Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
File:                     TWFl5PGBPks_XEhyBjHHzAsjdNI.mft (raw, json)
Hash identifier:          46oNg0xwzIAGNcrDMd4ZKV9c9x3da8lGra5nS1Ml374=
Subject key identifier:   41:05:15:27:A1:48:71:BE:2D:E0:FC:0F:28:82:5D:C6:B9:DF:A9:12
Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
Certificate issuer:       /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Certificate serial:       01968DA753CBAF6235BCC9ED60E63A175885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
Manifest number:          0B16
Signing time:             Thu 01 May 2025 21:01:15 +0000
Manifest this update:     Thu 01 May 2025 21:01:15 +0000
Manifest next update:     Fri 02 May 2025 21:01:15 +0000
Files and hashes:         1: NvJ8oLDEBqhT1H-zCdKolqnypws.roa (hash: aLhfn5rS031yK9YSuCvXO/dQvbflGZGOUFgblOZMFc4=)
                          2: TWFl5PGBPks_XEhyBjHHzAsjdNI.crl (hash: MCx8WvIDp9H/vvlToEw9QKtI6Xt0IltIhkfBOZt2pC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:a7:53:cb:af:62:35:bc:c9:ed:60:e6:3a:17:58:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
        Validity
            Not Before: May  1 21:01:15 2025 GMT
            Not After : May  2 21:01:15 2025 GMT
        Subject: CN=41051527a14871be2de0fc0f28825dc6b9dfa912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:02:3b:2e:40:e4:e9:58:c3:a3:14:b0:65:
                    12:5d:45:01:5f:f3:8d:f6:12:ae:ca:62:b7:f7:1e:
                    cd:cd:33:05:5d:1e:5f:58:c0:4b:ce:dd:45:5e:e4:
                    d2:07:b5:4b:f5:66:71:a1:b6:e6:dd:e1:2e:06:48:
                    2f:c8:bf:03:66:8b:ee:f4:2a:b3:8b:6b:86:e4:6b:
                    01:b4:3c:17:e1:cb:54:b6:8d:20:8f:c2:91:a6:e5:
                    a1:90:c1:28:b1:6e:55:27:89:4d:21:cd:46:cf:69:
                    22:6d:9f:35:82:b9:7e:81:f5:62:21:99:c8:f5:65:
                    ef:d7:e4:8d:4e:23:d0:40:eb:8f:88:8f:6d:fe:08:
                    85:d0:01:42:2a:46:ae:b7:f9:98:6f:32:a8:c3:76:
                    a6:c4:93:10:69:7e:a5:5c:ba:83:94:69:74:6f:6c:
                    fa:ad:39:0e:04:c9:de:cc:9a:43:c3:d8:6a:6d:41:
                    6f:64:ab:43:47:9d:a3:47:ac:54:d5:2c:a9:8f:c1:
                    7d:22:ed:fa:6a:4b:33:c7:fb:d2:2c:46:90:b9:68:
                    23:fb:9f:37:5f:e4:50:2a:cf:4a:8f:04:65:2b:d3:
                    fa:44:60:c6:d6:dc:70:2c:ba:81:8a:91:17:f9:2e:
                    fc:32:f9:47:a5:1b:5c:3e:a7:45:fd:1f:99:f4:da:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:05:15:27:A1:48:71:BE:2D:E0:FC:0F:28:82:5D:C6:B9:DF:A9:12
            X509v3 Authority Key Identifier:
                keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:47:0e:43:59:a3:5b:07:9d:3f:eb:a0:73:ea:00:dc:fb:f6:
         95:5e:03:4c:63:58:af:97:71:ca:94:49:6d:3f:f5:12:b3:40:
         5c:86:63:40:ed:d5:e8:d6:7b:e6:fd:b5:64:9c:94:38:0b:d3:
         eb:2d:44:6a:a3:21:2b:54:03:d3:a0:29:f0:57:1a:72:0b:cc:
         dd:39:db:6e:47:41:cb:3f:3b:86:9c:13:85:e7:f5:7f:c5:af:
         60:ad:a6:e4:a9:b9:79:8b:38:18:8f:f5:4e:b0:04:48:03:6c:
         26:82:60:1d:8e:c5:87:09:a2:01:79:eb:47:8d:17:c2:3c:ab:
         39:98:07:c6:82:b4:85:4a:54:74:c0:d5:24:e8:5a:48:e0:b7:
         a3:3d:ff:6d:73:59:a3:7b:b6:89:89:17:24:9c:d0:1b:a8:4a:
         99:b4:de:5a:4b:95:ee:1d:21:d3:07:c2:08:f1:3b:52:fe:69:
         3b:c4:0b:48:5f:44:5c:c9:48:45:00:db:e5:5e:09:1e:e9:50:
         b9:bf:4e:8e:50:c3:ab:17:2c:19:9b:2c:dd:e8:2d:3b:3d:d1:
         2d:fe:61:0e:a7:ef:32:6f:48:21:a0:b9:39:c3:92:ea:1b:e8:
         2a:33:26:35:4c:0e:90:06:d0:78:4d:3b:57:c4:0e:c5:2d:d0:
         94:96:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:12:17 2025 by rpki-client