Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File:                     GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier:          SMxjKCHpiBOQCRHhlQyZBWLuxKIxOWbDamPSdIZtsmY=
Subject key identifier:   42:B6:53:B9:1E:28:AF:A4:7F:7B:41:DE:38:55:F3:82:1F:C7:99:06
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer:       /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial:       01976F998DD6952015DB3CF983DBA5C98F96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number:          01F6
Signing time:             Sat 14 Jun 2025 18:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:23 +0000
Files and hashes:         1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: bW7VDJSO9O4q1q1fEeIGt17grVEEyE8Z1wW7xUBKvA8=)
                          2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:8d:d6:95:20:15:db:3c:f9:83:db:a5:c9:8f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
        Validity
            Not Before: Jun 14 18:00:23 2025 GMT
            Not After : Jun 15 18:00:23 2025 GMT
        Subject: CN=42b653b91e28afa47f7b41de3855f3821fc79906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:6d:ad:f2:d8:49:79:1b:37:ca:7d:b3:70:
                    95:14:67:5e:2c:5d:30:ef:da:01:4d:6e:e8:02:34:
                    ab:eb:c1:cc:bf:cd:3a:22:ac:62:9d:1a:b3:fa:6a:
                    82:d3:b1:ca:05:d5:7c:a6:11:2f:be:cd:c4:8e:b2:
                    73:a2:44:31:ac:c5:08:ae:ca:8f:6a:a4:cc:52:5d:
                    88:6f:6b:13:7d:14:74:8c:25:7d:f0:6d:9f:58:39:
                    7a:fd:8f:6d:0a:0a:12:4c:94:85:02:b3:7f:32:cf:
                    0c:14:77:c6:dc:de:bd:57:a6:90:78:ba:b0:12:d2:
                    0d:a2:60:46:82:34:ed:50:eb:c1:96:08:64:91:19:
                    21:4a:b6:98:70:90:26:70:73:5e:36:0e:f1:e9:16:
                    30:49:96:3c:7a:75:b5:1e:86:0a:48:4a:43:24:b2:
                    10:8a:e4:dc:8f:4f:60:3d:06:66:44:2a:b5:71:93:
                    34:f7:39:71:bf:5c:d5:1e:1b:61:18:24:c4:f2:3f:
                    f5:a4:8b:83:16:ef:f2:a8:97:39:b5:ff:93:2a:04:
                    79:36:ab:20:c9:23:f6:8c:6b:57:90:c9:5d:8a:86:
                    e8:85:0c:a0:00:d5:81:37:66:87:c2:ae:a6:01:7d:
                    6a:53:4e:5b:fa:5e:88:f1:8f:7b:52:39:28:25:09:
                    10:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B6:53:B9:1E:28:AF:A4:7F:7B:41:DE:38:55:F3:82:1F:C7:99:06
            X509v3 Authority Key Identifier:
                keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:cf:9b:63:11:de:9c:c4:4a:77:6c:8f:72:2b:95:52:96:
         01:be:03:5c:75:f4:f3:a7:78:db:7b:13:d2:18:f7:e1:fd:5b:
         be:88:c0:a4:96:55:33:ed:a2:b4:a9:12:d8:be:54:d5:f1:d7:
         98:e9:7f:a8:07:a0:68:43:56:44:cc:04:93:9b:30:82:e1:f9:
         22:95:35:8e:be:19:8d:63:c5:7f:a4:6f:e5:92:db:ed:04:42:
         d0:87:d9:73:bf:bc:89:61:52:72:8a:c1:55:ef:78:89:b6:31:
         c6:46:73:cf:37:27:e3:bf:69:93:26:23:77:33:48:20:2f:18:
         09:37:e1:e6:6d:0f:31:7b:b7:5a:b2:57:44:44:72:63:66:5e:
         82:5e:7f:c9:70:0c:e6:ad:bb:bf:7d:41:8a:c1:a6:ae:c3:91:
         e5:1d:9f:42:0f:2c:c4:00:c7:8e:41:72:9d:13:e4:f8:49:d3:
         3e:10:36:6e:e6:4f:a4:0d:6c:9c:ec:25:5d:8c:0a:0e:f0:30:
         8c:8b:02:21:82:c8:1f:37:aa:53:a3:39:d2:59:af:80:93:79:
         31:7e:4a:11:ca:8a:51:8f:98:2d:47:e3:26:5e:02:4a:09:1b:
         dd:73:41:be:38:54:dc:16:7f:fe:98:a4:66:45:8f:7c:d5:3b:
         39:80:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:35:04 2025 by rpki-client