Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File:                     gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier:          oi8wXz2mePtGvfaieqxsLyZpa0zjtGsfHQJF9DtFQ8E=
Subject key identifier:   56:C6:F5:4C:F5:83:2A:56:6A:D4:9D:A6:2F:10:3A:B3:7D:B6:2E:AD
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer:       /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial:       01967756389027EF25F27754FD5C528F2DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number:          0C40
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 27 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 28 Apr 2025 13:01:01 +0000
Files and hashes:         1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=)
                          2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: zqXshkLPJYmCJ3V+8Lf/JECwvl4tyLH5zHnN1sribGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:56:38:90:27:ef:25:f2:77:54:fd:5c:52:8f:2d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Apr 28 13:01:01 2025 GMT
        Subject: CN=56c6f54cf5832a566ad49da62f103ab37db62ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:7b:19:79:1f:90:d3:9b:cf:72:a3:68:26:
                    6f:8f:24:30:0f:98:dd:78:ef:6d:bd:c9:8b:d0:51:
                    b2:ae:ea:7e:15:6d:82:01:b8:78:4a:be:f5:9b:f1:
                    86:5a:1b:e3:be:74:2f:3b:dc:c1:9e:f3:aa:da:b1:
                    46:8d:86:1c:e3:58:2c:2d:0e:c2:fe:61:41:be:a9:
                    d8:a8:1f:12:ce:d7:d5:59:3c:0f:c6:7a:77:ad:34:
                    33:8b:46:24:27:da:fc:c5:02:f1:d3:f8:22:47:94:
                    98:e6:f0:16:45:1a:78:0b:ce:08:0b:5b:73:d1:28:
                    43:89:b6:25:4d:cd:ad:30:d9:9c:c6:40:b2:c6:fd:
                    ac:a0:90:ea:f4:a0:1f:06:aa:33:44:9f:a0:f7:eb:
                    89:e1:5d:da:4b:f0:94:49:02:46:97:58:dd:78:a5:
                    f6:c3:45:e3:fd:b0:48:c4:d3:e2:b3:45:b4:85:56:
                    c7:8e:0e:27:fd:1b:c8:28:90:d6:a0:85:ee:56:89:
                    02:64:01:7c:f5:53:2e:b0:b4:5e:c4:d8:26:2b:32:
                    77:8d:e0:aa:82:22:b0:cf:47:1d:95:55:95:92:79:
                    a2:ab:63:6e:1f:c0:a5:f9:78:83:ba:83:41:14:ff:
                    d8:20:65:5e:d8:24:e4:4c:8e:28:6e:c5:5b:da:c8:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C6:F5:4C:F5:83:2A:56:6A:D4:9D:A6:2F:10:3A:B3:7D:B6:2E:AD
            X509v3 Authority Key Identifier:
                keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d8:0a:19:df:d7:4d:72:27:da:51:5a:e3:67:ee:3f:16:d2:
         f2:e6:6f:8e:40:bf:08:1a:0b:d7:b7:3f:2c:2d:31:be:e1:55:
         0e:70:70:15:f8:a8:d5:62:ee:bc:68:00:04:4a:c7:80:c8:f3:
         80:dc:d1:a1:a3:29:fb:6d:47:ad:1b:3d:35:a0:89:ff:1e:2e:
         7c:b0:e7:1b:b9:4f:f0:13:c4:f4:31:e7:7a:aa:f0:2b:80:38:
         47:01:4c:b6:f9:22:6d:5d:d3:d7:4a:bb:6f:80:db:61:e6:2c:
         cc:c9:e1:79:d5:aa:d1:ec:49:f6:ca:6f:23:e2:69:2b:5e:0c:
         9a:e7:ed:38:26:12:c2:10:35:34:ef:94:e1:f7:4c:f9:64:31:
         7d:ec:de:d4:54:6e:ff:02:6d:6d:e4:0d:ed:c9:c1:eb:d5:61:
         a1:3a:cc:6e:39:45:cf:dd:3e:63:46:21:10:9c:58:23:4e:88:
         fa:81:28:80:4d:1b:df:84:09:35:ad:8f:dd:4d:e5:89:7d:a9:
         0f:db:8e:b8:e8:2a:6f:ea:b9:02:76:bd:63:4e:0c:02:27:fa:
         6b:ee:b1:1e:73:76:3d:5a:58:dc:2b:5e:65:09:6f:b4:ea:24:
         24:0b:0c:19:6f:ab:a7:83:fb:04:56:36:25:8e:b2:00:1b:71:
         be:8d:b2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:49:40 2025 by rpki-client