Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File:                     GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier:          D8+xDHGDZzCEjRivNRhRsmZcWv0NC27vQ3Lo0r8DBpM=
Subject key identifier:   4D:E5:C8:9C:F6:80:42:BC:CD:6E:BC:5A:73:5D:F7:50:8F:45:45:C8
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer:       /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial:       01976F63212125609DACBD90433486531975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 17:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:56 +0000
Files and hashes:         1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: cyOsoy/EeP7aC+imbzEhBcWe5Nhb1BtLUwf2dGD4fkM=)
                          2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:63:21:21:25:60:9d:ac:bd:90:43:34:86:53:19:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
        Validity
            Not Before: Jun 14 17:00:56 2025 GMT
            Not After : Jun 15 17:00:56 2025 GMT
        Subject: CN=4de5c89cf68042bccd6ebc5a735df7508f4545c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:16:48:b4:4a:e0:39:a0:ab:58:de:a4:ea:
                    fa:c2:fa:9c:27:52:be:51:97:ad:d1:65:91:c1:30:
                    7a:d9:b3:2c:23:bf:98:23:00:f0:cc:45:18:f8:b5:
                    8e:f0:3c:38:94:f8:8c:a8:37:ba:f9:92:09:bc:77:
                    17:29:21:f8:86:6e:29:ec:5c:3b:6a:39:63:3f:b6:
                    c8:0f:32:d1:89:d7:01:46:c0:48:72:47:31:69:5d:
                    be:2f:2d:60:03:14:f4:45:1a:54:98:7f:a8:56:b2:
                    a5:21:43:7c:68:a9:15:4e:ea:0a:77:15:90:72:dc:
                    dc:7a:c1:56:01:fe:f6:68:bf:03:26:d9:fd:ba:65:
                    de:f4:cc:e7:1c:11:61:24:5d:a6:8a:36:b4:8a:96:
                    eb:24:88:85:16:e5:b1:c4:09:15:f9:c2:dd:6a:b5:
                    91:00:c1:d9:2f:13:3e:0a:2f:88:cd:5c:fc:a9:e0:
                    db:49:f2:2e:c1:29:55:83:b5:65:e4:28:97:df:5c:
                    d4:c4:af:ec:21:3a:0b:b1:cf:48:b6:6a:16:cc:52:
                    aa:a4:46:e5:9a:19:d7:c2:18:98:50:f7:84:51:32:
                    92:46:9b:18:64:0c:c7:00:c2:06:09:3d:5b:b5:18:
                    6f:8b:32:d9:70:28:e1:13:32:12:b7:b0:c4:7d:45:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E5:C8:9C:F6:80:42:BC:CD:6E:BC:5A:73:5D:F7:50:8F:45:45:C8
            X509v3 Authority Key Identifier:
                keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d4:fe:44:f2:c5:26:f4:b1:19:a8:1f:24:ad:b5:ee:6d:96:
         10:6b:0f:08:99:01:2e:30:4f:78:eb:58:ae:e5:0b:45:9b:81:
         f7:e4:b7:d6:08:cb:b4:91:53:c3:20:7a:a7:18:01:37:9a:c5:
         fa:ed:42:94:0b:16:a1:f0:d2:9d:fe:83:37:3b:25:8c:4b:c6:
         e8:2b:39:49:fe:47:03:ea:05:fc:a4:d6:2a:f3:fd:da:1c:c1:
         5c:b4:d1:79:40:03:2b:8d:f2:f7:9d:37:5e:c7:31:17:0e:ad:
         d1:15:4b:86:03:4c:19:46:9e:3b:95:9a:f2:27:ee:31:5c:d4:
         dc:d9:a1:0a:a1:f8:93:f0:fe:bc:07:d2:ba:34:60:d2:c4:57:
         59:02:0f:8c:e9:b6:97:cb:6f:98:30:e0:40:44:e0:25:89:6b:
         e9:7c:33:b5:73:9d:dd:f1:b5:98:6c:bd:80:bb:dd:93:2d:b8:
         a9:c8:64:c4:e7:e5:5e:72:d4:5e:62:9d:63:10:8b:a8:06:c0:
         87:5a:d8:5a:57:df:98:6f:51:cf:23:3e:f2:ba:8b:cf:60:97:
         b0:a2:ae:cd:66:38:ee:85:72:1e:ee:42:fd:ff:d9:38:05:85:
         c1:48:4a:a2:1e:29:8b:15:bd:01:84:26:d6:62:8e:e5:e4:12:
         b8:3b:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:52:36 2025 by rpki-client