Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File:                     TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier:          fQxWd0tgwWglcn8qz5BGVGKKH+jRroT2fNRgVHXBxS0=
Subject key identifier:   B5:2A:8A:6C:FD:D5:12:24:32:0E:CE:C5:AF:D7:41:3A:6D:3D:A2:3D
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer:       /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial:       019676E85566A7425E327EEB1B598825ABCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number:          1512
Signing time:             Sun 27 Apr 2025 11:00:59 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:59 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:59 +0000
Files and hashes:         1: 8JnpLlF6ouYCq_pQniNXbCodhsg.roa (hash: 3w9gQ6ISRWOwFH7sOq0mD8XYTAeUJvnIkcQX2VgiAHE=)
                          2: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: I4D4krkR7jx+Cq4tKKou8tXggy+YcNrNRis7GbsOcqI=)
                          3: UrlGR9v18F5T4YYElfr8yqGscS0.roa (hash: fj1TXr5g11+IfyDk1z4S0+oWVp/JX8PPHR9S29gA7PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e8:55:66:a7:42:5e:32:7e:eb:1b:59:88:25:ab:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
        Validity
            Not Before: Apr 27 11:00:59 2025 GMT
            Not After : Apr 28 11:00:59 2025 GMT
        Subject: CN=b52a8a6cfdd51224320ecec5afd7413a6d3da23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:75:b5:b4:82:85:a1:66:48:69:2c:ff:0d:
                    77:d6:da:e8:2b:f0:14:2a:47:8c:7a:f9:09:24:ae:
                    28:7a:f8:63:08:87:ef:87:c3:8b:2e:8a:af:fb:33:
                    83:80:58:eb:00:2a:ca:b6:96:43:88:64:5c:46:d2:
                    c9:38:fb:aa:02:46:35:67:38:1a:cf:b1:d3:7f:01:
                    85:df:7b:b3:70:97:54:7f:e4:45:6e:91:6c:96:99:
                    48:f5:1d:d3:9e:f8:4a:81:bb:62:db:87:0f:05:9e:
                    a6:b4:78:51:cd:5d:9a:88:37:ba:31:87:f5:db:7f:
                    be:52:5f:60:6b:65:6d:b5:6c:d1:b2:b2:04:79:b5:
                    4e:7c:8b:92:55:05:e7:3f:2b:d8:d8:ee:89:bf:c8:
                    55:ab:1c:46:bf:1d:a8:e5:23:c6:28:b5:e4:11:7a:
                    b6:2d:a9:68:3e:11:49:46:98:7c:30:d3:30:f1:5e:
                    9a:55:c8:b8:c7:41:31:82:32:18:b7:62:ed:8c:d5:
                    76:8b:4a:df:48:c9:05:9b:5f:fb:6c:15:c7:b2:73:
                    69:1f:3b:3c:e6:40:e5:af:fd:33:d8:04:0e:24:50:
                    e7:2a:ae:ce:c2:3f:6f:58:41:6a:22:15:9e:31:d4:
                    57:01:51:32:66:60:67:f2:37:7a:66:e5:82:bb:fd:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2A:8A:6C:FD:D5:12:24:32:0E:CE:C5:AF:D7:41:3A:6D:3D:A2:3D
            X509v3 Authority Key Identifier:
                keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2e:6b:d0:20:92:56:3c:98:2a:6b:81:5e:60:09:f4:c9:8d:
         f8:d3:86:c6:3c:b1:51:80:14:79:55:fd:82:c9:29:58:13:df:
         ae:2e:ed:03:c3:52:d7:cb:9f:37:d0:7c:4f:b0:48:ce:ef:fb:
         b4:03:b1:cc:ca:8e:dc:a5:07:f3:ef:70:f5:80:d5:eb:d4:1e:
         43:72:d0:46:5c:6f:60:b3:e2:77:41:43:de:f6:f7:aa:37:0a:
         39:bd:ad:23:26:9b:f1:f0:6a:aa:9f:42:81:7c:31:4f:22:e7:
         8d:57:cd:0b:70:e5:c1:6d:a3:ca:26:15:37:52:a0:1f:87:a8:
         06:57:d3:6d:69:42:5f:1b:2f:84:90:97:5e:99:bc:21:60:1c:
         03:61:c4:33:ec:fa:d6:3e:d7:a4:2e:e5:93:74:13:1a:cc:26:
         81:d2:9f:20:7f:94:dd:de:2a:83:3f:1a:00:75:79:6a:5a:49:
         29:26:46:c7:89:88:0f:38:e1:a8:95:bd:0a:88:c6:97:13:d0:
         99:26:b3:d7:d8:0f:6b:90:72:a6:2f:8d:e5:ab:04:ae:fc:1c:
         c7:69:c2:2c:04:f5:8d:a6:b1:e4:a4:2b:9f:a8:b2:23:9e:41:
         78:b0:89:66:b0:7e:52:95:35:44:77:f0:54:f6:63:5f:08:20:
         54:fa:71:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:23:53 2025 by rpki-client