Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
File:                     TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft (raw, json)
Hash identifier:          r+N0255TD/DLp+kMB+zkMfd9B/WAJuB4gq/unrw0TkQ=
Subject key identifier:   81:FB:0A:9C:24:A9:D7:C5:6E:E0:8C:9B:E9:AA:DD:32:D0:7C:F1:76
Authority key identifier: 4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
Certificate issuer:       /CN=4e7856d295580936916a553fb9bfb59f3a176804
Certificate serial:       01976CCF6EE3467C170F5235006699EC4E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
Manifest number:          31
Signing time:             Sat 14 Jun 2025 05:00:22 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:22 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:22 +0000
Files and hashes:         1: PQkIeE659gopb00eRM_lG80Gc8o.roa (hash: jYp7n+Hnf2RwdwBfym+F/7I14DXBfuEPAe6US1OGNLE=)
                          2: TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl (hash: x0u5vcUFCQFMOzWrmpUoDatVpZfM57o7jdk3Z+lUOLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:6e:e3:46:7c:17:0f:52:35:00:66:99:ec:4e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7856d295580936916a553fb9bfb59f3a176804
        Validity
            Not Before: Jun 14 05:00:22 2025 GMT
            Not After : Jun 15 05:00:22 2025 GMT
        Subject: CN=81fb0a9c24a9d7c56ee08c9be9aadd32d07cf176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:db:50:22:86:7d:7f:7c:bb:23:fe:32:29:
                    0c:3a:ae:0c:56:eb:f8:2c:c1:d1:6a:b2:d7:27:78:
                    27:d7:0f:3d:d3:38:1a:76:d7:4c:f7:50:18:a4:81:
                    c8:33:b2:7b:51:ce:d9:4d:39:25:2a:88:cb:bc:d7:
                    92:62:81:0e:42:46:34:af:dd:18:22:0d:3c:8a:9f:
                    dd:83:a2:85:4c:ae:1e:f9:d0:ef:ab:0e:bf:00:7f:
                    69:f9:f5:c0:f3:75:3d:1e:b2:28:97:ab:37:17:1d:
                    36:df:ab:59:cb:ff:08:ec:95:98:71:36:8f:32:37:
                    8e:67:b1:f0:f5:54:60:02:e5:b9:75:89:70:33:57:
                    fc:88:bf:ec:45:a9:22:1b:83:7e:30:0f:b3:5b:c3:
                    3e:56:00:4d:cd:a8:9c:48:36:34:57:9b:d1:90:02:
                    0a:49:15:60:43:ec:2f:80:70:89:ee:a3:65:ac:49:
                    b5:65:40:c6:ca:18:82:59:6b:3e:33:50:22:5a:c5:
                    29:13:54:9b:3e:a9:97:91:ca:08:b0:1e:68:fa:d2:
                    f1:ce:7a:47:dd:5e:15:61:38:31:47:d7:a2:09:bf:
                    6d:6c:25:63:34:e9:c0:08:73:a6:7d:16:49:ad:f2:
                    1d:02:83:90:c2:66:f2:e2:1c:2f:e7:2b:ca:70:55:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FB:0A:9C:24:A9:D7:C5:6E:E0:8C:9B:E9:AA:DD:32:D0:7C:F1:76
            X509v3 Authority Key Identifier:
                keyid:4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7e:be:20:e5:26:3a:b0:17:08:0b:1b:23:23:ee:a8:a9:08:
         2c:60:1e:5c:d0:62:81:f3:f9:33:b1:f6:cd:82:63:76:e1:e6:
         32:71:ee:fb:09:16:1d:6f:b1:76:a2:53:80:bd:03:bf:af:ca:
         36:f6:04:dc:91:14:65:15:bc:d5:14:43:d1:0c:6c:bb:05:7e:
         c8:4f:c7:cc:79:8e:fb:71:51:8b:82:d0:1e:c9:37:c7:55:c6:
         3a:12:ad:ad:c8:fd:bc:fe:fd:82:0a:00:d9:88:6d:d3:31:12:
         33:f9:4b:17:29:88:fa:c9:41:4e:9a:57:4f:a5:01:51:b1:96:
         e0:89:42:e3:bb:e8:68:57:49:e2:2e:61:11:bb:53:d1:49:47:
         bd:e4:92:f7:fa:1c:9f:43:3e:45:60:63:ff:c1:3d:ca:d4:d4:
         0e:6f:80:93:4a:32:cd:b8:ae:d5:80:a0:b5:4a:81:00:a1:01:
         31:f1:04:50:fa:d6:13:01:10:3b:41:65:2c:2b:ed:3a:bb:b6:
         c6:f6:14:5d:fb:ca:20:1a:ce:41:ed:cd:85:8d:e3:d7:ee:f1:
         ab:58:2e:0b:83:4f:f9:c7:37:11:f9:99:2e:7f:51:89:e8:b1:
         59:08:b1:5b:16:f6:74:a2:a0:10:c9:a3:7e:67:18:b7:b5:0f:
         39:b5:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:07:15 2025 by rpki-client