Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File:                     TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier:          hQzs+bvWbtJf/s8cTycZroIwctrtZa6sy3iMdeL6TZc=
Subject key identifier:   A8:46:06:A4:97:CA:1F:D7:63:72:37:92:D9:22:89:B7:D3:6A:B2:01
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer:       /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial:       01976C989A09B3FCA43B404D205246B2A2F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 04:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:29 +0000
Files and hashes:         1: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: hylh4S37RZti5DrCFImoD7fhnAd9vTVEEHWU/l9geOA=)
                          2: _2jPSPlgYJsD4ywwlbMtnQzhjck.roa (hash: dPt4vhrAZj1gNIW23Wk2/nT1GhYcZvAFuVHXtMeqVMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:9a:09:b3:fc:a4:3b:40:4d:20:52:46:b2:a2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
        Validity
            Not Before: Jun 14 04:00:29 2025 GMT
            Not After : Jun 15 04:00:29 2025 GMT
        Subject: CN=a84606a497ca1fd763723792d92289b7d36ab201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7b:0d:64:d5:3e:ad:02:a5:63:bb:77:cc:8e:
                    19:22:26:3c:28:67:fd:44:62:93:10:30:46:8e:4e:
                    d8:94:c9:c7:b3:35:49:c3:62:5c:2c:64:68:a4:ac:
                    0d:da:72:02:14:e6:a4:a3:37:fe:cc:a0:32:6b:3b:
                    45:0d:c2:20:b1:10:f9:41:77:94:56:5e:10:c8:3f:
                    9c:07:45:77:50:2a:15:fb:7c:5d:aa:aa:e2:51:a6:
                    58:fb:e3:ef:09:f4:b6:0e:8b:4d:d6:f9:90:a8:57:
                    03:dc:e5:16:12:a2:22:f7:58:5a:47:6d:4f:95:a8:
                    f4:b5:fb:21:00:96:80:cb:b4:89:97:9f:87:09:69:
                    81:d6:0f:6a:11:7e:02:3b:5e:19:c6:da:48:ee:1d:
                    93:82:73:0a:e5:70:cd:c6:db:31:c8:60:4d:c1:88:
                    43:28:6b:b2:87:70:f1:75:c3:56:49:f9:04:ac:25:
                    5f:99:e7:4e:8a:86:46:00:80:bd:da:e5:72:63:9c:
                    ee:7e:03:d4:d5:52:b2:db:a8:4e:b7:5a:e2:ab:d8:
                    a2:15:fd:87:8f:ce:83:5b:56:42:08:bc:78:43:2e:
                    78:4a:29:ba:90:d9:1b:16:63:13:c5:54:a2:d3:93:
                    6a:df:f0:75:4d:98:9b:90:55:90:a9:e7:17:e7:b3:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:46:06:A4:97:CA:1F:D7:63:72:37:92:D9:22:89:B7:D3:6A:B2:01
            X509v3 Authority Key Identifier:
                keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:bb:05:f5:53:2e:8f:cf:8a:0c:59:57:d9:ca:8e:e5:ab:5c:
         ff:51:30:0f:92:90:07:df:a1:69:e4:28:98:da:c7:23:04:e8:
         46:01:39:9f:4b:e5:a8:2e:73:1e:9e:14:b1:ad:11:5e:78:2a:
         5d:76:fa:1b:f9:e7:a7:1a:12:0c:80:4a:61:3d:3c:1e:1d:b1:
         df:64:56:d0:b8:f1:33:40:d4:a8:74:c1:c9:4a:9d:5b:dc:94:
         6d:13:77:9c:7e:22:72:76:37:7d:54:f6:c1:f4:b8:e4:c0:d6:
         87:fd:2f:71:bb:8d:d3:82:77:73:1e:a0:52:15:ca:e4:e2:b3:
         2f:70:5d:2f:37:2a:6d:5a:51:d9:87:2e:c8:9f:9f:14:7d:16:
         60:9b:40:7a:1b:0a:d2:05:23:6f:b5:67:0e:ee:77:cc:d5:d3:
         a6:e4:48:df:fe:22:93:12:20:64:f9:19:6d:a9:19:9a:06:80:
         90:eb:d9:67:59:f9:1b:37:d6:f6:01:a0:04:f0:d0:32:be:fb:
         c6:50:51:ad:c5:84:5b:d9:93:23:ce:d7:e1:eb:67:95:de:15:
         fc:78:ae:5c:df:e3:7e:ad:80:b7:d9:55:01:a9:22:55:6d:2c:
         73:b4:4c:02:b1:c9:01:97:d5:a0:c2:85:3c:e0:62:b8:47:06:
         ad:4f:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:51:55 2025 by rpki-client