Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File:                     tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier:          gs5qGibQ1ud4CB9VOq8Tsx4v4oQS3mAfWmNC2WSVmEA=
Subject key identifier:   36:7C:36:64:9C:36:DE:48:0E:D5:88:4D:70:FB:22:03:F6:0D:5E:AF
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer:       /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial:       019683C7891488B285F1A783D91084FAC9A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number:          01E4
Signing time:             Tue 29 Apr 2025 23:00:14 +0000
Manifest this update:     Tue 29 Apr 2025 23:00:14 +0000
Manifest next update:     Wed 30 Apr 2025 23:00:14 +0000
Files and hashes:         1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=)
                          2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: bFBuyS2ZBO7WHIxJrXhOP+MC4gg3CjpuAWm44pBoj74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:c7:89:14:88:b2:85:f1:a7:83:d9:10:84:fa:c9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
        Validity
            Not Before: Apr 29 23:00:14 2025 GMT
            Not After : Apr 30 23:00:14 2025 GMT
        Subject: CN=367c36649c36de480ed5884d70fb2203f60d5eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:bf:eb:e6:38:42:42:5f:a6:e3:2e:22:aa:
                    fe:15:58:8e:4d:1e:d8:11:a4:9a:0c:26:72:26:c9:
                    26:42:78:4d:6c:df:2b:d2:73:ca:88:a8:63:61:22:
                    8f:ba:dc:9e:6a:a2:08:bb:78:2c:80:4d:e7:04:31:
                    1e:8d:4e:33:b8:ae:c3:66:de:9d:83:da:df:ee:b1:
                    6f:8d:b1:6e:3f:39:45:6f:0a:ab:0a:55:6c:43:0f:
                    d7:5f:05:13:a6:88:89:56:9b:3d:f2:8f:02:c3:f1:
                    69:b5:67:e1:91:af:b1:cb:42:d6:42:04:57:43:b7:
                    44:1c:a1:0b:66:2a:f0:22:a2:aa:7c:0d:69:d5:ef:
                    40:45:b2:5c:07:41:6c:6d:3a:8f:e5:d4:40:f2:d0:
                    dc:3c:ce:e7:1e:6f:c5:b7:d7:0a:43:94:95:37:61:
                    c3:05:7a:3b:27:3c:92:87:00:15:f3:39:6d:b0:1f:
                    1b:57:fb:0e:b8:b2:c4:23:5b:64:a3:f9:71:88:09:
                    c3:92:27:12:ac:f5:c2:c2:9a:61:07:1e:f5:c4:f0:
                    6f:c1:96:8d:e9:01:d0:92:bd:80:bd:ce:18:8f:da:
                    04:fa:3a:88:a0:90:43:f7:7a:aa:5e:a9:38:3e:89:
                    4a:3a:5a:e4:7d:d0:37:54:0a:9e:ca:f9:0b:64:6d:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7C:36:64:9C:36:DE:48:0E:D5:88:4D:70:FB:22:03:F6:0D:5E:AF
            X509v3 Authority Key Identifier:
                keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:08:ba:e1:e4:cb:2f:f9:9a:ef:24:79:65:92:a4:27:b0:39:
         11:ad:0b:89:d5:e4:7d:e6:1d:55:34:72:e3:fa:bd:8e:51:6d:
         c4:c0:20:05:4f:a6:55:78:12:76:61:3e:58:f0:6e:10:22:ad:
         65:65:b6:89:1f:b1:e4:15:a7:e3:66:9e:de:cd:24:ab:58:af:
         49:8d:ad:e3:1a:13:5d:d2:5e:41:50:2a:47:51:3c:ab:d2:17:
         29:9b:ec:05:ed:f7:ae:79:f6:04:28:0f:56:a6:5d:5c:59:63:
         d2:06:b7:46:48:c6:34:f7:21:14:70:a1:b9:36:36:79:9f:05:
         5d:92:1a:72:75:56:1c:c4:ed:a1:5d:fc:d2:bd:7d:f3:40:e9:
         73:fe:87:08:66:8d:6c:33:e5:ce:a1:3d:80:ab:51:ac:74:52:
         b7:e5:e3:cd:eb:b8:10:45:c3:16:3a:77:a1:b9:5b:94:ea:97:
         dc:b0:a3:e2:e2:df:21:59:9b:36:fe:8f:4b:43:01:f9:4f:60:
         99:47:a6:01:fd:ae:32:4b:8f:c0:ae:93:ba:8a:f6:fa:c9:60:
         10:b1:b3:b7:b9:c1:e7:30:ba:1e:9a:c1:30:39:02:3a:c3:e5:
         f2:bc:12:7a:db:ff:c3:a1:56:5b:c1:9b:27:78:82:0f:e9:81:
         1e:a1:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:47:29 2025 by rpki-client