Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
File:                     GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json)
Hash identifier:          cLK7gEET7qZmXqd5jf+CrfHlF0OyNaP2yjzdShHiPgs=
Subject key identifier:   24:E2:C0:36:04:DC:06:57:06:B6:6D:B6:C4:B6:01:D8:3C:B8:D3:6E
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Certificate issuer:       /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial:       01977B9DBA3F52DD1F000C8E3410481497EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
Manifest number:          1593
Signing time:             Tue 17 Jun 2025 02:00:23 +0000
Manifest this update:     Tue 17 Jun 2025 02:00:23 +0000
Manifest next update:     Wed 18 Jun 2025 02:00:23 +0000
Files and hashes:         1: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: 99SrnGd4lXz8Aua88yUT3I2vXQ42VPGr492h6Djn3Q0=)
                          2: UkXF7s7wvZTNugO0xMbM-tho3CU.roa (hash: haf3+lwW0Ofrlk+CxaFcagM4HVa+8i2mqBkmuNQ3QQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:9d:ba:3f:52:dd:1f:00:0c:8e:34:10:48:14:97:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
        Validity
            Not Before: Jun 17 02:00:23 2025 GMT
            Not After : Jun 18 02:00:23 2025 GMT
        Subject: CN=24e2c03604dc065706b66db6c4b601d83cb8d36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:bf:70:da:63:05:bc:4c:f9:d4:2f:f2:33:
                    0a:5a:0e:91:5c:fd:3e:67:04:eb:bc:bd:8a:07:8d:
                    73:b7:e4:d9:1d:c9:b2:10:a4:ea:ac:2b:ca:e2:07:
                    82:40:9a:90:b1:cc:c7:94:15:b3:c3:67:28:fa:05:
                    5a:68:1a:49:22:b5:fd:9e:e6:12:02:93:39:bd:bb:
                    44:f2:c2:0c:cf:dd:ca:90:ac:a3:f5:7f:e0:a0:a6:
                    01:7c:3b:c7:f9:80:25:82:f0:1f:f6:29:82:b5:55:
                    d7:45:e0:d2:fd:50:cc:79:53:8a:cd:29:64:33:af:
                    9c:53:8a:04:21:e3:f1:0d:d6:d3:01:f0:b4:54:29:
                    94:f1:ac:86:ad:ee:68:2e:3b:f3:82:cc:a3:89:13:
                    ab:80:25:b0:82:56:10:42:a8:10:55:01:9e:ae:17:
                    3a:3b:4a:ba:d0:74:64:5f:bf:d9:fe:8a:56:61:b3:
                    72:c3:c5:86:a3:63:f3:6d:4f:65:1a:56:47:e9:1a:
                    e7:a1:19:62:f3:85:0f:6e:fe:ec:4d:32:11:ad:2f:
                    30:ee:ce:da:51:4b:4b:4b:56:ba:f6:9f:32:ce:53:
                    6a:7f:b2:51:3d:48:9d:aa:b4:71:87:44:65:7b:d2:
                    77:3c:a8:10:90:96:ef:11:ef:69:27:0c:cf:c4:72:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E2:C0:36:04:DC:06:57:06:B6:6D:B6:C4:B6:01:D8:3C:B8:D3:6E
            X509v3 Authority Key Identifier:
                keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:64:ae:04:33:ef:e2:ce:4a:0e:79:34:6d:05:0a:17:df:
         ee:3c:7f:0b:1e:52:f4:fa:19:71:2c:17:9f:b4:8e:9a:bb:be:
         4d:aa:3d:16:56:c6:c6:d7:00:19:59:c2:fe:e7:41:04:13:9e:
         f2:9c:44:2b:aa:35:c4:26:ec:0c:46:4e:a7:84:65:a4:dd:5d:
         ce:89:6e:23:ea:fc:16:15:13:6c:d7:ee:3f:70:03:71:4c:49:
         61:31:a1:ce:0c:1a:28:6e:4d:e4:ae:4a:8d:73:63:6d:b9:cb:
         42:0a:f7:65:9d:4c:fb:73:61:49:44:32:18:16:0a:8d:6e:71:
         ab:6d:f3:c1:b1:bc:8a:e4:b2:98:56:be:5e:48:b7:7d:31:c7:
         4c:20:b3:31:e3:0e:28:21:c9:39:ee:49:0f:9f:09:80:40:ec:
         7a:91:c9:a6:ef:26:0d:80:48:df:74:9c:eb:7b:e9:06:51:33:
         01:f7:d7:59:53:4f:c5:c1:43:37:ac:b3:53:af:25:f5:c8:94:
         35:81:fb:7a:f2:6c:d4:ac:22:f7:72:6c:e9:7c:97:68:d6:7d:
         0d:b6:e3:da:97:7f:6a:1e:87:3b:95:c1:b9:b5:8c:90:f6:bb:
         5b:1a:df:47:45:c1:d9:fe:0f:df:f0:c7:5f:9d:d2:0a:b6:2e:
         37:5a:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:49:40 2025 by rpki-client