Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File:                     tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier:          FlnVP/bAV4aacbnFWgiCuULA8xZi4zUPuZYYzykom6g=
Subject key identifier:   1E:FC:FA:9A:18:95:F4:99:F5:D6:6C:83:2B:16:A7:54:C1:0A:46:0B
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer:       /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial:       0197684E35CFE801A8937D75C3D318D2A216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number:          0759
Signing time:             Fri 13 Jun 2025 08:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:45 +0000
Files and hashes:         1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: r3oWFesCqllJ6x32iHGatu7CxwUO6KS/YtbdjgiPqt8=)
                          2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:35:cf:e8:01:a8:93:7d:75:c3:d3:18:d2:a2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
        Validity
            Not Before: Jun 13 08:00:45 2025 GMT
            Not After : Jun 14 08:00:45 2025 GMT
        Subject: CN=1efcfa9a1895f499f5d66c832b16a754c10a460b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:c5:69:be:c1:ec:50:00:b4:ad:37:b7:b5:
                    fd:d7:22:4d:03:26:a2:2b:17:88:18:3b:e6:51:de:
                    1b:87:fe:53:68:74:c1:b3:8f:cd:3e:c5:69:09:88:
                    59:c7:16:c5:36:57:22:82:77:d8:0c:74:53:58:75:
                    7e:4d:25:26:5b:12:51:06:26:b6:95:29:19:8f:8b:
                    7d:6e:b4:bc:4e:24:72:ce:66:4a:e2:86:19:53:49:
                    5e:89:bf:eb:f4:e2:f2:34:24:42:a4:73:92:f8:7e:
                    58:d6:6c:c5:d0:9f:76:de:56:63:dd:4b:b5:6c:84:
                    f6:66:c0:b9:91:11:0f:46:ea:fd:05:db:1e:27:5d:
                    aa:dc:4c:43:fe:a0:a0:84:0e:cd:94:04:8e:e5:7e:
                    ab:44:4b:21:cc:a0:cf:1a:83:da:bf:b7:08:06:91:
                    ec:8b:b1:37:be:87:e1:e5:3a:f0:48:54:e6:11:7f:
                    79:14:b3:51:3a:2a:d2:50:2c:12:43:e7:d4:f3:fb:
                    fc:a2:a7:f8:0f:9b:62:21:f3:32:ae:16:e6:fe:89:
                    ab:0f:a9:d7:0b:e5:b2:58:bf:0f:4a:a5:a1:cf:75:
                    6a:76:73:9e:cb:91:3e:c1:80:0d:ce:36:fa:55:c7:
                    89:4a:ce:8a:f7:84:8e:f3:60:8e:f0:5c:9d:5c:b0:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FC:FA:9A:18:95:F4:99:F5:D6:6C:83:2B:16:A7:54:C1:0A:46:0B
            X509v3 Authority Key Identifier:
                keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:66:3c:43:7c:3c:7c:ed:ad:0f:1e:54:90:37:b9:ae:1a:a4:
         a5:14:ae:3c:9f:ac:20:cc:7c:f5:f6:f8:4f:55:c5:b3:67:5d:
         8a:78:6b:b6:17:49:81:e8:02:ad:cc:5c:90:ff:f1:41:b8:15:
         b7:82:1c:8b:16:c3:a8:14:86:5d:81:52:9b:ea:28:b4:7e:b8:
         d8:d2:5e:5e:0b:64:8c:a1:37:58:00:ac:7b:f4:3e:b4:1f:fd:
         39:b9:3d:1b:62:e5:79:0a:3b:f4:54:af:b6:de:a4:af:46:cc:
         bb:93:cf:19:55:6d:d9:c4:9a:63:7c:6a:25:73:62:bf:8a:c2:
         cd:16:46:58:c8:e0:c5:01:d0:de:b1:17:da:fb:0b:bd:67:65:
         79:2e:51:ef:15:d8:a9:ef:66:0c:54:b9:b6:78:6a:f7:0e:25:
         f7:8b:0d:d1:7a:02:d6:66:fc:79:a6:a9:b4:4d:4f:a4:94:e4:
         c2:84:6e:66:c7:09:4f:32:1c:da:ba:dd:ba:04:91:63:58:25:
         49:55:22:9f:6c:f4:3b:5c:60:d6:df:03:65:23:7b:ce:90:c1:
         ee:b6:25:2d:c1:81:a5:80:0a:21:55:46:ae:df:8b:3d:6d:19:
         a4:1f:21:1b:9b:c5:38:43:76:81:cf:b8:1c:de:85:fa:77:87:
         01:16:fa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:51 2025 by rpki-client