Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
File:                     TEaPGBJltNlsooNaPlcMJnkDXf8.mft (raw, json)
Hash identifier:          +HYlAsSHnxU5UZ7tD2ZO4ng/+G/pIuDJ+s1VsYbwgn4=
Subject key identifier:   F1:E5:07:3C:BF:85:D0:E4:2C:B0:4F:3A:FB:98:F4:E3:CE:27:06:B8
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Certificate issuer:       /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial:       01968D6FDB3F3ADABBD1B29B6CB79EC8F19F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
Manifest number:          144D
Signing time:             Thu 01 May 2025 20:00:40 +0000
Manifest this update:     Thu 01 May 2025 20:00:40 +0000
Manifest next update:     Fri 02 May 2025 20:00:40 +0000
Files and hashes:         1: TEaPGBJltNlsooNaPlcMJnkDXf8.crl (hash: R1bixLbBH/C6jTMbgo6qGkQeGK1EtQl8+/hD3tiP3ok=)
                          2: TlMdFyo8UfqJ-RDrKLDhrg_5XKw.roa (hash: xU0L/Ky30tv9qoqHoWWKteKnPJXzN1H+V1CKVuBw5jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:6f:db:3f:3a:da:bb:d1:b2:9b:6c:b7:9e:c8:f1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Validity
            Not Before: May  1 20:00:40 2025 GMT
            Not After : May  2 20:00:40 2025 GMT
        Subject: CN=f1e5073cbf85d0e42cb04f3afb98f4e3ce2706b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:c8:62:9b:dc:a6:14:11:33:03:f2:b7:4f:
                    22:f0:d7:e0:85:ec:e5:b6:cc:b5:a4:9e:10:22:85:
                    fd:f9:52:87:ad:05:32:07:6e:f4:e9:1c:94:9f:c7:
                    fd:39:75:cd:d4:8c:b0:6f:1e:66:94:75:03:5e:36:
                    10:d3:12:42:23:c4:36:26:8d:b1:9f:bf:24:9d:35:
                    89:c1:ab:3a:69:a2:8d:c0:0a:e8:70:08:c8:d6:95:
                    9d:7f:7f:1d:08:88:03:cd:a0:b9:bd:b4:5b:65:77:
                    9d:bb:37:b6:8f:82:9a:3a:fe:b9:bd:d8:cb:ce:1b:
                    96:21:81:a4:43:f6:ee:46:0e:f5:50:4f:a4:bb:43:
                    0d:7c:f8:09:8e:e9:14:92:26:e7:aa:7f:4c:ba:f4:
                    45:c9:df:6d:27:69:78:22:23:8f:22:ee:4f:e9:7b:
                    68:f3:75:31:79:93:32:07:63:d2:89:90:e9:2e:34:
                    26:71:a7:1c:a9:b1:1f:b1:43:fc:8a:09:4c:fc:4d:
                    8a:c1:8e:e7:c6:46:85:27:bd:17:4c:05:61:4d:8a:
                    c1:a6:93:99:b6:b3:b6:cb:c7:97:1b:28:d3:bb:57:
                    dd:2c:d4:26:35:0c:3c:db:86:c5:b0:d0:1a:d4:e7:
                    44:48:d5:4c:92:45:96:a8:3f:9b:a3:34:a0:fd:03:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:07:3C:BF:85:D0:E4:2C:B0:4F:3A:FB:98:F4:E3:CE:27:06:B8
