Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
File:                     GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json)
Hash identifier:          J9AUiKyXe4LTkxpC7ZAIoy83G6BJGMFSrbUBYheGlP4=
Subject key identifier:   50:00:70:75:58:32:53:DC:92:97:44:79:FE:20:37:84:D3:A5:B5:A3
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Certificate issuer:       /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial:       0196771EC47E217B8D285BA3BCCFC2EBBE9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
Manifest number:          0BD3
Signing time:             Sun 27 Apr 2025 12:00:27 +0000
Manifest this update:     Sun 27 Apr 2025 12:00:27 +0000
Manifest next update:     Mon 28 Apr 2025 12:00:27 +0000
Files and hashes:         1: 7fCLxFxs3uirSoBmBAB2IiaPCDE.roa (hash: coxqqIVz+Sd0ZSUD8QWyHK8rOUGIW44eWb9ORBY27qw=)
                          2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: /FOs5gIFlo9xBn7DXL1IDmxBMDoKbSip1OS4B7czygM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:1e:c4:7e:21:7b:8d:28:5b:a3:bc:cf:c2:eb:be:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
        Validity
            Not Before: Apr 27 12:00:27 2025 GMT
            Not After : Apr 28 12:00:27 2025 GMT
        Subject: CN=50007075583253dc92974479fe203784d3a5b5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:5a:b0:9b:0c:55:fa:bd:b5:94:12:a8:58:
                    01:1a:3c:7d:34:35:af:2b:fd:ef:2e:ba:e8:61:1f:
                    bf:9a:52:63:e0:33:1b:27:12:64:14:b4:c9:7a:bd:
                    9b:69:0d:30:c0:37:72:00:3f:67:30:69:00:5a:15:
                    05:e9:36:9f:ff:63:d0:c5:10:b9:82:c4:c7:39:1c:
                    7a:bb:3f:aa:41:9d:8a:d8:ee:d9:94:de:5a:a4:db:
                    12:c2:e4:77:e5:c6:ec:46:e7:e5:61:15:da:fe:50:
                    89:5c:1d:f6:87:bc:15:a4:02:ce:4a:db:30:1c:3e:
                    e2:9c:15:64:b2:51:08:71:a9:ce:2f:e3:60:a4:92:
                    0b:c0:51:8a:10:0e:8b:d7:e5:9d:fc:cc:70:c1:85:
                    8e:45:96:73:c0:26:82:df:3a:69:88:e2:96:15:14:
                    5e:ed:64:ad:52:25:b6:27:14:13:43:b7:3a:cc:bf:
                    59:48:6c:f9:9a:d7:8b:e7:be:1e:55:44:99:31:c9:
                    6e:a5:fa:cc:95:11:56:6a:e6:a3:36:f0:0c:69:c9:
                    03:f7:9e:7e:4c:62:89:97:d6:08:c7:34:69:26:0e:
                    bb:5f:0a:ac:80:d9:37:6b:9f:52:90:5d:74:6a:34:
                    50:f1:46:b3:3c:7f:eb:2e:72:04:07:7b:7c:19:07:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:00:70:75:58:32:53:DC:92:97:44:79:FE:20:37:84:D3:A5:B5:A3
            X509v3 Authority Key Identifier:
                keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:82:01:56:6a:b3:c0:cd:6b:60:68:b0:53:f7:3b:88:77:d1:
         00:85:41:b6:76:79:25:27:80:13:89:ae:46:ff:6a:93:2e:bc:
         7d:3b:d6:8d:83:96:32:03:c9:04:47:02:c1:c7:09:a7:5d:9e:
         38:5c:4e:e9:b4:5d:88:17:b1:0b:b4:4a:07:f3:bd:92:8a:12:
         ad:56:f2:51:82:1f:f6:dd:72:1d:bc:da:99:ef:d7:b5:56:3b:
         e3:2f:da:b4:3c:58:ca:e1:e9:ff:fa:c3:81:c4:96:a4:47:f0:
         1d:cc:93:48:92:0e:c6:c2:87:96:cb:2e:33:56:8e:35:c9:b3:
         c7:1e:b6:c6:23:d2:8d:a7:82:9f:a8:2c:16:13:5d:30:07:b6:
         f5:5a:58:b2:57:5f:86:30:56:c7:76:5b:ec:9d:65:47:25:58:
         bc:bd:08:66:2c:da:af:91:f6:71:6a:be:e7:39:62:c4:5e:6e:
         2b:b7:d3:8c:f8:19:43:25:81:71:09:5c:62:56:ec:29:f3:20:
         d7:e5:fd:cd:0b:a3:15:c5:92:39:3c:5a:70:cb:93:34:14:85:
         34:82:6d:15:5f:03:ab:2c:c0:29:a3:49:35:2c:90:f6:97:d6:
         ec:71:b2:ee:89:62:d8:86:a5:ef:18:e1:0e:61:e1:89:81:ae:
         2a:e5:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:21 2025 by rpki-client