Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft
File:                     E02_TBOroXoEwLLyRbb1iQyAUWM.mft (raw, json)
Hash identifier:          Qtpwmnm+6qEKU4U/J4tqYF/U8g7mCJ1sHlXn4IHzsoA=
Subject key identifier:   6C:A7:89:20:70:AD:3D:0D:CE:F4:4F:00:2C:D5:27:B4:04:C7:EF:0E
Authority key identifier: 13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63
Certificate issuer:       /CN=134dbf4c13aba17a04c0b2f245b6f5890c805163
Certificate serial:       019674F9A1AF78724FA7475510E9BCE1F17B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft
Manifest number:          048F
Signing time:             Sun 27 Apr 2025 02:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:38 +0000
Files and hashes:         1: 062zYWUf6lnQPf0a8wJz6gVUa7Y.roa (hash: MaQLHV/fJxScnz8INOf6LiEGjIvNWEjzu27jD4BQ7ps=)
                          2: E02_TBOroXoEwLLyRbb1iQyAUWM.crl (hash: DaVwwkXVOlQlSrZCfdrKJ+UfV/Xjq8+XBO6rInvcJ6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:a1:af:78:72:4f:a7:47:55:10:e9:bc:e1:f1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134dbf4c13aba17a04c0b2f245b6f5890c805163
        Validity
            Not Before: Apr 27 02:00:38 2025 GMT
            Not After : Apr 28 02:00:38 2025 GMT
        Subject: CN=6ca7892070ad3d0dcef44f002cd527b404c7ef0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:25:62:de:78:08:00:d7:9f:71:8c:f5:ce:
                    ca:8c:f5:b0:55:59:78:e5:f7:ce:c5:7c:b7:f8:d7:
                    ee:df:39:cb:64:72:2c:e3:b5:e1:d2:07:0e:83:f9:
                    bf:18:be:c6:4b:d7:16:94:f0:c0:e8:4d:c6:6c:e6:
                    8f:3d:b2:b0:76:b8:c2:35:a1:21:76:7a:ed:62:0e:
                    e4:64:5c:fc:09:ac:98:d5:12:3b:00:46:01:d3:c3:
                    90:ef:ed:38:6b:e2:d7:38:4e:fd:20:05:40:f6:40:
                    79:cb:80:df:a3:be:3d:49:85:88:80:bb:f4:a8:1f:
                    64:c4:4d:8d:95:a2:6a:18:75:eb:e3:86:8b:1c:40:
                    32:52:01:fe:b2:66:e2:29:b1:de:ab:33:f1:0e:d9:
                    1d:18:0a:a9:7a:23:62:5e:36:90:ef:e0:1f:5d:e0:
                    9c:8b:6c:af:48:6a:72:fc:a5:3c:55:43:df:6a:59:
                    d7:35:1f:43:3a:72:cd:0a:20:b8:34:cf:2c:54:87:
                    1e:cd:78:eb:f7:fe:af:bb:71:52:5b:d5:7c:77:d1:
                    3f:a8:77:68:12:18:50:9f:9b:d3:7c:c6:6f:34:9d:
                    57:2f:b4:46:03:5c:0c:fc:90:db:f8:08:ed:4a:2d:
                    d8:44:bf:a1:4f:80:9f:ea:59:d9:45:18:ad:6d:75:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A7:89:20:70:AD:3D:0D:CE:F4:4F:00:2C:D5:27:B4:04:C7:EF:0E
            X509v3 Authority Key Identifier:
                keyid:13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:64:a8:a8:ef:fe:e0:39:c1:94:39:5f:21:db:bc:a2:0d:d1:
         7b:9b:e5:1b:12:d6:30:06:14:c3:cd:18:19:16:91:29:dc:68:
         21:bb:aa:be:7a:29:e2:65:c3:ed:c9:d4:02:fa:5c:df:2a:0e:
         75:61:d1:dd:a5:e9:ae:d0:2a:95:95:df:33:c6:b1:6d:a9:a7:
         50:95:d7:8a:4b:19:46:7f:6c:28:10:03:d3:b3:4e:e8:e0:a0:
         cc:53:cd:3e:3f:4b:ec:9d:d4:cc:05:ea:cd:8b:d7:12:79:36:
         b1:b2:81:5a:da:fc:62:7c:9f:f2:e9:2e:cb:03:11:cd:69:1d:
         4e:b6:c9:c2:d0:20:dc:d1:97:2e:d4:d4:4b:f9:c5:aa:a1:e3:
         0b:9f:18:8b:8b:29:b4:0e:1d:1e:f6:49:e6:da:a6:a6:69:d5:
         f0:40:3f:5e:65:cd:5d:d6:a2:75:ea:4d:23:e6:5d:7d:3f:26:
         9f:6f:b7:84:7c:ff:d6:bf:45:56:46:1f:c2:aa:02:b8:5d:cf:
         a7:4e:84:4c:d8:b6:1e:dc:b0:99:89:af:19:d8:f3:11:1d:1a:
         02:ee:5c:b0:b2:b2:30:02:f7:91:7c:da:93:06:c1:ff:e7:5d:
         1e:45:14:a1:51:25:17:01:f0:12:ce:91:59:f1:53:8b:eb:2d:
         b3:fe:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:19 2025 by rpki-client