Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File:                     TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier:          V0QgvCkA1jkoz5ovF7kzpf/mD9SIkZBDJ9calnJRLJU=
Subject key identifier:   77:1D:61:DB:7F:EF:B7:9A:28:5A:B8:AF:A0:68:0E:D1:F1:B0:D9:F9
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer:       /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial:       019679E90783FA3217BB12E72273A1A66F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number:          07D3
Signing time:             Mon 28 Apr 2025 01:00:37 +0000
Manifest this update:     Mon 28 Apr 2025 01:00:37 +0000
Manifest next update:     Tue 29 Apr 2025 01:00:37 +0000
Files and hashes:         1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: yrt8R6UHn+5WvbG+ydmdyh99GOCppBtcgC6EMn6yoPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:07:83:fa:32:17:bb:12:e7:22:73:a1:a6:6f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
        Validity
            Not Before: Apr 28 01:00:37 2025 GMT
            Not After : Apr 29 01:00:37 2025 GMT
        Subject: CN=771d61db7fefb79a285ab8afa0680ed1f1b0d9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1b:48:0f:bb:13:03:6b:7e:60:23:94:b4:2f:
                    84:dc:6a:e6:f4:f9:a2:6c:60:b9:9e:11:85:84:62:
                    56:b0:2c:07:95:6f:4c:b7:66:3c:b1:f3:91:23:77:
                    e4:ba:5b:ce:d7:5a:5b:76:ed:4a:22:44:6c:7f:d6:
                    ba:e9:ef:a9:9d:da:7c:4d:5f:a0:3c:0b:b9:97:9a:
                    bf:bd:38:fa:63:36:69:69:ce:07:a4:ba:05:85:44:
                    d0:6e:80:3d:ca:de:72:34:5e:02:1f:f7:d6:47:74:
                    c9:d1:35:a9:f5:ba:aa:2b:e3:63:67:f1:38:a0:09:
                    3e:e0:2b:e7:30:d5:93:b1:ff:c5:a9:28:c3:6e:7f:
                    34:0b:34:d4:98:de:dd:12:92:36:b2:d4:da:85:43:
                    48:9d:80:d1:d9:43:e5:ef:76:1a:28:0d:06:48:52:
                    95:ff:7f:2b:3a:33:68:63:03:a6:5f:63:a3:a5:fa:
                    65:07:bb:33:cb:99:94:92:b0:08:aa:9d:d3:96:2f:
                    4c:b4:e9:6d:a6:35:a7:45:63:9f:cc:88:71:90:9a:
                    fc:74:82:b5:86:8a:3f:fc:ec:10:e9:7e:ac:d7:74:
                    2e:71:b1:12:af:20:8d:3c:90:0b:dc:52:2f:4b:7b:
                    88:65:37:ce:5f:0a:0b:c0:60:ef:ac:09:23:f6:99:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1D:61:DB:7F:EF:B7:9A:28:5A:B8:AF:A0:68:0E:D1:F1:B0:D9:F9
            X509v3 Authority Key Identifier:
                keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2b:e1:bb:ce:ee:53:ca:c2:b9:c9:6f:88:55:b9:f5:39:5d:
         c4:c3:8b:45:1a:a4:f8:7c:f7:af:d6:77:ed:9d:f9:32:7b:b7:
         65:78:ba:5c:92:a3:e6:63:db:c2:16:8a:ef:7a:1c:c6:66:64:
         27:59:1f:46:79:a6:f4:c8:25:ab:6c:ad:eb:3a:90:35:38:0a:
         66:12:7d:65:37:57:90:4b:c4:fd:33:c7:4e:c3:f8:94:89:ca:
         1b:c8:42:5e:39:a2:61:ac:62:a9:ab:63:dd:9a:9f:45:f7:b6:
         01:35:a3:04:a9:d1:b4:33:d2:7a:0a:fc:93:e4:b7:21:4a:41:
         ba:b3:0e:d7:53:07:bd:7a:f6:60:a5:3a:f1:23:2f:34:ec:01:
         6d:ea:d5:d7:8f:68:28:ad:90:ac:23:59:80:ab:d6:8f:ec:b5:
         c5:59:fa:19:18:3d:70:98:ba:de:6c:b1:be:fd:a1:4c:57:44:
         ee:1c:a9:21:67:1a:8c:9b:28:6c:22:40:00:60:6b:e5:38:d8:
         c3:58:da:ad:51:8b:97:6b:e5:5f:d0:ba:b5:6e:8d:54:44:d2:
         6c:d7:25:35:0d:a1:6f:ec:fa:5f:46:ac:74:f4:88:e5:5d:46:
         89:d7:6e:3b:72:c3:ca:82:5b:17:19:3e:1d:59:11:e0:d2:49:
         22:7c:99:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:52:31 2025 by rpki-client