Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File:                     gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier:          tsy4CdxH/9nIrPV519uzZ8dMvGSqianomeRt119jZG8=
Subject key identifier:   61:12:EC:7A:4D:F0:F3:5F:09:DE:0A:04:A1:F2:8A:81:1B:D4:E0:B8
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer:       /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial:       01976D3D8AF462217399C8DB6F57C410BFAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number:          155C
Signing time:             Sat 14 Jun 2025 07:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:39 +0000
Files and hashes:         1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=)
                          2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: AqnYBA1uewVHC0f6bm/9quGD64Qh7cRzFsQtZaVfB6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:8a:f4:62:21:73:99:c8:db:6f:57:c4:10:bf:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
        Validity
            Not Before: Jun 14 07:00:39 2025 GMT
            Not After : Jun 15 07:00:39 2025 GMT
        Subject: CN=6112ec7a4df0f35f09de0a04a1f28a811bd4e0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:df:23:da:03:fc:d8:87:72:59:da:1c:df:
                    e9:09:3b:90:c7:7d:01:05:75:35:33:65:6c:d2:de:
                    31:48:92:05:e8:c6:b8:51:b8:b8:85:8f:0b:7b:2c:
                    5c:c2:a1:f4:83:0e:14:e2:71:8e:5e:d4:7c:96:b4:
                    e1:d0:f8:65:ef:90:ab:a6:7d:8f:ec:d6:f1:ee:8d:
                    b5:4b:bf:fb:0c:1d:21:75:4a:49:96:fe:10:b4:dc:
                    c7:fc:c2:5b:c2:ab:dc:5f:1c:a4:a0:37:9b:f2:7b:
                    66:b3:53:2d:80:8b:f4:62:4b:4b:57:96:ca:ed:dc:
                    4b:36:b4:5a:36:73:38:15:bf:42:8e:7b:55:e3:57:
                    9c:15:a9:48:81:65:fc:b8:21:9e:d4:fe:f4:8a:ed:
                    88:0c:06:2b:da:bb:c4:68:d2:a5:62:25:cf:fa:9b:
                    fe:c4:b2:1f:e9:1f:5d:77:cb:86:0e:39:21:82:a1:
                    cc:14:ca:29:04:02:9c:84:d2:10:86:41:02:8b:25:
                    8c:5d:e5:fb:04:d3:ee:fe:a1:25:c9:84:13:52:f5:
                    57:4a:ef:3e:13:c4:b5:f6:ff:20:ab:bb:42:16:e5:
                    ba:75:f0:d0:a1:21:d1:3e:f6:95:9b:36:81:da:39:
                    be:1f:a5:aa:85:2f:75:3f:5f:c7:92:16:c7:a2:27:
                    2f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:12:EC:7A:4D:F0:F3:5F:09:DE:0A:04:A1:F2:8A:81:1B:D4:E0:B8
            X509v3 Authority Key Identifier:
                keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:08:90:3a:59:19:cf:61:bf:42:c4:fa:aa:4f:4f:cb:01:8e:
         b2:19:3a:85:03:0f:ec:ba:31:e8:a8:96:92:f6:2d:6f:35:b1:
         c0:23:9a:13:4b:88:4e:eb:fa:46:2c:4c:39:8e:8a:bb:21:69:
         d7:e2:4e:99:68:40:23:a6:0a:7e:d2:09:52:39:5c:ff:9d:ea:
         44:f2:9f:bf:ee:26:a7:10:b0:cd:23:fd:5f:ef:11:bf:ed:02:
         98:45:07:e1:57:4c:e4:fd:93:0b:3e:1a:25:6e:2b:42:bf:4e:
         7e:51:fc:20:23:bd:3e:ee:6a:8a:d2:8f:9f:94:c5:45:05:23:
         47:71:4f:b0:6a:51:6c:fd:26:4a:b5:ac:d9:6a:1e:9f:6e:29:
         9c:99:c9:9a:19:43:06:7b:f9:15:3c:79:65:aa:a7:36:71:62:
         5b:f7:08:f5:88:4b:59:1a:1c:46:f9:cd:85:c5:f7:07:83:dd:
         18:74:a5:a3:6c:57:27:ae:82:2e:1d:3d:55:a0:65:d9:72:d5:
         7f:9b:5f:5f:06:a6:1e:c6:91:58:b9:4c:52:9c:e7:c1:71:35:
         f0:22:30:05:fd:68:f7:61:23:b1:df:08:39:6f:f9:70:88:7c:
         46:3d:7e:88:7d:4c:d0:e0:39:1c:07:7d:5c:20:4f:bf:bb:90:
         76:d2:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:50 2025 by rpki-client