Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File:                     tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier:          lewqErIWDvPt39Op2Gfq+/ZqSG/MQDuqHswvyHSc7Qk=
Subject key identifier:   BF:5F:1D:41:2A:E6:3A:DD:B8:D7:4B:95:76:F7:2C:E1:83:B9:D6:87
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer:       /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial:       019773764C3BA446F74A12A010D59EC529B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number:          08DA
Signing time:             Sun 15 Jun 2025 12:00:21 +0000
Manifest this update:     Sun 15 Jun 2025 12:00:21 +0000
Manifest next update:     Mon 16 Jun 2025 12:00:21 +0000
Files and hashes:         1: RbtpOQvxKOhivyATsaFRApG8DvI.roa (hash: rcUrQ9qXVTCmRSSGNqyeO7AKgTyqtF4rizry0Ad9las=)
                          2: S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa (hash: mXMMwIa+4CrlkQM+hSljAaJyd1k858ZniaKc/09JBeY=)
                          3: a0RRgx7_17MRQY0QEGYvnSPepZU.roa (hash: YVzxS9jFVMbMgJf+c2GFQwY/wSVZdg9tW30Q3WHGzsg=)
                          4: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: S3l2ZdTg19pa3ISIwLFKLRESTo4AYeLAjlSPMGeGLAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:76:4c:3b:a4:46:f7:4a:12:a0:10:d5:9e:c5:29:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
        Validity
            Not Before: Jun 15 12:00:21 2025 GMT
            Not After : Jun 16 12:00:21 2025 GMT
        Subject: CN=bf5f1d412ae63addb8d74b9576f72ce183b9d687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:90:41:85:3f:74:56:25:6a:cd:73:bf:b8:
                    3d:fe:92:4e:d9:95:ed:4c:58:2f:a7:8d:cd:cc:5a:
                    83:cc:52:2e:9e:39:d2:85:f8:b3:c1:db:b7:ae:49:
                    3e:f4:46:32:8b:5e:5d:19:52:95:57:20:70:a9:c2:
                    3a:ea:35:2b:e4:48:e1:78:15:f9:77:cf:4b:c9:d8:
                    9f:f1:0e:e3:51:d9:b7:8b:a8:64:a6:75:15:64:b7:
                    54:99:c0:b8:26:b3:be:ba:43:f6:69:f9:02:a7:15:
                    f5:eb:bb:a1:cc:fe:69:dc:3a:f5:76:89:2d:91:0e:
                    d3:d5:52:d3:41:6a:45:32:d9:aa:7a:7c:48:e3:5d:
                    05:bc:65:f1:36:6a:b9:8e:71:b5:9c:b1:18:5e:78:
                    d6:12:81:dd:0f:49:11:41:0b:fe:45:41:cd:ff:28:
                    bc:02:44:ae:4f:9a:f0:e4:cd:61:f3:1d:ab:05:be:
                    6e:ba:ef:f1:66:55:db:f7:49:1a:7f:97:7e:61:a3:
                    aa:c4:32:d1:be:88:bb:5f:d8:ab:07:60:4a:5e:2b:
                    89:34:43:6f:f6:bd:a4:27:5f:d0:c1:2a:3b:1b:e8:
                    e9:c4:51:aa:fe:a2:85:23:e6:e5:1b:d8:57:59:31:
                    c5:5d:6d:fa:71:f7:e5:bc:1b:5b:83:6b:71:4b:6c:
                    0e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5F:1D:41:2A:E6:3A:DD:B8:D7:4B:95:76:F7:2C:E1:83:B9:D6:87
            X509v3 Authority Key Identifier:
                keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4c:45:cd:70:37:eb:48:cd:5a:86:f7:2d:11:b0:41:9f:62:
         fc:2d:7c:33:54:76:5a:6d:d8:06:89:6f:a4:71:29:f2:d9:04:
         d1:c0:50:27:de:5d:86:5b:e3:6a:fa:d3:83:77:13:57:6e:63:
         82:37:e0:db:06:5e:21:ca:61:aa:c7:ad:d1:6e:c9:00:a5:44:
         51:19:17:a3:e8:c2:cf:f2:93:92:db:bb:f2:c3:b0:46:88:3f:
         35:bc:24:bd:ef:98:de:ad:71:4e:f0:96:15:05:d9:89:be:58:
         c9:ba:c4:58:e0:bc:e2:b7:ae:2c:12:cc:ab:19:f7:89:fa:d9:
         b0:6f:ee:a9:14:8e:8d:af:22:9c:ce:62:7a:0b:da:df:f7:5b:
         b6:be:bd:50:e5:7b:50:50:6d:be:b4:52:68:6c:31:f3:9c:0b:
         dd:52:07:11:d3:32:21:60:bd:d7:ea:c2:d6:00:73:20:26:12:
         8b:9a:6e:cc:52:5a:ab:b3:7a:aa:69:4c:89:8a:3e:ec:be:81:
         db:2d:74:ff:d0:67:8f:e2:20:7c:79:0f:c1:79:56:48:72:08:
         2a:b0:a4:dc:f4:da:d7:59:ae:d0:8d:21:20:16:9f:92:61:73:
         a7:ac:9d:01:a0:f3:db:48:21:d4:66:db:b7:3e:9f:e3:71:d3:
         65:4f:ba:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:53:44 2025 by rpki-client