Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File:                     GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier:          qP/i3bvj/SFWTY7quZ+nnG3k7BfgsHragRUKvTCTi5o=
Subject key identifier:   A0:2D:8C:6A:BE:11:75:23:EE:6C:0C:73:9F:30:95:A1:A3:8A:5F:B5
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer:       /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial:       01976D746957AB94D72AF7BF0BA7897D673C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number:          06FF
Signing time:             Sat 14 Jun 2025 08:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:34 +0000
Files and hashes:         1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: C1SoS74hBpLQRywL1TuK9RofUz2MExAvC66XQjHh80s=)
                          2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:69:57:ab:94:d7:2a:f7:bf:0b:a7:89:7d:67:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
        Validity
            Not Before: Jun 14 08:00:34 2025 GMT
            Not After : Jun 15 08:00:34 2025 GMT
        Subject: CN=a02d8c6abe117523ee6c0c739f3095a1a38a5fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:a5:13:7a:73:ee:72:86:30:f5:ef:62:80:
                    95:0b:50:8e:d4:7d:59:26:7e:e2:fd:de:60:66:07:
                    a6:56:e8:5d:52:f8:9f:b3:fb:85:a7:ca:1b:27:08:
                    9e:98:03:c3:86:cd:af:3a:b9:2a:df:1c:aa:ca:4e:
                    ac:bb:8a:ac:04:d9:16:bd:20:b8:09:23:6a:a0:01:
                    e5:e6:64:d7:47:b1:aa:58:4d:79:ad:ca:f2:80:e3:
                    9f:6c:69:02:30:be:0d:33:98:b2:75:b4:8a:45:76:
                    05:95:b7:d2:0d:aa:0f:c6:cd:64:ea:eb:fb:76:6f:
                    4e:c3:35:1c:d3:45:cd:4b:af:cb:0b:6f:81:db:c3:
                    99:37:62:7c:20:41:d2:fc:03:30:46:5f:13:3e:95:
                    5e:cd:9b:40:aa:01:bf:f1:d0:8f:62:ca:30:63:f4:
                    b3:73:ea:4d:d1:56:2f:7b:3c:e5:d5:a6:48:74:3c:
                    a1:67:e8:f4:35:f3:2b:69:f9:ea:51:81:90:9c:7e:
                    a2:90:82:15:de:03:2b:e2:02:f0:85:53:61:c0:a8:
                    3b:d2:af:b5:8f:40:d7:0b:ea:95:33:eb:5c:1b:d9:
                    5d:9f:46:31:3a:54:2a:80:97:6a:4c:01:d7:37:9c:
                    b5:2b:90:91:01:22:65:da:c2:71:c9:27:22:be:17:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2D:8C:6A:BE:11:75:23:EE:6C:0C:73:9F:30:95:A1:A3:8A:5F:B5
            X509v3 Authority Key Identifier:
                keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:78:da:2d:7a:fa:ad:5b:49:a6:9a:e9:18:87:4b:fd:a0:
         de:e0:e4:ff:c9:06:e0:13:22:bd:ec:ab:43:9f:c1:bc:e2:16:
         ca:f6:4b:6e:08:26:b8:68:85:c5:29:0d:66:26:b1:5e:ff:58:
         bf:e7:84:13:2b:20:0c:da:f3:b4:1c:61:ab:cb:71:bc:7a:d3:
         30:d6:eb:97:fa:8d:0b:df:18:5f:ae:1a:e6:e5:db:05:8f:eb:
         38:a3:e8:e9:c2:3a:09:3b:11:73:d6:6e:b6:4f:4f:05:0e:aa:
         34:dd:17:68:cd:c9:2a:96:d4:19:a6:7c:88:1d:89:0e:eb:57:
         a9:2f:ea:1d:be:31:cb:5d:0f:76:ca:52:bc:cd:9d:58:b5:16:
         a4:75:49:36:5a:c4:c0:f3:33:b0:86:7f:9e:c5:61:00:35:22:
         64:b0:e3:c0:91:34:06:c9:7e:f8:98:3a:1a:9c:90:52:9e:e3:
         c7:a8:6a:06:7c:3a:17:c3:a5:ac:23:ba:6c:2e:83:db:a2:28:
         4b:61:57:18:0b:72:56:01:5e:3f:b0:a6:33:f5:b2:f5:02:ef:
         c1:5e:68:26:37:ce:27:14:49:03:d2:45:ac:12:3a:71:55:59:
         f7:8e:88:0f:b1:9f:50:0c:4c:8a:02:d1:21:df:02:46:c3:ee:
         17:6f:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:24 2025 by rpki-client