Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File:                     TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier:          Mzr9YVGzSD25p5fKNwcWJnkAli0fYh+0q7wZRPvAr4A=
Subject key identifier:   E7:D7:CF:52:07:19:9D:2F:87:8C:13:90:3A:C8:62:5E:77:E1:A7:B6
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer:       /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial:       0196759E9D04BCD51AAB0A534DE83A12B73B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 05:00:51 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:51 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:51 +0000
Files and hashes:         1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: vzwIsB5UYJYTvJTf8cYLG5H89aZ6NbbP3zPlQLrh/8w=)
                          2: tbYt8CsTUjvQCfPmxRHFnIb3gng.roa (hash: Wb48gd6AG1NXeN5IWX1LXBtrKALPG/kRfuLTU0uD7B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:9e:9d:04:bc:d5:1a:ab:0a:53:4d:e8:3a:12:b7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
        Validity
            Not Before: Apr 27 05:00:51 2025 GMT
            Not After : Apr 28 05:00:51 2025 GMT
        Subject: CN=e7d7cf5207199d2f878c13903ac8625e77e1a7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:49:c0:87:9d:e3:91:ff:ed:f2:8a:c4:00:
                    dd:60:37:de:a0:cb:df:5b:78:de:71:9f:71:dd:46:
                    a6:e3:70:00:a7:bc:a3:fd:29:de:fc:3f:d5:ea:9a:
                    ef:1d:a6:b4:d7:9d:35:e8:da:93:d1:84:9a:35:c0:
                    80:dc:b3:99:83:b0:49:cc:f3:6a:70:b8:c2:2e:97:
                    34:06:4d:11:df:f7:72:03:c6:7c:af:fd:88:47:58:
                    6c:73:74:aa:72:82:b0:69:c1:a5:33:0e:e1:f2:9b:
                    2c:33:e5:ca:c6:b5:17:ff:d3:49:96:62:91:66:31:
                    26:17:fd:04:ea:67:a3:c7:17:b7:10:6d:34:68:60:
                    73:dd:7c:69:85:ae:90:a3:f5:f0:e2:21:3e:b8:c4:
                    ac:02:8d:d7:4c:28:ab:e0:18:3e:46:9c:a1:57:02:
                    09:5b:56:1e:29:9d:d2:df:8e:32:ee:0f:32:ec:3b:
                    b8:d3:0d:c3:c9:cd:60:1d:1e:0a:98:a3:c2:3f:34:
                    35:c2:3a:d4:51:76:87:6b:5b:37:7b:5b:67:08:c5:
                    06:8f:1d:14:b6:33:a2:93:50:35:2a:a2:6b:85:83:
                    32:71:fc:c0:d1:e1:e6:82:fd:b6:1f:ee:79:97:04:
                    e6:bd:fe:f7:72:5e:7f:c6:15:95:8e:76:24:d4:7b:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D7:CF:52:07:19:9D:2F:87:8C:13:90:3A:C8:62:5E:77:E1:A7:B6
            X509v3 Authority Key Identifier:
                keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9c:23:d3:82:ef:84:2e:ec:30:95:31:3a:8a:82:bf:df:a2:
         99:c4:26:0f:69:fd:8a:87:c7:72:b9:40:e1:0e:56:b2:89:a2:
         b6:e7:b6:71:7e:ca:56:1a:d9:ab:c5:33:25:ef:d0:7e:21:70:
         3e:7d:4b:48:9d:73:4c:67:c2:8a:e7:c4:89:eb:fd:19:1d:16:
         aa:c9:93:ae:2f:e7:1d:dd:b7:ad:27:64:dd:5a:99:05:3d:74:
         3f:2a:9a:b8:1a:9a:fa:02:aa:ce:fc:2b:fc:9c:a6:d4:ea:5b:
         45:e6:b8:44:96:ec:6e:a6:e3:70:c4:d7:2d:80:ea:14:00:fe:
         23:70:0e:83:b9:9d:11:8c:11:e8:b1:ba:94:6b:da:d8:98:bc:
         55:f4:2c:36:00:03:e3:52:ce:3f:43:a9:67:87:9b:2c:a8:91:
         3a:28:9e:06:bb:e1:36:e9:9f:c1:4e:ed:85:3d:40:8b:bd:d6:
         b5:4e:31:4a:46:88:05:9b:ed:55:01:36:27:9c:78:42:df:b3:
         4e:61:18:75:7c:0d:2e:f6:58:06:d7:84:b6:89:39:a0:56:e2:
         2b:8d:60:f9:df:a0:ff:da:10:11:02:4f:82:ba:78:e1:96:c0:
         a4:f3:7c:9c:8e:09:88:11:b6:c8:71:3e:7c:ed:81:7f:29:ea:
         6e:c1:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:08 2025 by rpki-client