Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
File:                     TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json)
Hash identifier:          bP58k5sxZ7ectmR0anH4CVuNFvNgAt+xVa8bxOdCOZY=
Subject key identifier:   D6:17:BF:A4:D8:E1:1A:E0:8B:D9:03:48:42:3E:AB:2F:B0:1D:12:F0
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Certificate issuer:       /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial:       0197722D294AAC00712AB7220A97B74684B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
Manifest number:          14D4
Signing time:             Sun 15 Jun 2025 06:00:51 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:51 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:51 +0000
Files and hashes:         1: 04QV-ve6N6q1z5keiSip22HWq-U.roa (hash: oA0QfyCg1GT0LK/v+pk71hC3hYPHoYN/Zjd1n/b4oLE=)
                          2: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: DJrh/2EaJIFrlxaSRDc9eRODlEA5vIrVax5xqwBFfdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:29:4a:ac:00:71:2a:b7:22:0a:97:b7:46:84:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
        Validity
            Not Before: Jun 15 06:00:51 2025 GMT
            Not After : Jun 16 06:00:51 2025 GMT
        Subject: CN=d617bfa4d8e11ae08bd90348423eab2fb01d12f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e5:a0:26:12:5a:d4:df:82:69:33:e3:67:ba:
                    b6:00:10:a5:10:a9:fa:c5:f4:c5:0c:ff:fd:60:2c:
                    41:f8:21:b2:da:10:57:8f:94:30:91:18:97:b6:45:
                    2a:6e:1b:2a:45:c1:11:c4:18:86:3b:28:fa:12:6e:
                    e5:9d:12:0b:9d:59:56:da:99:8e:0c:7d:0a:06:c9:
                    03:4e:16:7e:9b:ad:37:b7:75:f0:e1:75:3b:a5:07:
                    34:51:6d:83:c7:c7:f1:72:33:a0:b5:bc:e5:00:68:
                    b5:e1:90:df:05:54:a6:91:f5:8d:85:07:dc:bd:cb:
                    bb:33:4a:d6:f4:d3:18:b4:47:c1:28:4a:5b:d8:a9:
                    9e:dd:28:e4:cd:b4:3b:8a:8f:30:7a:f5:3a:ff:a9:
                    58:eb:b8:85:f9:96:43:be:a0:e3:94:f9:42:0e:d3:
                    cf:86:cf:07:d5:48:0d:64:3a:d1:99:08:dd:be:1e:
                    1b:dc:cc:d6:f6:e1:1e:df:cf:97:57:0f:e9:6e:2a:
                    9f:cc:b2:62:25:d8:9a:4b:7b:b8:09:63:13:cc:72:
                    b0:b0:f0:3e:b3:6d:2a:c7:1a:aa:3b:ac:59:47:c3:
                    24:f7:f0:9e:5f:6b:fb:80:66:95:c4:a0:1e:da:6e:
                    25:63:85:d0:c8:88:98:66:39:7c:1d:01:64:20:a2:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:17:BF:A4:D8:E1:1A:E0:8B:D9:03:48:42:3E:AB:2F:B0:1D:12:F0
            X509v3 Authority Key Identifier:
                keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:bf:88:0a:c0:f7:32:9a:46:77:88:40:71:64:f6:b2:6b:59:
         0a:7c:19:5e:e8:09:13:52:87:44:4f:ee:26:d2:13:55:e7:9a:
         42:19:f2:31:80:5a:c1:ae:bf:bf:bb:de:89:9e:4b:3b:b0:5c:
         dc:d1:4f:05:b3:65:e1:be:79:87:95:63:af:2e:0e:02:c2:f8:
         52:cb:c5:fe:e6:2d:fa:58:3b:eb:f3:47:a2:f6:22:bb:c4:b1:
         9b:f5:47:df:2f:2b:86:99:a1:71:34:25:6b:d0:22:ef:75:0d:
         3d:05:d9:8d:f4:85:dd:a8:8c:47:66:18:6a:a7:50:ec:59:90:
         99:e8:53:c7:f8:55:5d:cc:00:60:70:9b:50:c3:08:0e:c6:ba:
         de:3b:61:95:32:d6:83:eb:c5:03:1e:b7:6c:67:91:5e:1e:31:
         52:7e:f3:0c:ba:12:c3:b4:1c:56:72:72:34:24:c2:26:da:81:
         e4:c3:7a:0c:35:7b:8b:d9:07:bc:df:94:cf:f8:78:be:21:fa:
         08:fe:0d:d1:46:1f:30:d9:44:5b:87:bc:5f:40:20:f1:a1:7d:
         28:5a:62:58:b2:6c:07:4f:9c:b2:c2:24:28:6b:c7:21:9d:5b:
         cf:9e:24:5e:07:ed:6a:02:59:a8:71:21:38:2d:c9:11:bb:49:
         0d:37:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:45:59 2025 by rpki-client