            X509v3 Authority Key Identifier:
                keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:27:2b:ed:59:6b:00:23:16:fc:5c:76:9c:76:22:95:0c:
         b9:9a:17:95:d9:57:84:b7:60:ca:39:04:d3:3f:51:37:46:83:
         40:d4:22:8f:ff:6c:e1:36:01:ca:55:bc:15:5a:01:fe:92:5a:
         70:8c:83:c7:ba:66:78:57:91:7b:4b:72:0d:f2:e1:ee:36:ee:
         11:b1:51:9e:54:73:58:56:d3:7d:c9:8f:55:ec:c5:83:e8:77:
         29:21:27:64:cc:29:cf:26:d6:75:d1:91:54:0f:30:8b:9d:88:
         0b:68:ea:68:f1:44:1e:2a:5f:03:c0:c8:f7:7d:25:e9:84:de:
         eb:62:a3:d6:20:de:19:b4:53:a9:2e:86:dc:7c:c4:24:3d:00:
         fb:2a:ca:2f:f6:05:22:d1:f8:7d:b2:68:73:03:bf:51:ac:90:
         1c:e7:bc:9c:cb:db:21:87:60:d8:dc:e6:09:d1:4a:5c:2a:dd:
         f6:e7:1d:84:a7:89:56:6b:da:e6:93:c8:41:74:ee:76:e6:5a:
         6c:62:5d:b4:24:35:0a:56:db:95:28:91:26:27:85:a2:77:c5:
         82:9f:76:ca:e4:57:20:07:48:a0:04:db:9e:b0:a4:bf:37:bb:
         40:07:e0:3c:3e:8d:40:6a:d6:fb:e9:ca:3a:f0:bd:ec:c9:16:
         e1:73:97:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNb9s/Otq70bKbbLeeyPGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDY4ZjE4MTI2NWI0ZDk2Y2EyODM1YTNlNTcwYzI2Nzkw
MzVkZmYwHhcNMjUwNTAxMjAwMDQwWhcNMjUwNTAyMjAwMDQwWjAzMTEwLwYDVQQD
EyhmMWU1MDczY2JmODVkMGU0MmNiMDRmM2FmYjk4ZjRlM2NlMjcwNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti7IYpvcphQRMwPyt08i8Nfghezl
tsy1pJ4QIoX9+VKHrQUyB2706RyUn8f9OXXN1Iywbx5mlHUDXjYQ0xJCI8Q2Jo2x
n78knTWJwas6aaKNwArocAjI1pWdf38dCIgDzaC5vbRbZXeduze2j4KaOv65vdjL
zhuWIYGkQ/buRg71UE+ku0MNfPgJjukUkibnqn9MuvRFyd9tJ2l4IiOPIu5P6Xto
83UxeZMyB2PSiZDpLjQmcaccqbEfsUP8iglM/E2KwY7nxkaFJ70XTAVhTYrBppOZ
trO2y8eXGyjTu1fdLNQmNQw824bFsNAa1OdESNVMkkWWqD+bozSg/QMw2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHlBzy/hdDkLLBPOvuY9OPOJwa4MB8GA1UdIwQY
MBaAFExGjxgSZbTZbKKDWj5XDCZ5A13/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82OTA2NTktMzE5MC00MzRkLThjMjIt
MWNkMzM5M2QwYmY1LzEvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi82OTA2NTktMzE5MC00MzRkLThjMjItMWNkMzM5M2QwYmY1
LzEvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOM0nK+1Z
awAjFvxcdpx2IpUMuZoXldlXhLdgyjkE0z9RN0aDQNQij/9s4TYBylW8FVoB/pJa
cIyDx7pmeFeRe0tyDfLh7jbuEbFRnlRzWFbTfcmPVezFg+h3KSEnZMwpzybWddGR
VA8wi52IC2jqaPFEHipfA8DI930l6YTe62Kj1iDeGbRTqS6G3HzEJD0A+yrKL/YF
ItH4fbJocwO/UayQHOe8nMvbIYdg2NzmCdFKXCrd9ucdhKeJVmva5pPIQXTuduZa
bGJdtCQ1ClbblSiRJieFonfFgp92yuRXIAdIoATbnrCkvze7QAfgPD6NQGrW++nK
OvC97MkW4XOXnw==
-----END CERTIFICATE-----
Generated at Fri May 2 00:53:08 2025 by rpki-client