Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
File:                     TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft (raw, json)
Hash identifier:          jlcrmpUEd5QQnL90jQT1dsuzWVr+nzpUkwAdwYUr+HQ=
Subject key identifier:   D0:D9:EE:AC:AA:CB:D0:8F:B7:89:06:DB:88:85:4B:3B:CD:7C:15:3B
Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
Certificate issuer:       /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Certificate serial:       01968EF05E1BCE7F03A406C4B8C2248B0BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
Manifest number:          0C78
Signing time:             Fri 02 May 2025 03:00:39 +0000
Manifest this update:     Fri 02 May 2025 03:00:39 +0000
Manifest next update:     Sat 03 May 2025 03:00:39 +0000
Files and hashes:         1: PVatpozxq2iSr5EjDz4p95PO1D8.roa (hash: jnj6J4YwXSNpdZA8cx57mMPaW12cBZG8T42Zb5JhBQ4=)
                          2: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl (hash: W8dav6IVnqjvwiFbuJyF5df6Ip0VGYnQ1tsbGUwyZVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:f0:5e:1b:ce:7f:03:a4:06:c4:b8:c2:24:8b:0b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
        Validity
            Not Before: May  2 03:00:39 2025 GMT
            Not After : May  3 03:00:39 2025 GMT
        Subject: CN=d0d9eeacaacbd08fb78906db88854b3bcd7c153b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:6c:2e:8d:0f:0b:26:ff:7f:e6:64:6c:92:
                    9f:27:46:75:0f:e3:c8:05:86:94:32:f4:45:11:71:
                    5a:3f:06:15:3c:cd:88:81:be:78:af:f0:ae:e4:15:
                    88:04:f2:ce:68:4f:91:69:79:22:44:bc:c6:d9:c9:
                    eb:e9:fe:f1:d0:20:2c:a8:0a:b2:36:cb:e3:e5:07:
                    46:27:0a:b2:f6:3d:92:5a:c1:2c:e3:fa:b4:d9:e7:
                    5e:81:c6:ad:05:57:42:b0:a3:08:48:28:76:4c:48:
                    ad:59:b4:f1:9b:e2:b1:91:f6:ad:64:88:8b:e2:b2:
                    ff:bd:a1:45:af:5b:1e:59:c1:fa:3a:3f:2a:b1:a5:
                    09:c5:45:79:d9:cb:fa:c3:65:ef:84:7d:bb:a2:c4:
                    b7:b2:46:f6:69:7f:e5:e7:71:96:22:3c:5e:45:42:
                    a0:9b:54:ea:80:f9:e6:a4:be:ec:dc:f4:93:70:12:
                    d0:b2:76:fc:a4:8d:fd:48:13:af:0f:2b:67:8f:f2:
                    ad:7d:3c:9f:ce:60:8f:e7:93:d2:dd:64:2c:c2:4d:
                    92:ce:4c:2f:44:05:8e:c6:6f:1b:d0:1d:81:8d:23:
                    b2:67:60:5e:d6:f3:11:ce:da:62:66:a7:c8:ff:ca:
                    f6:a6:0b:98:e2:b3:99:4a:db:89:bf:8e:29:66:16:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D9:EE:AC:AA:CB:D0:8F:B7:89:06:DB:88:85:4B:3B:CD:7C:15:3B
            X509v3 Authority Key Identifier:
                keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c5:fc:e4:7b:fc:fa:03:54:e0:cf:ea:8e:63:dc:71:cb:3d:
         09:bc:85:2f:96:76:f3:8d:d0:55:1d:eb:46:c0:ec:77:e9:31:
         b5:df:f5:bf:b8:bb:22:43:a4:ec:c5:84:07:3c:63:44:3c:ee:
         cb:7f:b8:8d:c7:55:45:62:76:27:ff:06:69:95:48:47:98:6a:
         af:ef:32:ad:06:85:b6:1b:3f:cb:5d:2f:d6:e9:06:08:e2:25:
         22:9f:3b:36:45:1d:50:cb:ed:d3:ce:d9:54:3f:96:bd:e3:9d:
         9d:fd:c1:2a:9f:81:a1:13:32:ab:84:28:4e:62:50:71:ca:b0:
         9d:ab:d4:0b:4a:ef:6b:c1:03:c8:ca:c6:0d:2d:5a:b1:26:58:
         46:65:f9:d2:22:13:80:0d:45:cb:7b:1e:a5:c5:05:27:f4:7a:
         96:c9:8d:9d:a9:e9:73:67:a8:2a:5c:97:8a:44:d4:b3:c0:76:
         80:d2:ac:4b:ac:79:cb:72:d7:b2:8f:2e:87:17:94:29:f1:bc:
         a9:d0:ab:08:56:4e:12:d4:e3:75:ea:90:8f:b2:53:93:92:f9:
         48:df:c4:1f:7b:35:eb:0d:a4:96:75:f4:19:1f:8d:d5:60:75:
         c8:06:03:fd:4c:73:a5:e9:1f:86:f1:6a:fb:40:6a:14:81:52:
         01:1d:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:07:55 2025 by rpki-client