Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File:                     GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier:          tIm1BzZ4OzMHQjVfp40iPT3AiQMC6+WFeDz2mocMO3o=
Subject key identifier:   54:96:F5:5D:D1:1B:83:86:24:8D:04:24:1D:96:3E:9A:25:12:FA:13
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer:       /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial:       019769CE9DC780031525D414A21FA6B7795B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 15:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:37 +0000
Files and hashes:         1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: KpwRRuECpFfLhZgRYak6e4x83lh9ZJkGcEWFsquWUIc=)
                          2: d_nm2W-JAOMOvlYUOY6MB9B3XU8.roa (hash: FXXHaJZOOCGhJh6oru5lWoLEhggOrs5w/eP6GgcI5Qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:9d:c7:80:03:15:25:d4:14:a2:1f:a6:b7:79:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
        Validity
            Not Before: Jun 13 15:00:37 2025 GMT
            Not After : Jun 14 15:00:37 2025 GMT
        Subject: CN=5496f55dd11b8386248d04241d963e9a2512fa13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:af:5b:dd:82:09:21:87:25:9b:74:1e:af:
                    c2:d6:2a:6c:06:5e:7b:31:48:d6:66:84:2f:98:bb:
                    b6:3b:45:e0:f4:dd:f2:de:59:6d:59:21:c7:67:19:
                    21:6c:e0:50:28:f8:37:89:c2:ea:8b:d6:d5:00:5d:
                    9f:74:90:59:4e:47:19:86:64:3f:db:dc:4e:27:1a:
                    5c:09:0f:75:29:d7:37:26:22:23:6c:fa:f8:e6:04:
                    73:7f:e6:08:6f:a7:5d:e3:32:19:19:01:e1:1c:b4:
                    77:91:41:0e:77:5d:e1:a0:88:5b:71:20:1e:cd:d6:
                    af:18:e5:fe:5d:f7:72:d9:f7:9d:98:e7:d9:40:88:
                    06:d2:44:ff:54:68:78:1d:a5:f1:d0:ce:35:7a:05:
                    b6:32:f0:b8:86:90:b2:db:36:1f:96:ae:58:a2:f6:
                    3c:d0:9b:21:76:b3:0f:25:56:ed:5a:ac:64:30:b2:
                    a2:28:a1:a2:81:f0:a1:81:a3:f9:91:14:ee:70:dc:
                    1a:d2:8e:ec:c5:5c:ac:69:a9:d5:4c:bd:ec:40:80:
                    d9:3e:c3:7c:12:87:99:a1:7e:30:cb:8d:2f:ca:03:
                    9b:20:1f:71:41:51:d7:a3:7d:fa:91:c0:54:51:ce:
                    b7:ad:31:cf:92:c6:79:5f:6e:01:ce:30:48:34:e9:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:96:F5:5D:D1:1B:83:86:24:8D:04:24:1D:96:3E:9A:25:12:FA:13
            X509v3 Authority Key Identifier:
                keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:54:97:9b:28:73:75:38:13:75:ca:86:f2:c5:c9:ec:d3:17:
         ec:59:b9:b5:ec:00:e1:32:9a:df:db:16:f1:f4:83:d8:e5:5d:
         58:f2:28:01:12:1e:6c:a1:da:6e:a5:18:69:bd:72:51:ca:d0:
         ad:d3:48:c7:db:48:71:0b:c6:38:29:00:a8:22:3a:42:21:7d:
         5d:b2:a0:03:5d:96:6b:10:4f:ff:e4:1a:cc:a1:0b:b1:84:79:
         04:c4:89:ff:46:95:d8:e0:11:0a:58:f0:c5:e2:aa:08:04:51:
         28:ad:d1:df:1c:c4:13:ec:ac:3e:9a:fe:e2:ae:fc:84:38:08:
         42:5f:b4:05:31:01:44:84:43:77:b8:e4:74:3d:4a:cc:4b:14:
         ce:ef:e4:a4:88:09:66:0f:dd:31:1c:c7:6f:ae:4b:6f:74:8b:
         65:6b:60:38:d5:b7:b3:97:63:07:bd:1d:00:79:e2:92:b6:6a:
         d8:c9:6a:e6:34:9b:67:10:0d:68:41:c0:e4:d6:c0:d0:f2:a5:
         b5:e0:23:88:d6:1f:ef:cd:db:ef:e9:82:b3:6c:a6:d6:eb:fd:
         3e:fa:4b:b6:ba:ef:bc:d2:90:72:64:8f:d6:3f:3f:23:7d:bd:
         f6:39:1f:ca:b1:6f:2a:d6:c0:39:05:7c:4d:06:bc:9b:80:a5:
         3c:6d:8e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:05:02 2025 by rpki-client