Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File:                     GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier:          kzLbNi3x1qzQV/lZ95ibZI84+G4gIYcNRoiLxcoNdqM=
Subject key identifier:   28:54:E3:AC:72:6C:3B:1B:30:7C:01:CC:F5:41:21:7A:FC:BA:43:8F
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       01969303D03D9043C435960E9EB3F7F525DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number:          151E
Signing time:             Fri 02 May 2025 22:00:22 +0000
Manifest this update:     Fri 02 May 2025 22:00:22 +0000
Manifest next update:     Sat 03 May 2025 22:00:22 +0000
Files and hashes:         1: 3SDO9hGSLXcvKio5nucfHtpBZqo.roa (hash: UySF852N3LzIIXg+WlqkSuDwnOKj/L9pAk/WjttqTkE=)
                          2: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: ub/w6XZFfKYM+ub6WVDRPCRoeIbaV4/D14ZYlaxuz5U=)
                          3: QYv8HyZwcR2EgwyDNXO4DNm4alY.roa (hash: 4y8aidT7cf46oC9Rb8MtLIG+06WpyEeua6nqGV7vmw0=)
                          4: t3Zx6p1wvn7jY8kHjzfJnnc7eNg.roa (hash: OLIfG4z0xwuSo4+uWrBPz+WPutgwTrYoDXIoHunSp5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:93:03:d0:3d:90:43:c4:35:96:0e:9e:b3:f7:f5:25:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: May  2 22:00:22 2025 GMT
            Not After : May  3 22:00:22 2025 GMT
        Subject: CN=2854e3ac726c3b1b307c01ccf541217afcba438f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:13:a3:04:d7:48:b6:2c:05:42:45:a5:9d:54:
                    0e:4d:a0:93:f2:2b:0b:4e:94:6c:c2:0a:9a:02:e0:
                    b5:5e:ab:cf:5f:04:2b:ed:ce:87:2f:42:88:29:e4:
                    05:7f:38:b0:20:2c:f2:48:31:ff:98:11:49:28:72:
                    ab:f4:78:80:29:be:9f:c3:ab:e1:58:ad:9f:bd:17:
                    a3:16:a5:6e:e5:25:8a:03:e9:83:b6:4a:69:b1:27:
                    18:50:1a:03:47:b7:af:56:d9:f1:f8:4d:38:f1:e1:
                    fa:ce:bf:14:4f:a5:e1:a1:c0:a8:24:44:60:36:4d:
                    dd:2f:ad:41:5e:f8:86:73:e4:54:35:4e:d9:46:a9:
                    14:82:3b:3f:07:c5:20:d5:c3:0e:cd:a4:8d:fa:04:
                    90:80:be:30:00:44:ab:f8:57:db:05:39:6e:5c:8b:
                    ac:c7:4f:be:f5:85:a7:12:3b:f6:05:a6:46:9d:3f:
                    ec:49:9a:7c:c6:c3:29:fc:db:6c:0a:37:00:33:0b:
                    01:44:ae:78:e7:21:28:00:39:0e:b7:95:96:18:c5:
                    ed:74:b3:49:6b:b3:54:db:cf:40:be:7f:2a:1f:84:
                    b0:1a:21:f3:b4:e1:80:15:f0:ed:47:41:9e:61:95:
                    e5:f2:85:67:d4:80:cd:6d:9c:b6:3b:5f:d0:47:a8:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:54:E3:AC:72:6C:3B:1B:30:7C:01:CC:F5:41:21:7A:FC:BA:43:8F
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:37:9b:8e:3d:e5:44:4d:87:e5:40:e4:ed:0e:a2:f0:44:a7:
         41:28:74:cb:34:cb:0e:8d:b8:dc:47:1c:5c:30:ae:a0:ba:0e:
         bc:26:f5:df:31:b3:ea:50:0a:3f:d9:ed:e2:44:64:13:fc:a3:
         2e:dd:9d:ee:3a:e6:94:e4:9b:fc:f3:5d:19:76:bb:22:38:91:
         88:57:7e:09:c7:e2:5b:4a:45:5b:61:e7:86:42:d2:7f:3b:32:
         1e:67:9e:d9:aa:1a:ee:12:15:94:26:94:ad:4d:7e:52:d3:77:
         f8:71:f4:76:84:63:83:a2:b5:7f:d7:29:7c:7a:f2:1f:4b:16:
         51:5e:07:50:d3:26:97:18:b9:e6:60:82:52:fb:c1:43:ee:9c:
         74:b7:ff:6a:4b:ba:3f:81:97:01:b9:e5:f5:00:b5:27:9b:3b:
         b4:84:8d:4e:22:fc:e1:38:e8:50:fb:64:65:a9:19:0f:f4:82:
         c2:fe:32:23:02:bd:8b:ac:2e:8b:75:2c:32:61:ef:aa:cb:17:
         5d:76:2b:6e:34:04:ab:e5:38:80:6f:53:5b:50:85:1c:4f:15:
         a8:94:a0:b1:9f:cc:7d:47:3b:f3:7f:37:3b:88:ef:af:dc:72:
         ce:d9:c4:70:1a:43:29:e3:59:2d:9c:4d:69:b1:a7:40:1e:cc:
         e8:92:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:35:29 2025 by rpki-client