Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File:                     TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier:          enkiT3MigvkjQVT+pkLNDwlyjT4l5TyyurxH5DkAdHs=
Subject key identifier:   F4:8D:32:68:47:01:2D:34:A3:10:73:74:77:3C:5E:72:98:82:BD:CD
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer:       /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial:       0197692A1578CBD2FD2F5FBF403063DFFBF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number:          0270
Signing time:             Fri 13 Jun 2025 12:00:55 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:55 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:55 +0000
Files and hashes:         1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: wuW+Uz+h383evaEVTfy95Ao+VFlTxfbIuvNekfqwrfo=)
                          2: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (hash: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:2a:15:78:cb:d2:fd:2f:5f:bf:40:30:63:df:fb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
        Validity
            Not Before: Jun 13 12:00:55 2025 GMT
            Not After : Jun 14 12:00:55 2025 GMT
        Subject: CN=f48d326847012d34a3107374773c5e729882bdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:4a:2a:d6:4d:af:ec:45:fb:f6:78:86:65:
                    04:16:66:af:42:a2:05:d9:0a:67:38:f7:4f:c3:b7:
                    db:b7:ae:be:8a:ca:9a:82:70:31:b6:17:22:16:7d:
                    e6:7d:b0:80:4b:e1:ec:3b:82:3a:69:03:0f:72:f6:
                    32:54:c6:f1:97:af:84:59:06:5d:e3:7f:79:fe:c5:
                    a3:93:8d:0d:52:46:73:09:17:2f:15:97:bd:00:dd:
                    a4:58:c8:44:5a:b6:84:ad:da:87:a9:2b:c4:ed:42:
                    51:00:00:bf:f9:82:85:1e:20:dd:3b:a2:0a:3a:c8:
                    98:14:10:98:a4:bc:e9:15:fa:51:40:6b:92:0d:8f:
                    00:06:76:e6:4c:49:36:67:83:c2:7f:b0:df:ef:26:
                    e2:76:95:03:29:b0:95:bb:ef:8a:6a:d5:f6:0d:33:
                    85:85:0f:8b:b4:e7:8c:a1:cd:eb:15:cb:ed:24:ee:
                    77:eb:b7:04:03:5f:29:2f:b1:d7:eb:2c:af:c1:9a:
                    72:aa:f9:2c:32:ef:9b:32:8a:45:fc:7c:67:8d:64:
                    88:1f:7d:c0:f8:fa:93:71:85:4b:fb:2f:d2:e4:0e:
                    30:6c:fc:2a:61:7c:61:27:c4:89:10:45:b7:3c:70:
                    40:df:d7:99:0f:e0:00:82:8c:5e:e2:81:25:47:40:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8D:32:68:47:01:2D:34:A3:10:73:74:77:3C:5E:72:98:82:BD:CD
            X509v3 Authority Key Identifier:
                keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:f8:d0:5a:4b:14:d3:88:ee:54:6b:c8:fa:a5:5f:8b:54:
         0d:bc:7d:d3:c1:e0:15:0c:9f:bd:8f:7e:13:82:23:c8:57:29:
         a2:6a:cf:d0:d1:bf:e5:d3:05:76:f3:ca:2e:5d:26:f3:4b:f2:
         3e:b4:ee:cb:2f:f8:85:e5:39:14:2e:e8:02:ca:13:c1:f7:83:
         85:5d:f1:83:d1:6b:dd:b6:d1:96:b7:7e:07:0d:69:d9:c1:db:
         49:81:fd:58:35:c2:9f:e7:d2:5c:a6:1c:73:86:19:7c:15:00:
         6a:5b:e8:9a:b3:f8:cf:cd:5b:a6:54:98:c1:0e:49:64:b8:fc:
         d8:3b:b2:c9:a4:4b:41:00:5e:9b:6f:da:37:29:2b:83:50:77:
         15:e9:d9:f9:6e:1f:bc:a3:98:30:0c:4c:f7:52:f6:86:4d:fb:
         fa:6a:f3:54:b5:59:44:87:0b:0a:61:6c:ba:e4:8a:a9:f7:99:
         8e:c6:7d:81:cd:94:da:ae:48:0c:76:de:b7:ff:42:7f:04:b5:
         e3:d5:1f:1d:91:ae:29:c8:f4:89:a0:61:32:ce:b6:62:67:70:
         84:20:ed:9d:36:ed:79:7e:38:a3:11:50:97:c4:c8:cd:b2:36:
         85:1c:8d:d3:73:a8:3c:56:da:cd:d0:df:8b:88:1d:eb:bb:b7:
         e6:b8:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:28 2025 by rpki-client