Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          oH/gDVhJ6ig06ATUpKVmSJZAEmOEliszTE/u6V2+208=
Subject key identifier:   1B:A1:CC:A7:F1:02:57:E9:BC:28:02:5B:C9:9A:D5:D1:C7:44:F3:80
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019674F9BC5E7D44490F95AD85E7CC2F20AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          151E
Signing time:             Sun 27 Apr 2025 02:00:45 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:45 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:45 +0000
Files and hashes:         1: 1-3XflNe0k3QXZPA5cmOmVXUVk4k.roa (hash: EOxsCadON2KcZNrQxz29cfWR8eSAuCeFKTgS66ed6p8=)
                          2: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=)
                          3: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=)
                          4: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=)
                          5: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=)
                          6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=)
                          7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=)
                          8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=)
                          9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=)
                          10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=)
                          11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=)
                          12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=)
                          13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: 4/oomz2InRl1SXlHGAocFu2FeBZPIBgv+v7A0gmX0Uk=)
                          14: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (hash: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=)
                          15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=)
                          16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=)
                          17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=)
                          18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=)
                          19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=)
                          20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:bc:5e:7d:44:49:0f:95:ad:85:e7:cc:2f:20:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Apr 27 02:00:45 2025 GMT
            Not After : Apr 28 02:00:45 2025 GMT
        Subject: CN=1ba1cca7f10257e9bc28025bc99ad5d1c744f380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:74:8e:74:bf:c0:54:40:ae:e8:e5:b0:d1:
                    69:33:5b:21:f2:ce:4a:e1:01:78:99:80:3e:9f:3c:
                    e9:a0:d1:dd:23:2c:82:32:f2:37:d6:af:d5:9b:a8:
                    16:01:c6:08:9b:d5:6d:ee:6a:26:ae:f7:bc:7b:8b:
                    f2:ce:a5:1b:70:ea:56:c9:05:ce:9d:38:bd:96:50:
                    0e:f8:2a:07:46:a5:30:fb:f2:dc:04:25:a4:33:54:
                    3b:e0:f0:ac:d2:25:20:f4:8f:62:a7:42:5d:ae:4c:
                    02:9a:37:16:65:77:6e:69:6b:7e:4d:f3:73:49:06:
                    39:8b:5d:3f:66:cb:73:a8:97:16:1d:6e:2f:ca:c4:
                    ca:7f:19:51:2d:9e:1c:96:f8:4e:c5:52:e8:61:8b:
                    fc:0b:4f:65:07:84:47:5b:db:a0:a2:75:72:83:99:
                    bb:9a:70:0d:57:0d:84:d8:94:04:da:b0:fe:46:93:
                    93:18:a2:a7:db:4c:9c:e0:d2:ae:8f:82:eb:3d:de:
                    59:fa:25:31:ff:8a:72:49:5f:30:60:51:45:c0:ab:
                    25:36:30:a9:2f:79:50:94:33:27:fd:60:1a:d9:ff:
                    72:c7:5b:41:2d:27:4e:5e:b7:81:dc:b2:04:b3:30:
                    47:6f:36:0f:0b:d2:eb:d6:6f:d8:5d:20:b0:2f:a9:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A1:CC:A7:F1:02:57:E9:BC:28:02:5B:C9:9A:D5:D1:C7:44:F3:80
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:48:61:14:e1:0e:58:b5:77:50:67:9a:c6:2a:40:cb:37:
         5c:d7:29:94:fd:05:e6:fd:28:e4:28:99:e9:f0:c4:cc:7d:86:
         9a:cb:c8:c1:fe:64:ae:f2:62:08:ee:dd:64:7e:c4:e6:91:eb:
         42:fd:39:7a:a9:d7:3e:b9:29:b4:4a:44:f3:c7:79:cd:36:12:
         10:85:ce:3d:fb:11:05:dd:d1:17:ca:bc:3f:4e:80:fc:44:20:
         6f:67:0a:4a:ef:34:5a:a4:93:a2:b7:a1:7a:dd:f4:31:7a:37:
         f6:81:29:a7:8f:85:36:d0:9d:d7:96:70:41:77:bc:61:91:73:
         5b:64:c5:2d:7f:ea:66:bf:9a:62:28:05:d1:bb:0c:92:80:72:
         e1:71:01:48:d7:4b:da:a6:22:b1:33:1f:75:e2:6a:47:be:a5:
         bc:a3:6e:1a:0d:2d:e2:a3:4d:97:ce:de:76:fe:f3:c0:87:a6:
         99:e2:8a:ba:87:dc:d7:77:f3:75:c8:5b:0a:30:bf:65:2a:4d:
         a9:4e:02:3f:de:b0:42:a8:44:1f:7d:cd:c7:e3:23:67:26:3c:
         9e:86:b1:92:7c:45:85:67:84:b7:8e:01:9e:fc:22:fb:fe:47:
         87:f2:04:50:30:ee:53:45:cc:b6:1d:93:b7:3d:a6:0f:c6:40:
         01:45:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:18 2025 by rpki-client