Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File:                     TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier:          511Dek52vgp5wiRgVEnoSKTtCP4EIjIJ5t4WYzC0wts=
Subject key identifier:   4C:92:AF:FB:D5:E4:12:77:F4:68:05:5F:A0:9C:8A:09:00:68:9C:50
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer:       /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial:       01977376ED88E16873F9CC3F40F6E7ADBA1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number:          151B
Signing time:             Sun 15 Jun 2025 12:01:03 +0000
Manifest this update:     Sun 15 Jun 2025 12:01:03 +0000
Manifest next update:     Mon 16 Jun 2025 12:01:03 +0000
Files and hashes:         1: 8G7CKA2HbZHRoNb9HaqBloS90vU.roa (hash: lDvm+Nsn5gFxpzefNnpEbQ5VLuNGtuV4rwnVopzkwq0=)
                          2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: cQ4164VL8zvNPc6sNXCRS3QL/DZ0WC0quCbmtWDgHM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:76:ed:88:e1:68:73:f9:cc:3f:40:f6:e7:ad:ba:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
        Validity
            Not Before: Jun 15 12:01:03 2025 GMT
            Not After : Jun 16 12:01:03 2025 GMT
        Subject: CN=4c92affbd5e41277f468055fa09c8a0900689c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:c5:de:7b:3f:9f:3a:c4:0f:24:fc:52:10:
                    9a:ce:57:2d:a0:07:0c:4b:43:2a:a0:ed:cb:e1:b6:
                    2f:b5:b1:03:32:b3:66:d9:42:ab:1f:63:08:01:c6:
                    67:4e:71:2d:6d:68:d4:2b:61:3e:5f:08:e9:70:a9:
                    51:2f:e0:11:4b:58:11:ca:c0:50:be:fc:fd:cb:49:
                    b9:da:f7:5d:09:47:78:4f:0c:1c:22:fc:ba:85:de:
                    3a:92:f4:dc:d3:a6:55:4e:8b:d6:56:62:01:f8:68:
                    a4:ae:33:20:cc:bd:da:0b:90:39:eb:c0:49:f1:66:
                    8a:16:44:47:e3:bb:1b:42:ec:97:fc:96:00:0e:c8:
                    c9:a2:8e:a0:71:85:a7:5d:51:04:7c:b7:6e:64:54:
                    3d:3d:9f:d9:90:6d:ec:e0:11:4b:bf:4b:cd:c2:41:
                    1b:19:37:bc:55:6a:78:22:20:53:10:ae:67:6f:37:
                    ca:e0:9f:c4:ff:2b:3a:78:72:f6:ca:74:4f:74:fc:
                    db:d1:cb:df:4c:c8:56:4c:1b:bb:73:72:5d:32:9c:
                    52:de:67:ea:4c:34:67:01:5c:6b:78:26:c6:21:ca:
                    11:88:83:90:1c:69:64:8a:ff:a7:7f:ba:93:38:5c:
                    c9:b2:af:e3:4a:0b:3a:61:6f:b1:dd:e5:fd:64:3a:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:92:AF:FB:D5:E4:12:77:F4:68:05:5F:A0:9C:8A:09:00:68:9C:50
            X509v3 Authority Key Identifier:
                keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:90:28:52:98:1e:81:52:c9:8a:79:c5:54:42:c1:6a:31:1b:
         0c:67:23:84:fe:27:7c:42:da:80:8e:8f:3a:43:81:6c:87:ef:
         13:69:d1:d3:68:99:e9:3c:4e:87:dd:3c:36:9d:e1:45:7a:e4:
         ec:71:c1:9d:a9:45:5c:c7:82:61:f9:44:84:17:ca:11:02:80:
         0b:2b:21:bc:fd:9a:55:bb:49:a0:4e:75:ae:b4:1e:33:71:6e:
         f2:7c:b4:7c:2b:e7:fb:56:31:02:7b:d1:08:b0:c5:19:9b:e9:
         4e:cc:9d:75:2a:e6:3d:54:39:24:b9:47:84:14:e5:f8:3c:8b:
         d3:06:32:b6:60:ba:8f:ba:e8:09:85:12:b8:e2:96:8a:9d:e2:
         44:82:a0:d7:f4:13:04:6e:4c:b8:71:0a:fb:5a:cc:be:63:ad:
         7d:62:7e:c2:c4:30:23:cc:d7:a9:07:9b:39:51:05:b7:27:36:
         30:ea:f2:1b:bf:ed:4d:79:84:9e:94:ee:c5:21:eb:c3:fc:64:
         3f:71:ac:02:60:f2:a5:e5:63:6f:f0:ca:2f:58:e9:1b:32:74:
         8f:ba:8b:16:ad:ea:31:9e:c6:0d:2a:c7:e0:d6:9a:23:b9:62:
         22:d7:2d:ee:cc:ec:f1:1a:d9:09:ee:2b:a5:ea:f7:7d:c6:4a:
         80:3d:3b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:56:19 2025 by rpki-client