Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
File:                     GjYLuKDpc6mKMX37qjesPBTFhwU.mft (raw, json)
Hash identifier:          u7E8ZzW8ZC/uQJB21pOcpPwyrS1rC8IzFAK2sDiQ9G4=
Subject key identifier:   78:A3:D8:6E:8C:BE:82:90:96:92:44:D7:3B:F4:34:DB:22:DF:7A:62
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Certificate issuer:       /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial:       019681A27624F6E2D2D72A69BA2F04779C9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
Manifest number:          1517
Signing time:             Tue 29 Apr 2025 13:00:29 +0000
Manifest this update:     Tue 29 Apr 2025 13:00:29 +0000
Manifest next update:     Wed 30 Apr 2025 13:00:29 +0000
Files and hashes:         1: Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (hash: VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=)
                          2: GjYLuKDpc6mKMX37qjesPBTFhwU.crl (hash: 38skIQJLV4ai7gWOXyL0nMbhbIu5CxM9AFUId3VvE/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:a2:76:24:f6:e2:d2:d7:2a:69:ba:2f:04:77:9c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
        Validity
            Not Before: Apr 29 13:00:29 2025 GMT
            Not After : Apr 30 13:00:29 2025 GMT
        Subject: CN=78a3d86e8cbe8290969244d73bf434db22df7a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:5c:f3:e4:0c:e1:7c:ae:c0:93:cb:dc:8f:
                    e5:58:62:1b:d9:8a:5f:68:db:08:7a:0e:57:8e:6a:
                    7a:80:d3:a0:75:17:6c:07:36:9e:d0:7d:cc:7f:ef:
                    18:a8:a1:5e:ea:4a:e5:09:75:e3:c2:5a:ce:eb:ef:
                    22:d3:68:84:b3:3a:76:f9:40:28:75:4e:9c:7b:4a:
                    ed:7b:f2:a7:53:71:45:4a:4f:32:f7:f8:d8:4d:ca:
                    f8:82:6f:68:f2:f3:ca:cc:a3:8e:05:bd:d1:fb:87:
                    87:ce:ee:97:aa:a7:f2:7f:0c:3b:12:e8:f8:ad:38:
                    96:14:29:82:17:e9:ca:7c:8f:c8:94:02:9f:ca:6f:
                    eb:a4:6e:b4:1e:3d:49:9d:3d:f4:f1:6a:69:1c:90:
                    9b:9a:05:fd:20:7b:bd:4a:37:53:70:84:1b:7f:5c:
                    c7:0e:c1:e6:25:ac:87:02:f6:60:e9:86:94:e6:fe:
                    a2:8b:dc:85:b4:26:7c:fb:69:bb:fe:36:e7:de:8d:
                    d2:72:7f:d1:80:f9:70:da:5a:eb:d9:92:78:13:c4:
                    20:60:ff:30:ee:bf:9b:3f:3d:bc:35:8e:bc:f3:f8:
                    37:5c:79:8f:35:1c:1c:cf:4a:e6:f2:73:a3:29:8a:
                    87:6a:98:ee:97:01:64:7c:15:1c:f9:2b:91:8a:79:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A3:D8:6E:8C:BE:82:90:96:92:44:D7:3B:F4:34:DB:22:DF:7A:62
            X509v3 Authority Key Identifier:
                keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8e:2e:80:24:c5:09:7c:49:81:da:9f:16:44:86:8b:06:af:
         ba:5d:69:40:a9:11:a6:c7:36:52:99:08:88:c1:fb:88:f0:7e:
         a1:32:31:f6:a2:c2:0b:a7:e2:59:0d:2e:f2:ca:1d:b5:6c:50:
         b9:08:59:b6:f7:1b:fa:8e:11:62:0b:55:2b:b6:40:94:a0:5a:
         ec:54:e0:10:72:a7:90:f1:f2:88:11:b3:d2:16:8e:25:5c:ad:
         48:6c:f4:93:ad:88:83:20:dc:bc:02:0b:ae:46:aa:45:60:4b:
         e6:6a:f6:db:63:ac:f2:75:32:a4:2f:12:50:2e:53:f4:5d:bc:
         c1:76:58:e2:5e:c3:ac:0e:a1:53:28:bf:a7:ba:61:72:e1:1a:
         39:4c:0d:22:1e:66:a0:71:b4:56:7c:31:84:93:43:75:39:b5:
         cc:06:63:8a:ad:14:fb:4c:b4:60:85:3f:27:2f:e0:6b:f8:5d:
         11:1c:0b:49:7e:de:58:23:aa:44:fb:31:c6:a8:55:33:fb:8a:
         85:60:52:29:d5:e9:86:31:4d:21:eb:a8:09:03:a8:1b:49:ef:
         b3:c2:05:d8:35:a2:a3:9a:de:ee:68:d7:d0:ea:72:b3:3f:bb:
         64:c4:53:29:a3:3c:ad:cc:c5:12:f4:8e:c7:9e:83:c2:56:23:
         d5:46:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:17:54 2025 by rpki-client