqmOc=
Subject key identifier:   CC:15:BF:C0:30:56:16:0C:B8:6F:C7:5E:5A:30:B1:7B:54:5D:92:F5
Authority key identifier: 4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4
Certificate issuer:       /CN=4de43a56cbf6afe4356896e0dff529c1796944b4
Certificate serial:       0197481E639A73D60F5D2BC1A2F0BC9C9890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
Manifest number:          0768
Signing time:             Sat 07 Jun 2025 02:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:40 +0000
Files and hashes:         1: TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl (hash: z76Aa+6GjgMzUiljDEb4sS0CVKcgLPHlWtf6kj9WsYA=)
                          2: ysLU-tIMB584lIEbHQSL8JGKsnE.roa (hash: Uif1kdpiVYKXIEf5r/9WzjR7N7gNIDgEDehCMCiuiNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:63:9a:73:d6:0f:5d:2b:c1:a2:f0:bc:9c:98:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de43a56cbf6afe4356896e0dff529c1796944b4
        Validity
            Not Before: Jun  7 02:00:40 2025 GMT
            Not After : Jun  8 02:00:40 2025 GMT
        Subject: CN=cc15bfc03056160cb86fc75e5a30b17b545d92f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:2e:5b:29:7a:4c:01:6f:2a:4f:28:95:fd:
                    fe:c3:6f:05:43:20:21:a6:90:3c:c3:78:f2:15:45:
                    a7:78:46:0b:92:37:d4:22:3d:c1:89:30:89:93:02:
                    aa:eb:46:87:6f:16:80:82:e8:cb:bd:f9:67:dd:4c:
                    2c:2e:00:db:b7:34:73:52:44:7c:6b:8c:1f:8b:99:
                    38:a5:70:65:6c:1c:a2:dd:f2:c0:b0:ff:7f:c0:ea:
                    a5:66:68:3c:37:9a:6e:4e:20:a6:14:ae:15:da:0c:
                    36:85:2d:1b:dc:78:86:0e:e0:5c:f4:a5:8b:9a:84:
                    2f:3a:30:4a:04:9f:5c:44:a7:5d:7a:c1:cb:67:ac:
                    8b:70:dc:5a:6a:f9:19:a7:0e:cb:2b:60:4a:cd:ce:
                    b5:85:05:db:f1:d3:8c:5e:f9:77:f5:4e:c1:2a:f0:
                    c1:e1:15:6d:1c:27:35:8f:8f:5a:c8:37:d0:6e:65:
                    be:1d:08:75:16:2c:d3:16:ce:2d:d8:81:e4:3c:0c:
                    76:0c:b5:b9:4d:15:2b:0d:b0:d2:10:3f:97:10:4f:
                    4b:bc:fa:13:48:c3:b2:6b:ce:fb:c1:69:c0:c8:52:
                    04:be:c4:9f:b5:fc:c6:a0:fc:cc:22:07:ef:d7:ea:
                    1c:ac:ac:aa:b0:3a:78:71:c6:be:b3:74:47:f1:83:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:BF:C0:30:56:16:0C:B8:6F:C7:5E:5A:30:B1:7B:54:5D:92:F5
            X509v3 Authority Key Identifier:
                keyid:4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:05:2b:25:68:3f:af:ab:44:c5:57:c1:da:6b:8a:c3:77:90:
         e8:db:a5:6b:54:ae:5a:87:2e:8e:8c:eb:80:b2:4c:3d:03:49:
         69:55:45:9b:db:de:10:e6:9e:d6:c7:34:b1:04:22:40:52:76:
         1d:0b:ac:86:07:39:37:a7:11:9b:bd:4e:30:bf:c8:67:30:42:
         a0:3e:e2:e7:26:65:ef:72:ed:91:4a:eb:ed:f1:46:f6:d0:89:
         45:df:dc:3d:68:10:8f:e9:da:80:cf:4c:7a:aa:cf:ed:a4:76:
         30:a3:13:f5:4f:fd:76:2f:ea:ba:28:65:cc:04:7e:b4:56:cd:
         b7:09:44:d2:ae:c9:49:8f:9e:7a:06:f6:73:dc:9d:26:89:ba:
         17:6e:31:be:ba:c4:54:bc:ea:f4:c7:91:68:a0:38:ab:6d:5f:
         51:c2:d9:35:7c:98:6e:89:c8:8b:c4:26:05:04:ab:7c:6f:9a:
         47:64:21:90:9f:35:6b:ce:8f:66:e5:30:86:02:90:9f:54:a6:
         2c:ab:d4:c2:79:6e:31:9c:3b:a0:fc:af:50:30:39:e8:00:8f:
         c5:25:ce:66:87:74:23:fc:54:35:b1:e5:d5:f4:1a:02:61:a2:
         1d:b2:9f:38:9c:5c:1d:24:cf:d5:05:24:55:3d:7d:2d:b5:97:
         c2:cb:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:31 2025 by rpki-client