Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
File:                     gXSGHd7wagc1I8mTkWjVtxadaHU.mft (raw, json)
Hash identifier:          1H8VPUvAhyl29ki/pKw7nZ/ipY5Yc4d3oHqo3vOw74U=
Subject key identifier:   13:1C:0B:8A:AA:66:CD:9A:47:28:30:A3:FC:F9:A9:64:D2:A9:27:CA
Authority key identifier: 81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
Certificate issuer:       /CN=8174861ddef06a073523c9939168d5b7169d6875
Certificate serial:       01977CE7B102115B5CE31D3D13317452A03F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
Manifest number:          07D6
Signing time:             Tue 17 Jun 2025 08:00:48 +0000
Manifest this update:     Tue 17 Jun 2025 08:00:48 +0000
Manifest next update:     Wed 18 Jun 2025 08:00:48 +0000
Files and hashes:         1: E-w5M4eQP91wEOXM7w1SR0QOmxg.roa (hash: +jFSsPpUEMM2UeClDBFj9F6a9KDL4VbEDLgdyScKqB4=)
                          2: gXSGHd7wagc1I8mTkWjVtxadaHU.crl (hash: VftiGjdltF3DTdS1CLIEi/hTF7BZ0uA9XLVKbCUQc7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:e7:b1:02:11:5b:5c:e3:1d:3d:13:31:74:52:a0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8174861ddef06a073523c9939168d5b7169d6875
        Validity
            Not Before: Jun 17 08:00:48 2025 GMT
            Not After : Jun 18 08:00:48 2025 GMT
        Subject: CN=131c0b8aaa66cd9a472830a3fcf9a964d2a927ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:1d:98:22:e6:3c:d7:9d:7d:ae:ec:ee:8c:
                    87:16:aa:44:66:95:26:3c:84:4a:06:30:9d:88:99:
                    25:e3:fc:77:9a:24:8c:2f:dd:9d:3f:59:9d:0a:f5:
                    df:d5:ad:55:78:7b:18:7d:86:77:41:38:a0:61:43:
                    f1:43:fa:c4:b1:05:57:93:d0:81:d0:a0:f5:29:c9:
                    b1:3c:04:ae:d5:f1:59:b2:48:8f:58:79:cc:49:c5:
                    88:8f:0c:f9:3d:f7:25:ca:5b:83:be:a9:3a:07:71:
                    ec:7a:72:7b:82:c9:df:89:55:23:7e:cc:71:cc:0c:
                    6a:40:31:10:10:bf:17:70:32:21:a5:ad:9e:f4:62:
                    71:72:a3:a3:d7:73:15:c3:e9:ff:40:d7:10:fb:39:
                    be:67:97:49:91:7f:03:00:b6:7c:90:83:be:21:f8:
                    9d:79:25:2b:4a:90:ec:ac:50:3e:20:88:40:e1:81:
                    3d:69:4a:a3:51:3f:65:46:70:b8:c0:10:5d:b7:59:
                    ac:29:5e:58:4a:5d:c7:73:8c:81:87:24:ee:56:dd:
                    f4:ca:c0:a9:67:0a:1b:bb:4e:97:af:88:e7:db:64:
                    a5:e3:ac:91:70:e7:96:91:88:1d:2e:6f:30:21:60:
                    42:78:47:9a:c1:c5:92:f7:a9:86:d0:ef:f0:87:33:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1C:0B:8A:AA:66:CD:9A:47:28:30:A3:FC:F9:A9:64:D2:A9:27:CA
            X509v3 Authority Key Identifier:
                keyid:81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:66:f1:a5:e3:68:c1:18:32:86:62:31:11:05:cd:d6:6f:b3:
         85:33:b6:9d:fb:64:23:9d:b3:27:d5:26:55:55:ac:30:d5:99:
         43:39:13:b8:e3:62:c5:79:24:8c:d5:0d:be:c2:a5:c7:1b:82:
         1e:bf:08:01:33:53:00:3d:5b:e9:e7:50:11:8d:6e:13:e8:0e:
         52:ee:a4:f9:a0:f6:39:8b:fb:bc:e0:cf:25:68:58:d0:64:d0:
         64:93:22:37:51:34:49:f4:95:74:e3:06:bf:25:c5:2a:69:95:
         95:59:62:27:c0:d9:d3:f3:bf:83:1a:c9:0c:bb:e7:ce:87:c3:
         c2:1b:46:1a:c3:5c:f0:e3:ac:67:9d:fc:0c:01:fc:c3:42:96:
         07:3b:66:38:e7:9e:d4:5b:92:70:80:14:c1:94:1f:b6:94:b6:
         8a:d7:ec:b7:e5:6c:f4:cb:c9:0c:82:7b:c4:fe:0f:58:3d:88:
         4e:80:17:55:6b:c7:73:8f:ed:76:11:78:72:ff:78:f1:c4:7e:
         40:9d:6d:27:68:a0:64:ce:b0:73:7d:39:e5:fb:3f:f8:9c:61:
         b4:06:44:2a:fc:cf:43:04:bb:6b:16:68:47:8e:b1:9a:f0:30:
         45:a3:cf:64:08:e6:33:d7:a2:57:56:7d:da:47:cc:49:ce:28:
         49:1d:58:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:01:34 2025 by rpki-client