Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File:                     TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier:          BBjYvDNdx9Y9b+UAWLN8trQLkA7+YDf+duNxByAJRSg=
Subject key identifier:   F3:3A:81:67:98:95:E3:62:D4:55:23:81:1E:9B:AE:F1:F3:1B:AB:61
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer:       /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial:       01976997CC2DADF73C141B8E23B3F0E90CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number:          1568
Signing time:             Fri 13 Jun 2025 14:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:45 +0000
Files and hashes:         1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
                          2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: u8tXHwPD47g7wYHuR9K1QTCIEu4B00L91lVDV+KtH10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:cc:2d:ad:f7:3c:14:1b:8e:23:b3:f0:e9:0c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
        Validity
            Not Before: Jun 13 14:00:45 2025 GMT
            Not After : Jun 14 14:00:45 2025 GMT
        Subject: CN=f33a81679895e362d45523811e9baef1f31bab61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:38:69:b5:51:15:93:46:5b:01:4a:3f:ef:
                    cf:f8:e3:de:5b:9a:ee:cf:62:34:c2:a3:41:da:f7:
                    d4:8e:72:37:f1:cb:37:49:17:c9:39:40:ab:e3:62:
                    b2:f6:b2:3d:37:cf:29:d2:61:02:d1:6c:01:d9:a0:
                    2f:d1:03:ae:64:b8:0c:cc:4d:36:97:61:77:f4:fa:
                    84:4a:78:f0:e7:68:ae:3f:64:44:d0:82:26:f2:6c:
                    64:67:32:16:1f:cb:9d:e9:11:92:81:df:ab:82:a8:
                    25:01:31:00:4e:bc:0a:08:3f:30:ca:ea:73:22:d0:
                    ac:08:76:e2:f6:02:71:64:19:c2:73:f6:d5:a4:59:
                    d9:64:47:81:f8:a2:4b:53:a4:66:66:6c:40:15:5d:
                    d7:f5:4f:15:f1:9d:8a:47:2f:bc:39:69:a3:a8:55:
                    2d:34:c8:e4:f7:e2:0f:49:0a:a0:2e:4c:12:05:26:
                    da:ee:8d:70:a4:ae:58:e2:1b:f6:6f:07:aa:e0:d5:
                    45:fb:00:05:03:56:ea:82:e7:2b:21:0c:1b:9a:05:
                    86:68:82:d3:22:9d:2a:13:02:8c:ae:b3:76:eb:94:
                    4b:55:54:a4:99:b7:9c:55:37:30:62:b0:06:0c:f7:
                    0b:7d:65:fa:98:d2:66:94:87:7a:78:89:f1:aa:f0:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3A:81:67:98:95:E3:62:D4:55:23:81:1E:9B:AE:F1:F3:1B:AB:61
            X509v3 Authority Key Identifier:
                keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:b9:89:d2:fa:c0:5b:bd:33:33:d4:2e:d7:c6:f2:ad:3a:
         42:07:01:38:a2:cd:4f:94:18:e7:10:3a:14:e9:d1:03:6f:1b:
         ca:22:65:7c:62:24:25:4f:a6:38:a1:34:ec:cd:3b:3e:6e:bb:
         12:a5:17:be:02:87:c2:e8:1c:39:25:87:7c:ee:dd:09:45:c5:
         80:a5:b0:0b:ee:fd:29:3b:3e:5a:86:8d:79:f3:db:c8:13:79:
         40:01:7b:b0:cf:a2:c3:fc:5b:7e:98:41:e6:7b:ce:e3:1f:b8:
         a8:b3:3c:00:8c:37:ce:23:c3:3b:41:83:da:35:c1:2e:48:bd:
         26:83:09:64:de:b4:f9:3f:89:f0:f4:42:d3:57:8c:2b:74:84:
         8e:e1:b5:d8:47:f9:d2:56:46:9f:02:24:55:2e:e3:37:f7:e9:
         5a:06:d7:41:82:12:ce:8c:f2:d6:b1:b2:19:9d:a6:66:0a:3c:
         0f:3b:bd:12:27:65:d6:6f:21:27:9c:72:f3:4c:a8:e5:7b:9f:
         b8:81:cb:59:fd:ac:1a:c4:65:79:e7:32:d4:d0:ec:f2:e2:21:
         03:94:c3:8f:31:75:cb:cc:3e:db:95:16:0a:ac:f9:b1:9c:66:
         92:e4:84:03:6e:3a:93:8a:e7:52:c5:87:66:bd:74:16:d9:90:
         96:6e:2e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:59 2025 by rpki-client