Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File:                     GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier:          J+FD44nqDQpWa6rKPkNBI6+i9HKDP7dXCT//vVQ43b4=
Subject key identifier:   C6:E7:26:9C:EF:76:58:08:98:F9:F1:1A:3C:C4:B0:A9:C5:16:67:30
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer:       /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial:       0197703E8048C57D747CE8A868CC457DFDD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number:          066B
Signing time:             Sat 14 Jun 2025 21:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 21:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 21:00:33 +0000
Files and hashes:         1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: /EskSuLHn9er6C5KiJQ1t0qca6JIPFuKiHdnzVFByYQ=)
                          2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:80:48:c5:7d:74:7c:e8:a8:68:cc:45:7d:fd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
        Validity
            Not Before: Jun 14 21:00:33 2025 GMT
            Not After : Jun 15 21:00:33 2025 GMT
        Subject: CN=c6e7269cef76580898f9f11a3cc4b0a9c5166730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f9:aa:9e:e5:f4:e6:8e:d7:0b:47:cf:1a:3e:
                    d9:eb:1b:cb:e8:0c:3d:ff:32:d8:43:7a:34:92:1e:
                    c9:6f:de:57:54:be:1e:5d:80:8c:43:cf:3b:80:f0:
                    73:64:73:06:50:e9:82:9d:ae:1a:d4:68:83:75:1e:
                    ee:0d:05:46:7d:4e:55:bd:39:6d:56:1b:db:4b:88:
                    ce:a3:a5:52:6a:36:66:6b:31:9d:44:20:0b:47:b2:
                    16:a7:8b:97:bf:2d:39:b5:35:0b:42:cd:05:a5:1a:
                    df:43:ff:fb:c3:cc:37:ae:df:21:ff:c9:36:82:05:
                    1c:88:cb:62:1d:6c:cf:99:83:23:59:cf:08:ae:cb:
                    8d:37:ed:fb:9b:f8:8b:bd:23:ff:a2:62:17:9b:2c:
                    3a:13:d5:4f:6a:f7:97:3f:4c:8b:48:6b:cd:80:13:
                    70:da:57:48:de:cd:ba:ce:d1:3a:90:b4:c2:5a:bc:
                    01:c0:26:cd:6c:95:d7:a8:45:8c:ad:a4:89:3c:5e:
                    6d:0d:b3:0f:54:78:66:0e:4e:a8:35:4f:c9:ed:e2:
                    1f:3d:ab:4c:55:3d:af:6a:ef:74:db:dd:f2:6c:73:
                    b7:d9:7d:90:db:51:38:79:6a:e6:7e:df:08:1d:91:
                    1e:dc:f9:3a:73:26:06:ca:0d:98:95:8e:43:02:c6:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E7:26:9C:EF:76:58:08:98:F9:F1:1A:3C:C4:B0:A9:C5:16:67:30
            X509v3 Authority Key Identifier:
                keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:d3:6f:f7:fa:72:12:59:9f:86:cc:9e:fb:74:39:6d:9d:
         c6:fa:98:8b:29:76:92:ea:31:29:30:17:60:d8:94:18:63:9e:
         7e:9f:aa:92:25:a3:17:09:03:96:2e:c4:c1:32:11:50:82:6e:
         9b:12:d7:e8:99:78:f3:14:8a:9e:99:94:66:22:de:fe:e5:d2:
         a2:33:d1:11:c3:dc:a0:e4:45:b1:9f:2f:8e:47:1f:a3:d8:b2:
         d6:2b:f8:d5:0e:32:2b:91:eb:48:fe:53:f4:8b:32:1d:99:82:
         d4:1e:21:17:2e:19:03:17:49:d9:33:72:3f:b7:03:6d:e2:78:
         82:12:71:61:2a:c6:b4:3d:da:de:6d:69:ea:6e:90:e3:bf:56:
         ab:44:21:42:71:56:a6:23:df:d0:3b:22:73:26:51:bc:94:5f:
         e0:9a:16:ff:90:b8:2c:84:14:a4:82:2d:01:58:d0:77:65:e5:
         8d:78:dd:43:82:29:4b:a8:a3:ea:64:a8:21:a1:82:96:89:b1:
         ef:bd:52:05:40:69:d2:05:a3:11:7c:7a:0b:13:4d:47:58:c9:
         ea:b5:ca:2b:41:eb:37:d5:8c:2e:90:ef:90:87:e0:97:be:33:
         62:73:c1:83:f7:fe:ce:39:a0:79:21:e0:7b:ec:dd:cc:a5:2c:
         a8:5f:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:06:05 2025 by rpki-client