Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File:                     TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier:          ud54MiKuXO5CKSqNZPfjMXMAyXWedsxNxQAzk+GpBic=
Subject key identifier:   F0:BC:EF:0D:32:97:E7:65:08:E6:B1:10:15:49:25:9B:30:E7:42:D5
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer:       /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial:       01976FD0C4C5B009B457F151FD7FED2BD249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 19:00:42 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:42 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:42 +0000
Files and hashes:         1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: TkcNj8G2Kau+RDD8o+rt834Qj8YTsbApUGIgkqSrsuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:c4:c5:b0:09:b4:57:f1:51:fd:7f:ed:2b:d2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
        Validity
            Not Before: Jun 14 19:00:42 2025 GMT
            Not After : Jun 15 19:00:42 2025 GMT
        Subject: CN=f0bcef0d3297e76508e6b1101549259b30e742d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5c:20:65:a5:1d:10:c2:c6:b0:94:25:db:be:
                    5b:b1:ed:59:c3:14:d1:9c:a1:88:bf:ca:68:6f:f1:
                    07:5b:0d:b8:46:f7:c8:3a:a3:07:0d:aa:f5:ef:39:
                    62:05:f9:12:6f:ea:50:82:8c:aa:50:49:e4:0a:2d:
                    32:33:ce:d8:1f:7c:05:2c:e5:4f:13:0c:31:ef:0e:
                    59:32:5c:0c:4d:aa:89:f2:a3:cc:e1:bd:a2:bc:d2:
                    1d:95:30:1e:84:31:94:c5:d9:2e:41:8f:72:a7:0e:
                    62:e9:f9:ba:a0:72:0a:cd:0f:dc:72:10:a2:32:49:
                    90:a8:16:94:84:94:26:ce:47:ee:9c:26:b1:e1:ee:
                    9a:a0:d1:8b:11:5d:d1:61:16:48:1e:a6:5c:90:5b:
                    e1:45:7a:93:b6:34:ca:29:cc:23:13:70:ca:33:31:
                    00:d7:11:4e:64:8e:cc:8c:79:72:3b:bb:df:5b:42:
                    8d:bb:ec:e2:cc:97:94:17:dc:54:fa:92:03:83:ce:
                    71:f2:4b:f0:be:a6:e4:49:1d:40:50:a1:56:f5:5e:
                    7f:44:b9:b7:57:68:37:47:01:97:67:35:f5:19:df:
                    1d:77:2b:96:48:78:36:77:85:0d:c4:dd:58:30:2e:
                    91:19:a5:3d:69:11:a7:5c:8d:1b:ff:47:39:8d:90:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BC:EF:0D:32:97:E7:65:08:E6:B1:10:15:49:25:9B:30:E7:42:D5
            X509v3 Authority Key Identifier:
                keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:12:e2:81:90:46:00:f1:32:8c:c9:af:f4:fc:94:49:16:0f:
         b6:2a:ec:06:0e:dc:86:9f:ea:51:51:b9:4f:0d:80:86:44:0f:
         48:74:79:ba:a0:7d:c7:11:d0:87:fd:c3:6b:7e:e2:c4:9e:6f:
         24:17:9f:74:8b:8a:19:cd:8c:c0:3a:2b:5c:c9:33:8f:0f:c5:
         f1:0b:16:76:2a:20:84:42:38:84:f0:cd:c4:fb:1d:73:a2:5d:
         a0:c0:95:9e:7a:da:f5:22:2b:70:6c:2a:7e:71:05:ac:55:35:
         68:29:5a:25:69:f9:b6:93:9c:46:f6:47:c5:b6:e3:52:00:68:
         81:a0:1d:5c:7c:47:ae:42:63:c2:61:24:90:d5:06:0c:ee:06:
         f9:28:c0:c6:b3:7f:2a:9b:48:35:1a:e2:80:4e:2b:de:a7:e2:
         e4:7e:cc:c7:65:40:c5:09:7b:f4:c7:9e:d5:ad:48:b3:a5:6b:
         92:ac:e8:52:ef:11:15:5f:8f:89:9a:d8:20:ee:cc:16:d4:7f:
         a8:8c:73:f1:b5:df:96:fa:97:90:66:18:2a:28:2c:48:be:26:
         6c:d9:f1:51:c9:18:3d:fc:02:34:7b:40:65:99:84:a1:c5:3e:
         ab:01:d5:33:da:f7:42:67:57:cb:7c:70:b9:f6:ce:2e:4b:9f:
         7e:77:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:05:33 2025 by rpki-client