Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File:                     GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier:          NnRZCTx7WuI+bqczkOwDlTxVqxkA2s3OQoM7I4PZmaw=
Subject key identifier:   F5:08:FA:60:97:58:BE:F7:24:EC:22:CB:1B:93:C1:82:A4:36:9A:97
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer:       /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial:       01977F0D1FBE0557BAF10379C3F74F9E22AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number:          1597
Signing time:             Tue 17 Jun 2025 18:00:55 +0000
Manifest this update:     Tue 17 Jun 2025 18:00:55 +0000
Manifest next update:     Wed 18 Jun 2025 18:00:55 +0000
Files and hashes:         1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=)
                          2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: 5LctXPtL4xelTXbWhOcHSr5mwwQJVBfe8mmXIY6/Gv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:0d:1f:be:05:57:ba:f1:03:79:c3:f7:4f:9e:22:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
        Validity
            Not Before: Jun 17 18:00:55 2025 GMT
            Not After : Jun 18 18:00:55 2025 GMT
        Subject: CN=f508fa609758bef724ec22cb1b93c182a4369a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8c:e9:65:e3:aa:a8:74:55:75:46:ec:a5:62:
                    67:38:19:76:03:20:1e:e0:6e:62:ae:b2:84:d2:e3:
                    ce:a3:d4:6e:83:2b:d3:72:84:8e:e4:ab:35:fa:68:
                    ad:c2:d5:a6:3e:46:ae:32:a8:a3:29:e8:b2:24:0c:
                    2e:27:52:9b:b5:4d:ac:c2:06:60:98:a2:ad:85:79:
                    b4:60:2c:4f:e2:61:99:5c:9a:ca:e5:5d:da:2a:d9:
                    6f:ae:79:64:85:a4:4d:94:0f:c8:72:47:5c:40:fa:
                    53:f7:9c:1b:16:a4:60:5f:5e:08:2c:96:7c:23:22:
                    c4:44:e1:b2:7c:67:68:67:7f:47:81:dc:dd:6f:9a:
                    ac:3a:69:8c:3d:6a:f4:2b:6f:32:4f:4c:a3:a2:06:
                    35:8e:78:23:89:4e:a6:3f:0b:63:53:8e:91:81:37:
                    f7:11:a6:28:27:90:91:3d:51:e2:b9:2e:99:11:d0:
                    ee:93:f8:c9:fd:9f:df:7f:e8:30:9a:f0:78:a2:5b:
                    49:cd:dd:55:60:be:88:05:7b:98:a7:dc:51:85:ed:
                    33:ae:1a:95:f1:86:1d:8e:58:79:90:48:c0:ea:7f:
                    cc:65:d0:c3:e6:3c:83:38:b4:ec:7e:33:42:38:5e:
                    08:45:78:5b:89:03:8b:48:9a:35:91:92:a7:0e:b9:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:08:FA:60:97:58:BE:F7:24:EC:22:CB:1B:93:C1:82:A4:36:9A:97
            X509v3 Authority Key Identifier:
                keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:77:64:1c:ca:f3:04:1d:96:b9:fa:b2:19:95:db:ae:00:
         16:a6:1c:28:c0:23:a0:37:d1:6d:c6:43:d6:77:f3:c1:84:b8:
         b1:65:14:4b:6e:ec:1e:2f:63:4d:6c:2f:36:bf:6d:cd:28:cd:
         66:d2:2f:c3:20:d6:27:d6:67:1f:e6:d4:bb:39:75:51:ea:4e:
         11:29:12:09:41:4a:7e:c4:5c:52:cd:c5:68:00:37:43:0d:19:
         7b:92:b0:8f:ec:1e:2d:b5:45:85:80:72:9f:56:b0:b1:51:05:
         ac:c2:50:2d:88:28:de:a5:0b:73:29:16:29:90:bb:42:fc:d0:
         55:e0:29:54:38:ca:10:82:3c:9d:31:4f:45:7f:e6:c1:2c:c9:
         21:6f:0c:d6:60:c0:39:d7:0e:20:cc:c4:27:92:8f:1a:ea:f5:
         00:9b:98:28:9d:9e:89:16:e5:15:f6:71:d2:58:cb:75:df:89:
         b3:c5:9b:5f:d2:75:dc:1f:a8:99:d1:2f:41:fc:79:c4:12:f0:
         bc:91:93:f4:2d:94:17:62:98:ed:ca:fb:ce:ff:1d:65:db:92:
         35:76:9a:d9:19:95:07:75:f7:66:37:dd:bc:5e:52:d9:64:36:
         61:d0:ff:ab:20:9b:14:e7:e8:e1:4a:43:b9:5d:17:34:35:10:
         f6:e6:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:39:53 2025 by rpki-client