Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File:                     TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier:          3O99JOfmEpQHQOgoupO1QlF+BP4yVBsplxwD9r2dvSs=
Subject key identifier:   EA:CA:BD:69:60:71:4C:21:AA:4E:0E:FA:A5:C1:30:43:5B:86:D9:A4
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer:       /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial:       019674F983C9C3592D3C6EE41C97F5280E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number:          0756
Signing time:             Sun 27 Apr 2025 02:00:31 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:31 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:31 +0000
Files and hashes:         1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: 4rnanXaxMg8ibg+MQeWZE9MpWz9WZ3foTBcFYKiUviI=)
                          2: jkZUIqdvougoYWTFFIYTmQ_0c3I.roa (hash: FvJzMAch2URVowys51R40ZrFG4sKpVwuQwZnFuBLSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:83:c9:c3:59:2d:3c:6e:e4:1c:97:f5:28:0e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
        Validity
            Not Before: Apr 27 02:00:31 2025 GMT
            Not After : Apr 28 02:00:31 2025 GMT
        Subject: CN=eacabd6960714c21aa4e0efaa5c130435b86d9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:a3:3d:dc:fe:27:8d:e9:5a:28:86:12:cf:
                    00:e8:66:b7:c4:88:20:1d:b9:3d:6b:d7:93:8e:27:
                    4b:5e:4f:27:5f:a2:75:ea:12:8e:75:2b:b6:ba:70:
                    48:42:0c:25:b5:e6:97:db:30:bb:0d:bc:fa:2b:de:
                    97:27:60:2d:92:ce:d2:04:00:95:41:a8:f2:36:6b:
                    3f:f1:71:2c:20:83:f8:6a:3a:cd:37:c2:70:17:66:
                    79:d9:46:30:0e:d5:c0:a4:94:a7:f9:0b:02:97:b5:
                    c0:82:cc:49:84:65:8f:a5:c0:bd:f7:30:a2:4c:34:
                    2e:a2:85:3c:f6:9a:ce:1a:0d:fa:27:b6:f8:24:b8:
                    da:7f:5a:eb:34:5e:b9:3c:74:34:0a:08:e6:24:9a:
                    ab:08:37:1b:26:6c:84:a7:0e:00:85:51:d1:6d:92:
                    87:d3:cc:b7:e0:69:5b:ba:e0:01:ef:92:09:2b:3f:
                    db:b9:67:0c:9d:45:4e:ed:0e:c4:c3:e6:70:ab:82:
                    73:2d:36:3e:78:99:de:75:68:a0:a2:12:2f:f0:a2:
                    1f:b7:0d:d8:05:50:7c:ad:dc:6e:dc:60:35:ac:80:
                    00:46:a4:b8:c2:27:bb:7e:9f:ab:c5:ea:5f:21:b4:
                    d7:52:5a:f2:07:7c:06:5a:db:98:c9:fb:b7:14:fc:
                    ba:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:BD:69:60:71:4C:21:AA:4E:0E:FA:A5:C1:30:43:5B:86:D9:A4
            X509v3 Authority Key Identifier:
                keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bc:ab:f5:89:65:ba:21:67:5a:a1:23:c2:ed:f4:d6:73:61:
         c3:37:d3:ea:f8:9a:1a:f7:af:57:b6:3a:c8:dd:78:1d:e3:1f:
         4a:44:62:f6:3f:5b:61:f3:e9:cc:27:5f:aa:2c:97:af:f0:3a:
         df:4d:87:16:2e:30:a8:c2:bb:30:5c:45:7f:0f:7c:1f:87:10:
         77:3f:7a:ff:a0:57:3e:e8:60:e6:e0:68:b9:61:5b:96:a6:c9:
         bc:c3:34:64:77:5b:a6:86:8f:c9:bc:54:a3:1b:55:9c:fb:94:
         f8:2b:47:16:0c:26:87:2d:7a:48:d4:f8:fc:81:6d:b9:ae:35:
         6b:65:cf:bc:ad:d8:b6:19:da:41:4f:83:e0:dc:21:58:98:2e:
         70:5f:3b:25:1a:2a:e6:83:bc:15:27:92:ee:66:59:24:2e:cb:
         26:85:e3:8c:de:97:78:8d:f3:a7:8c:16:df:4f:2e:68:f9:78:
         79:37:88:d5:a4:8a:0f:29:24:07:f0:2b:69:46:02:37:d8:f7:
         cf:c3:02:0b:cc:b6:8e:6d:43:6d:fa:95:c4:f4:59:80:a2:17:
         fb:7a:a8:0d:25:8d:a4:53:48:0e:d2:46:ab:af:4c:c8:8b:d5:
         89:86:d0:0c:29:17:a4:68:30:98:01:41:c0:93:c2:47:f3:d9:
         5c:b4:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:41:05 2025 by rpki-client