Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File:                     gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier:          I3gegfXHlDZCyGjKx2omRYRKPe0Fm9qinsGicZonbsg=
Subject key identifier:   06:A7:B1:6A:E7:9F:28:3D:7D:DF:82:39:E1:13:CA:19:44:ED:46:54
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer:       /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial:       0197797883B3C1624EAD93C9DE5EB74839F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number:          1595
Signing time:             Mon 16 Jun 2025 16:00:30 +0000
Manifest this update:     Mon 16 Jun 2025 16:00:30 +0000
Manifest next update:     Tue 17 Jun 2025 16:00:30 +0000
Files and hashes:         1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=)
                          2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: vt2WxccMeaDukU/y5x+/sakufEJmt3y9leEyR4szuBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:78:83:b3:c1:62:4e:ad:93:c9:de:5e:b7:48:39:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
        Validity
            Not Before: Jun 16 16:00:30 2025 GMT
            Not After : Jun 17 16:00:30 2025 GMT
        Subject: CN=06a7b16ae79f283d7ddf8239e113ca1944ed4654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:d0:14:37:38:45:57:1a:aa:b8:48:d0:8d:
                    f9:32:d8:7b:07:5e:65:98:ad:da:ba:6b:0d:9b:66:
                    db:6b:4f:81:4c:b6:91:03:e6:1c:de:a7:0e:12:3b:
                    1f:12:1c:ab:6e:7f:b3:5e:70:71:af:e5:5b:e1:d8:
                    90:ee:63:9f:1f:ed:bc:66:56:89:99:72:1c:bf:e1:
                    2d:1c:80:84:b1:9c:ab:63:92:4a:5a:08:59:07:c1:
                    40:21:fa:93:8b:97:78:83:6a:94:0a:28:c5:02:74:
                    38:d0:b4:c8:e4:44:ab:fb:16:89:04:70:cd:e3:3f:
                    62:a0:a8:21:63:7d:e8:99:b7:0a:53:ab:74:f1:de:
                    80:83:0c:b3:ac:71:09:be:23:79:7c:53:37:11:77:
                    4b:e5:d0:5e:c5:63:21:3a:67:7a:6f:e4:1f:3d:03:
                    6e:b7:c8:f5:f0:ba:89:39:93:d6:94:f9:e0:ba:35:
                    35:ab:83:0e:d8:1d:27:13:a2:60:94:8c:73:22:c4:
                    7a:ea:1b:de:58:0b:4f:77:04:25:44:c3:c6:01:31:
                    42:7f:c6:62:35:d6:c4:7b:8a:a6:a5:70:52:d2:38:
                    3c:cd:d5:74:d7:06:c4:56:05:f2:62:af:62:e7:d9:
                    45:af:02:3b:26:0c:8a:7e:54:cc:17:f6:2f:7c:0e:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A7:B1:6A:E7:9F:28:3D:7D:DF:82:39:E1:13:CA:19:44:ED:46:54
            X509v3 Authority Key Identifier:
                keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:a6:5d:43:30:5f:28:c2:f1:ae:95:02:5c:48:0b:82:f3:
         a3:ec:53:37:fa:0a:e8:ef:56:48:46:69:7e:97:f8:8c:13:2f:
         c5:64:a9:90:36:f8:44:f9:3f:c8:2a:70:d5:fa:15:09:8f:c8:
         bc:c0:cb:28:34:9b:d8:5f:8d:65:20:85:ac:3c:f9:56:0a:29:
         4c:87:6d:83:84:a2:96:71:1c:c6:6d:19:fe:bb:1e:6f:74:9e:
         f2:44:59:81:d6:32:8c:89:f7:74:4a:01:74:2d:08:bc:0c:fa:
         2a:53:01:45:ba:6a:2c:00:58:53:44:6d:32:29:2c:52:d0:3e:
         e9:0c:1f:dd:06:92:c8:94:57:fe:00:eb:08:8a:cc:de:b6:65:
         9e:66:2f:32:3e:df:92:c5:eb:3f:ba:f1:10:19:e0:fd:db:41:
         bf:94:a1:3e:1d:ab:51:2d:64:be:66:d3:0a:f5:41:3a:e2:e6:
         c3:ac:06:b5:6b:97:e7:93:c1:29:18:c0:f7:60:f2:62:64:a9:
         b2:09:a9:d9:07:da:e5:9d:67:3c:9b:b2:34:d4:d0:99:65:22:
         f0:8f:9c:0c:40:a7:e0:f2:ab:0c:2f:b1:8d:e2:07:36:9c:62:
         a1:34:f7:7e:6c:58:81:24:9e:20:e0:51:bd:d3:44:c1:4e:b3:
         54:e9:fd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:03:32 2025 by rpki-client