Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File:                     GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier:          KcpWyqxJOUefzyhuTXjGOrh9lubbntOq4icAO8o8z48=
Subject key identifier:   B5:A9:24:19:07:47:CF:43:CB:10:54:48:97:1B:7D:7C:BE:1E:0E:1B
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer:       /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial:       0197722D3C69154F2116631D9741925CDF10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number:          10A8
Signing time:             Sun 15 Jun 2025 06:00:56 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:56 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:56 +0000
Files and hashes:         1: 97TEoE2zAQxZI3sREml1jxvx638.roa (hash: 88Edm2WqicmrATpjZjEgq8BI+OITrMBwRffegS2fN0U=)
                          2: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: UISgSzqrYPVZfD0JrlAEMiawhUsNog8eNipC52RYNGk=)
                          3: q9SsxYbRIp9e4XDgj9J3VkZ0CgM.roa (hash: vHSPBUTKHvDa0CMaWz0/b1NLlD2hxXAs+Bnl2Vh/Iqc=)
                          4: ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa (hash: M4nmdu5lLDUg1zn32w5JxWA1YF5KBgjR54KBKiRLUIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:3c:69:15:4f:21:16:63:1d:97:41:92:5c:df:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
        Validity
            Not Before: Jun 15 06:00:56 2025 GMT
            Not After : Jun 16 06:00:56 2025 GMT
        Subject: CN=b5a924190747cf43cb105448971b7d7cbe1e0e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:f2:6a:af:23:3b:01:ea:7e:83:b9:d2:ef:
                    4c:e7:53:44:1c:1b:dc:a1:1c:75:9e:59:c5:6e:d8:
                    86:48:6a:82:0c:78:04:3a:91:8d:82:a4:d5:cd:85:
                    0d:5f:30:ae:20:48:e8:22:79:41:0e:d8:45:82:0d:
                    90:b9:b0:bd:65:39:91:88:03:22:5f:89:34:78:ef:
                    e7:ae:28:f3:d8:fe:df:36:a6:81:9e:65:d9:28:36:
                    11:15:04:de:69:78:33:9c:78:25:61:d9:31:d6:59:
                    29:00:75:7a:ea:b1:4a:c4:f1:79:26:2d:ce:09:e9:
                    ea:b5:fd:68:0b:ff:eb:88:64:0d:8f:77:c1:ae:bc:
                    9f:f5:cd:45:62:d1:4b:37:66:dd:d2:04:fa:e4:be:
                    4d:56:f2:f2:16:cc:83:36:fd:ae:e9:e9:5d:92:f7:
                    f5:03:48:6d:41:ac:d5:2f:e2:c1:3b:e4:e2:2c:84:
                    ab:e2:c9:eb:92:3d:2c:de:60:6d:8d:87:45:8f:07:
                    f6:53:05:5c:98:cc:d3:dc:73:9f:51:d3:26:53:58:
                    25:25:1c:49:30:fd:5d:41:92:98:91:cf:20:46:51:
                    1a:1d:26:41:8f:e7:cb:11:71:57:79:7e:e7:2e:d6:
                    6f:8f:83:43:75:51:77:af:c6:29:14:18:69:d0:45:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A9:24:19:07:47:CF:43:CB:10:54:48:97:1B:7D:7C:BE:1E:0E:1B
            X509v3 Authority Key Identifier:
                keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:31:02:79:85:1c:0a:99:e2:da:6c:31:81:77:7c:68:55:7a:
         cd:a9:b7:32:44:c8:46:9b:5d:4c:a6:f5:9e:c6:de:82:f2:2a:
         98:6d:ce:01:cb:b1:c6:a5:ed:b9:77:06:52:51:08:74:b8:ac:
         7f:8e:aa:f0:be:fa:cd:ce:1d:ed:18:41:ca:0a:55:1c:1e:84:
         d9:3d:fb:6c:ff:be:4f:08:3e:e8:5d:6c:90:f8:d2:13:cb:1a:
         72:0e:1f:99:fc:92:50:dc:31:76:aa:40:0d:8d:52:db:b3:32:
         20:9a:fd:6b:e6:3d:d5:d7:eb:d9:eb:cc:ca:f7:23:5f:77:ed:
         07:11:c3:f4:0f:01:58:0a:a7:0a:de:1c:75:76:04:70:8a:f8:
         84:53:3a:58:e7:f4:8c:57:90:a1:36:23:c7:c6:18:8b:04:9c:
         bc:51:33:0b:e9:1d:94:1e:95:7c:94:de:2f:4a:18:38:96:24:
         a6:c2:55:f7:d9:db:ef:65:f4:ee:1f:06:0d:26:c5:b7:30:dc:
         f7:94:96:f1:ad:1e:eb:b2:86:5e:17:5f:c0:3f:cd:06:d9:83:
         b7:28:fe:22:9e:27:ce:fe:47:f0:bb:d3:bf:6b:48:07:7b:50:
         88:6c:ed:a5:00:46:f1:f4:63:61:98:93:b4:11:23:f7:1c:04:
         61:e9:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:13 2025 by rpki-client