Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File:                     GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier:          XUuNnQG6bS6di2PXgKbcXAoEzY/+RV4kwXXe9rqdWHM=
Subject key identifier:   F4:55:B5:78:09:D9:12:DF:2A:79:27:10:1C:1B:C4:04:9E:3F:CF:76
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer:       /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial:       01977978F32B0ED13E5F4B2C99B7C827EFCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number:          B3
Signing time:             Mon 16 Jun 2025 16:00:59 +0000
Manifest this update:     Mon 16 Jun 2025 16:00:59 +0000
Manifest next update:     Tue 17 Jun 2025 16:00:59 +0000
Files and hashes:         1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: z1Ec1WrSf6o2+jivvUlwss83BQxWBMjUrlsrLqEBdQ8=)
                          2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:78:f3:2b:0e:d1:3e:5f:4b:2c:99:b7:c8:27:ef:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
        Validity
            Not Before: Jun 16 16:00:59 2025 GMT
            Not After : Jun 17 16:00:59 2025 GMT
        Subject: CN=f455b57809d912df2a7927101c1bc4049e3fcf76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:cb:e4:15:ba:43:82:c2:66:83:bd:5c:07:
                    f2:a8:fc:55:85:0f:0f:bb:5f:49:6a:31:eb:56:d6:
                    de:68:a9:d6:a5:ed:24:2d:16:0e:2a:42:4c:fe:e4:
                    1c:b8:49:62:91:df:3b:0e:c3:fb:d0:d9:a5:ad:30:
                    92:d6:89:dd:b9:05:1a:ba:9e:21:63:f6:0b:b9:cd:
                    cd:b7:bc:e0:aa:aa:40:17:af:bb:8e:be:b9:38:c2:
                    26:9f:4a:f8:39:1a:88:18:73:1f:32:3a:07:35:7f:
                    bd:dc:ea:e9:85:b5:87:15:0f:19:a2:f5:a3:c5:78:
                    db:84:26:db:6e:e2:89:06:69:43:ce:24:79:d3:78:
                    e2:76:43:7f:81:d7:23:95:6c:6d:09:47:b3:f4:1c:
                    01:14:0e:a4:d3:ce:da:b9:b4:ca:77:f7:ac:d9:76:
                    20:3f:98:94:da:e7:02:81:f1:56:6d:28:31:d3:60:
                    a2:f3:cc:13:84:5e:37:0d:df:bf:0d:87:70:6d:10:
                    56:9c:9b:ab:f3:2b:2b:58:cc:d9:17:27:60:de:c9:
                    8d:33:a9:95:cf:82:ef:9a:ca:de:c0:c5:2b:6e:eb:
                    af:f9:11:d2:16:8e:54:98:26:b0:34:02:9f:f5:48:
                    28:bb:85:92:99:2d:a0:bc:43:21:21:fe:bc:a7:52:
                    b4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:55:B5:78:09:D9:12:DF:2A:79:27:10:1C:1B:C4:04:9E:3F:CF:76
            X509v3 Authority Key Identifier:
                keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:24:24:0e:36:60:f8:05:1b:31:1d:e8:e6:b3:bf:71:24:f8:
         ab:cd:bd:06:79:25:07:c1:fc:41:7f:00:c6:73:01:50:8f:a6:
         a7:10:66:40:23:1e:88:74:b6:b5:ce:d3:a3:96:6b:61:89:5e:
         29:37:c5:5a:d1:60:c8:60:16:60:e3:06:3f:bb:c8:f8:9f:cb:
         96:9e:2e:6f:8f:4f:cd:28:a6:8c:87:19:a5:4a:ae:30:8f:d0:
         77:a4:1a:55:f1:fa:48:b0:83:a5:f6:d3:26:dc:80:61:9b:ff:
         08:96:24:3c:25:e9:01:0e:e4:9b:a1:64:81:71:5e:b5:47:2f:
         2a:69:06:01:61:f2:e2:eb:90:12:66:ac:16:0f:74:e3:fe:5e:
         8e:87:2b:65:d2:b2:fc:65:9a:99:16:58:c0:34:38:ff:12:84:
         9a:21:ac:41:6b:17:70:17:9a:4b:4d:e9:1b:62:ee:f0:36:59:
         58:e5:08:96:79:52:ab:ed:73:b0:da:92:18:be:23:11:f1:15:
         22:b0:ea:c4:1f:15:0a:2b:d4:ed:b1:b5:6d:00:dd:15:93:a3:
         6d:9d:74:3f:59:4a:fd:bb:f9:a6:8a:4f:7b:53:df:9f:71:ac:
         91:4a:e2:ee:90:eb:6c:a6:83:d6:6d:d6:90:1a:3d:b7:d3:6a:
         3f:46:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:31:32 2025 by rpki-client