Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File:                     TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier:          qlNIlHWRSMBDP0gQdFcn7t7HczaO0SDVN7qb1JByhDM=
Subject key identifier:   70:31:6B:14:E5:DC:6C:CC:32:51:86:91:B0:C0:00:16:9A:CE:30:66
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer:       /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial:       0196789F2CAD03CFC9B797788BE743BCDE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 19:00:19 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:19 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:19 +0000
Files and hashes:         1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=)
                          2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: a7F/9dFU4H5q6dP75DnSkX+9Xcnnk5em/PKAO6H5YIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:2c:ad:03:cf:c9:b7:97:78:8b:e7:43:bc:de:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
        Validity
            Not Before: Apr 27 19:00:19 2025 GMT
            Not After : Apr 28 19:00:19 2025 GMT
        Subject: CN=70316b14e5dc6ccc32518691b0c000169ace3066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:33:48:21:e6:2e:be:05:27:d6:4e:2d:37:
                    1a:cc:2f:28:c3:3f:53:d2:65:fa:cc:86:08:f2:1d:
                    e2:81:f0:82:f3:6d:a8:15:9d:a6:f6:31:41:4a:4d:
                    d8:64:00:69:ba:79:3f:76:e6:30:07:14:2f:d5:f1:
                    1e:41:a5:ed:1c:4b:b4:fd:93:59:93:50:21:58:64:
                    04:ca:e9:01:bd:63:ac:cd:ea:f7:6e:73:c3:24:3f:
                    02:6b:9f:62:2f:13:19:f4:1e:68:1f:40:f8:01:eb:
                    ea:59:b3:68:72:5d:b6:af:c9:04:26:2f:49:ae:28:
                    c3:b9:74:a5:4d:87:d1:71:08:e2:0e:2f:c6:f5:88:
                    db:e3:03:d2:d1:03:eb:b9:b3:9b:b9:a1:8e:1d:36:
                    33:c1:3c:a1:97:5a:2c:78:5a:25:52:f0:4e:3c:9f:
                    f3:07:6b:34:c4:16:d7:d8:af:15:02:6f:66:4e:16:
                    ea:22:b8:0c:92:ff:cd:35:01:45:a3:a4:23:44:38:
                    8e:3b:3b:6f:07:3e:81:fe:8d:61:69:5b:59:45:0e:
                    4d:27:bd:6b:a8:e0:49:67:77:9a:6f:83:24:ae:87:
                    c8:8b:0f:9d:9c:08:9b:a3:7e:5d:2d:7a:48:d2:d0:
                    b5:b2:0f:66:eb:45:6c:e2:f3:78:6b:35:f8:4b:b6:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:31:6B:14:E5:DC:6C:CC:32:51:86:91:B0:C0:00:16:9A:CE:30:66
            X509v3 Authority Key Identifier:
                keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:5f:a1:c2:9c:0d:44:64:6d:a7:26:89:69:98:1f:de:8d:
         48:d9:04:47:e1:02:57:7d:b8:c9:2c:61:43:03:56:f1:b1:38:
         84:b0:e8:b2:93:df:4f:83:84:c7:bc:45:f4:ce:40:ca:08:1a:
         e6:b4:aa:da:2a:53:9c:25:ca:53:13:1a:af:71:1f:19:1d:04:
         fa:40:8e:db:77:9d:91:a0:b3:d7:70:a8:ea:8f:04:4b:6d:ac:
         4b:6a:fa:08:6c:37:99:8e:cb:46:4d:30:5d:e4:5c:42:33:ca:
         a5:e3:d3:f5:c6:59:ed:e6:90:bd:1b:91:ae:5a:af:90:ff:63:
         52:c4:d0:a7:75:9f:a9:3b:53:9d:ef:06:a6:c6:41:fe:29:8a:
         d2:83:5d:cc:7c:3b:3a:62:99:71:42:c5:63:38:1c:ce:aa:e2:
         bb:3b:8e:7c:99:72:2b:77:63:db:4a:a5:3f:8d:04:f6:13:43:
         94:2f:9c:c8:37:f2:65:20:52:87:cf:1e:32:f9:49:5e:fa:45:
         0f:b3:42:f0:4e:b9:b5:cb:6f:e6:d9:4e:ae:05:8c:16:ca:7d:
         54:07:36:ce:2c:b0:47:5c:81:80:99:79:54:05:09:90:6a:ff:
         c7:4f:43:cc:79:93:e7:79:86:0e:74:5d:b7:fd:13:ed:0a:b0:
         23:4a:cc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:56:51 2025 by rpki-client