Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File:                     T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier:          rukWx2lXg7w5ghgshsOHA99x6+jjlA28EeGN4oc7uTQ=
Subject key identifier:   05:6E:10:D9:70:40:C0:B0:9E:5E:FB:39:6D:A2:12:A7:2D:02:BF:3F
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer:       /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial:       019676E83667B689DAA0F67F53A7C4011558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 11:00:51 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:51 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:51 +0000
Files and hashes:         1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
                          2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
                          3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: Lsf9eidb+RE84QxcVk69q4z9deaL5UguVmKmUN5eOoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e8:36:67:b6:89:da:a0:f6:7f:53:a7:c4:01:15:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
        Validity
            Not Before: Apr 27 11:00:51 2025 GMT
            Not After : Apr 28 11:00:51 2025 GMT
        Subject: CN=056e10d97040c0b09e5efb396da212a72d02bf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:8b:d9:0d:1f:6b:17:bc:03:e6:45:21:c7:
                    12:54:e8:0d:26:8a:62:d2:d6:8f:51:12:1e:c8:c2:
                    00:8a:f1:f9:15:51:00:ea:bc:d9:e2:83:f9:74:70:
                    ad:81:ce:8c:41:69:81:d2:9c:93:e4:5d:54:a7:a8:
                    86:d1:99:3d:68:65:f8:27:ed:41:ee:7a:f2:e8:97:
                    91:9e:9e:37:76:69:99:4b:87:1f:8c:dc:26:b5:f2:
                    32:ed:28:da:72:49:c1:59:fd:51:77:48:92:99:cb:
                    82:28:ac:89:6b:b0:e1:61:0b:11:47:fd:83:bb:94:
                    bb:c2:65:1a:a6:99:32:a7:f8:0a:25:de:da:53:40:
                    27:0f:20:f2:15:f8:46:34:73:de:9b:3a:03:61:80:
                    e9:2e:7b:08:ab:ab:a2:18:57:02:7d:3e:69:85:bf:
                    b9:76:84:01:77:38:de:cd:c1:d1:1e:20:dd:94:06:
                    4a:14:a8:4a:b5:49:8e:f2:bd:11:9c:d2:12:b2:ff:
                    93:78:b5:f2:9c:6a:f9:ec:66:73:81:36:c6:cd:2c:
                    fa:04:1b:60:f6:e5:20:7a:81:a0:27:95:4c:e2:a2:
                    b1:51:d7:dc:8f:8d:ba:f5:80:17:13:73:2e:8d:62:
                    2f:3f:70:8a:be:cb:e1:45:6a:6d:51:be:7d:4a:cf:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:10:D9:70:40:C0:B0:9E:5E:FB:39:6D:A2:12:A7:2D:02:BF:3F
            X509v3 Authority Key Identifier:
                keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ed:fe:50:83:cf:3b:ca:35:f1:75:c1:02:96:12:81:66:28:
         d6:7a:f8:87:8e:5b:95:85:a0:b5:e7:21:97:d4:1f:5b:fa:81:
         c6:36:70:02:86:ae:42:71:03:a8:e9:c7:13:85:ae:ec:c9:b1:
         60:1a:48:78:c2:63:a4:c9:f4:57:6c:04:3f:7c:8c:f7:ff:82:
         b5:91:58:02:07:15:b1:32:ce:19:a7:25:4c:53:4a:8c:8e:14:
         cf:77:14:83:e2:ae:7f:6e:5d:70:3b:fa:72:4e:93:61:95:fb:
         78:7d:b4:77:5f:52:d5:11:fb:73:07:1f:56:22:75:39:89:a6:
         2d:d6:14:bb:6a:a0:d9:a4:af:5a:a7:1c:4a:df:08:a3:e0:3a:
         17:ef:c1:df:b6:84:a1:5f:01:07:3f:9a:97:6b:50:21:bc:c4:
         18:bb:81:42:33:01:83:dc:49:66:9a:24:0f:22:48:f2:28:c6:
         33:32:1d:c6:7f:24:ae:88:74:9d:2e:4a:3b:ca:a9:34:90:df:
         ac:a1:b5:4c:91:64:77:61:43:0f:f8:ce:5f:80:ce:9e:28:57:
         17:fc:8e:85:d4:25:51:f1:71:d0:69:f8:29:dd:98:2c:41:f9:
         b2:72:47:8e:5a:32:53:db:a1:6c:23:13:37:99:a3:a7:d1:0a:
         16:8b:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:38 2025 by rpki-client