Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
File:                     tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft (raw, json)
Hash identifier:          TdJpyHPS0h4CdAShNTRp/XhFkN7eyIAPOJjxWJp9HoY=
Subject key identifier:   E7:94:99:E4:5C:66:F9:45:D6:0D:86:F1:31:8E:CA:D1:38:E6:D9:DC
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Certificate issuer:       /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial:       019674F98D47132590C28A8DF3DDB3C11E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 02:00:33 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:33 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:33 +0000
Files and hashes:         1: 6vMVm2zjHnS6jWGvj_JPBPoIejQ.roa (hash: WRnwpfl8kuTVj7apaEiYFn6tm3l6ZkpWo7ENQmbJBXw=)
                          2: tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl (hash: pwsO/t2nlPYIOFBSxJ2z838VUI1rMlQADju1S+p4gIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:8d:47:13:25:90:c2:8a:8d:f3:dd:b3:c1:1e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
        Validity
            Not Before: Apr 27 02:00:33 2025 GMT
            Not After : Apr 28 02:00:33 2025 GMT
        Subject: CN=e79499e45c66f945d60d86f1318ecad138e6d9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a7:7f:73:f9:f0:1d:02:e3:da:0d:a7:2b:00:
                    1a:71:7f:14:7c:03:3f:f1:f4:c0:33:63:01:45:7d:
                    28:8a:8e:de:94:bd:39:0f:ea:68:f6:45:74:a2:98:
                    9e:8b:27:96:bf:02:93:32:3a:0a:8d:6d:92:71:73:
                    d4:39:17:95:2a:65:da:c9:47:43:3e:e5:60:e2:b7:
                    e8:86:4a:da:d3:b2:b3:3f:e1:91:00:c3:ac:a1:ec:
                    fa:0a:73:cd:0e:18:14:a5:3e:bd:d5:f6:8b:22:17:
                    3d:48:89:ba:36:28:49:60:67:74:96:19:60:a9:5e:
                    d4:22:f4:44:b4:e3:87:ae:ac:c9:bf:73:6c:13:f7:
                    8b:d2:a8:ac:0a:c7:9d:1d:04:49:f0:f1:41:24:a4:
                    dd:ca:80:d5:d5:ab:c5:22:e4:31:4c:92:a1:2d:5b:
                    c8:1c:33:27:02:2f:e4:a8:fc:88:0a:3f:7d:5b:53:
                    24:92:f8:df:cd:95:53:ed:88:97:32:43:dc:3b:da:
                    80:c8:0f:a0:02:9c:26:15:6e:40:10:e3:8a:f9:d2:
                    5a:73:f4:97:c2:08:58:58:06:b5:bc:e8:b9:ab:47:
                    14:25:4c:66:be:24:51:b0:10:4f:e9:90:74:51:37:
                    57:3e:8a:b7:79:55:a2:f0:9b:f0:b8:5d:db:2b:8b:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:94:99:E4:5C:66:F9:45:D6:0D:86:F1:31:8E:CA:D1:38:E6:D9:DC
            X509v3 Authority Key Identifier:
                keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:f5:a3:39:e5:ad:ea:35:27:0e:50:ac:30:3f:7f:42:59:
         08:eb:a4:79:4f:fe:de:2a:67:88:e3:9f:56:82:4f:ae:6e:09:
         a4:8e:a4:60:92:8b:9a:a1:ea:ee:f3:3a:dc:21:f1:38:7c:5d:
         72:92:7d:c1:d5:26:07:12:9b:a3:9d:36:9d:fe:42:0c:27:b6:
         6d:98:24:df:a3:18:9b:6b:e3:79:59:eb:63:58:90:d2:94:d2:
         d9:91:97:7d:ca:19:0c:81:52:41:79:3f:db:26:b6:b0:e1:87:
         00:14:72:ef:25:44:fc:8b:ba:aa:2c:08:ee:7d:ce:0f:06:d0:
         b6:78:97:34:eb:12:60:b2:5d:d6:af:30:6e:d8:6f:35:38:b1:
         5c:e6:8a:53:2f:3e:b3:40:99:23:ea:84:87:c9:80:03:17:75:
         0d:4e:f6:33:be:a4:6e:03:f2:08:76:4a:c3:13:75:6f:3e:c5:
         0d:2c:8c:1d:a7:08:81:6e:3d:68:fa:f8:d2:ee:e3:05:b1:cb:
         e9:fa:9a:06:10:f8:7f:eb:aa:21:c0:a4:db:60:4f:68:3d:7c:
         5d:20:92:d2:c7:28:78:7d:30:ee:98:f2:d3:43:f3:3b:25:e2:
         fb:cf:8a:d7:5a:bf:e7:50:36:6a:24:e9:59:e5:81:02:df:f1:
         d1:97:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:58:09 2025 by rpki-client