Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File:                     tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier:          utaUqDI3dLh2YDT44vGu00IWLX8ityTQnQgNphriXdk=
Subject key identifier:   BE:45:49:B4:78:02:EA:43:57:37:10:4F:D5:BD:28:CD:03:BA:B6:CE
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer:       /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial:       0196729DD5FBCA2DFE662C5F08C0353F078B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number:          0855
Signing time:             Sat 26 Apr 2025 15:01:08 +0000
Manifest this update:     Sat 26 Apr 2025 15:01:08 +0000
Manifest next update:     Sun 27 Apr 2025 15:01:08 +0000
Files and hashes:         1: RbtpOQvxKOhivyATsaFRApG8DvI.roa (hash: rcUrQ9qXVTCmRSSGNqyeO7AKgTyqtF4rizry0Ad9las=)
                          2: S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa (hash: mXMMwIa+4CrlkQM+hSljAaJyd1k858ZniaKc/09JBeY=)
                          3: a0RRgx7_17MRQY0QEGYvnSPepZU.roa (hash: YVzxS9jFVMbMgJf+c2GFQwY/wSVZdg9tW30Q3WHGzsg=)
                          4: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: syBy767NjOcOEehPdXZG34FkkkGhhjopOZ/5knPgRxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:d5:fb:ca:2d:fe:66:2c:5f:08:c0:35:3f:07:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
        Validity
            Not Before: Apr 26 15:01:08 2025 GMT
            Not After : Apr 27 15:01:08 2025 GMT
        Subject: CN=be4549b47802ea435737104fd5bd28cd03bab6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:e1:8b:b5:ee:2e:3f:f0:cd:3e:f3:11:37:
                    d6:b8:65:b7:fc:ba:03:47:34:9a:0c:58:b4:ba:f5:
                    cb:ad:d1:6b:08:95:b9:52:42:b6:a0:b1:c3:a9:a1:
                    13:8b:04:54:7c:2f:e5:27:9a:a4:59:b7:eb:cd:ee:
                    4f:01:3d:17:4f:80:71:45:db:34:c7:00:25:9c:40:
                    c2:c4:16:a7:3d:4d:61:5f:69:d2:be:03:77:cf:16:
                    c2:c1:38:02:0c:bb:54:68:e0:29:f5:06:9d:60:d1:
                    71:8b:b1:40:c8:cb:d6:3b:cb:96:91:ef:ad:ff:04:
                    0f:73:44:63:ba:c4:e9:95:07:b2:83:c5:fb:5e:9f:
                    e3:4e:2a:51:3a:e0:c7:ef:0d:55:aa:76:2d:f2:31:
                    75:b2:95:20:17:a1:b4:05:e8:09:6a:ad:e3:3d:b5:
                    6f:15:88:a7:c0:38:40:1d:f2:b3:9e:b2:0a:62:1d:
                    71:8e:93:cb:75:eb:61:02:af:2e:31:e6:43:24:7d:
                    60:3f:0d:d3:a5:d7:87:37:c5:fe:f0:03:99:4a:cc:
                    9b:65:a5:ba:9b:37:09:bf:32:6c:78:86:e2:39:ea:
                    93:0c:9a:4a:b9:bb:dc:0b:ae:97:58:ca:4c:fa:a9:
                    76:32:4e:7e:6e:83:11:cb:cd:5a:1d:2c:2d:71:9a:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:45:49:B4:78:02:EA:43:57:37:10:4F:D5:BD:28:CD:03:BA:B6:CE
            X509v3 Authority Key Identifier:
                keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:cb:0f:b1:37:7c:96:11:98:c4:99:87:8d:a1:ad:48:9b:9a:
         26:94:23:33:ae:20:0d:69:5f:44:ca:81:cf:9d:b7:86:79:68:
         84:37:a1:68:1f:1c:c5:ec:4a:15:70:f9:27:34:4a:d2:fe:83:
         53:ab:e4:86:0e:39:0e:4b:67:9a:15:11:dc:7b:b8:0b:4a:ef:
         f9:d9:26:2b:22:90:34:0a:89:04:94:26:6b:85:49:fc:ab:dc:
         78:59:24:0d:7a:b7:85:e1:62:1b:ec:ab:60:13:50:cc:1a:e5:
         c9:2f:6d:60:6e:51:82:15:8e:0b:dd:18:ac:41:54:d8:aa:44:
         00:8b:a8:52:51:96:b0:66:4a:cb:51:f9:5f:cf:70:cc:05:7c:
         30:2b:7b:9a:3f:98:88:35:3e:43:6d:90:1e:0d:1b:ac:33:90:
         bb:95:47:0b:19:de:eb:04:ae:81:c3:e6:4c:1f:80:37:2b:8a:
         b0:58:ea:93:d4:1c:fb:97:99:2c:d3:45:7b:67:f2:ee:83:f2:
         c5:0f:e0:af:5d:04:06:ad:62:40:a3:77:20:2f:ea:fa:b0:bf:
         ec:b5:20:61:d5:7a:6f:8c:74:4c:9f:96:a4:bf:93:1d:e6:fb:
         db:f7:22:d1:0a:6b:47:5e:e9:64:c9:3c:22:0b:4d:23:4a:a3:
         e0:78:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:09 2025 by rpki-client