Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File:                     G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier:          jU8hGvPhz7+cpdtiECRQeSHYLTySElvCOmx0arvITL0=
Subject key identifier:   91:BC:A4:CA:3D:B7:93:AE:C9:3B:CF:E0:1A:46:98:93:76:B4:75:3B
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer:       /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial:       01976A05F6FFD2CDA1E687A8AAFC6BAD33D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number:          102D
Signing time:             Fri 13 Jun 2025 16:01:05 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:05 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:05 +0000
Files and hashes:         1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
                          2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: 4bmNGwPJxMmVri3AdoIWB55buU5QM5wm1qoXOC6OxjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:f6:ff:d2:cd:a1:e6:87:a8:aa:fc:6b:ad:33:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
        Validity
            Not Before: Jun 13 16:01:05 2025 GMT
            Not After : Jun 14 16:01:05 2025 GMT
        Subject: CN=91bca4ca3db793aec93bcfe01a46989376b4753b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:5a:23:ae:5d:fa:76:eb:49:88:c0:c2:59:
                    19:12:ed:38:a6:fa:3e:17:d9:26:27:9f:3b:c0:21:
                    6d:f8:ae:19:a0:1c:f1:0b:3d:7b:5e:7b:97:32:b2:
                    68:aa:be:2e:40:fc:98:90:c9:43:34:0e:0e:d0:45:
                    9c:fe:5c:4f:53:7f:60:ce:a9:c0:51:95:80:25:a8:
                    ff:33:db:c0:1b:c7:bb:61:6b:d7:9f:bb:f0:2f:ea:
                    fc:c7:5a:1c:04:9b:92:45:04:14:00:bb:e6:62:3a:
                    4c:e8:19:be:b6:17:30:23:84:d9:da:5a:34:68:8c:
                    85:be:e2:1e:1b:0f:c4:dc:c2:15:86:40:22:7a:b8:
                    a4:e5:62:ed:ef:04:1a:77:f5:68:e6:48:b0:bb:ba:
                    0a:b7:91:32:7b:d9:79:92:9b:4e:c0:c3:8c:17:f7:
                    b5:13:cf:38:8f:78:9b:69:17:47:cb:97:04:3c:e0:
                    e5:5f:8f:d5:89:d8:95:63:2c:00:4f:9d:b7:2a:c7:
                    2c:bb:93:a1:c5:66:74:57:72:70:1a:db:d2:d8:af:
                    d3:38:cc:89:4f:43:c3:59:de:7d:f9:3a:c6:88:2e:
                    96:18:21:35:c2:46:76:7e:a6:dd:7a:cf:d5:93:c5:
                    37:7a:da:b2:a7:47:dd:46:a6:c1:85:72:a3:93:1f:
                    1b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BC:A4:CA:3D:B7:93:AE:C9:3B:CF:E0:1A:46:98:93:76:B4:75:3B
            X509v3 Authority Key Identifier:
                keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:e6:e2:8a:8c:2c:3b:41:47:5a:f6:c8:51:23:53:b5:20:
         9f:1e:f4:a2:54:1a:56:02:ae:2f:ca:ff:f1:87:21:be:98:e5:
         2a:a3:f3:39:04:a9:ae:00:ef:3d:6d:05:2c:59:23:e8:59:3b:
         1b:85:e4:a5:b6:2d:11:53:ef:d4:61:46:db:b5:b6:9a:c5:20:
         d9:dc:ed:34:c6:55:23:fa:a7:63:bf:ff:62:ca:ab:98:10:0e:
         81:93:d4:16:d3:e5:75:ba:27:5e:c4:e4:9e:1a:21:44:2e:ff:
         2a:9e:f1:f5:08:e9:63:05:05:a8:50:25:02:ce:c9:3d:2d:09:
         cf:e0:06:a1:e2:0d:fa:9a:6f:d2:84:93:d3:ab:32:64:27:8f:
         64:33:7d:80:4d:49:a6:18:98:e1:b3:b3:66:f5:e7:9b:57:5d:
         b8:dc:3c:44:64:45:cf:95:2b:f2:35:c3:75:9c:be:93:7f:a1:
         fa:1e:92:9d:37:4a:c3:69:d4:be:73:de:79:4f:64:ac:a4:76:
         55:72:89:89:96:9c:0c:e8:ef:18:a4:27:06:84:8b:e7:aa:af:
         8b:77:a1:07:50:27:9c:4f:3e:73:67:e7:a0:b9:51:ab:60:7b:
         11:72:b3:03:90:41:6e:a6:4a:4d:74:66:a2:37:c9:d0:a2:49:
         96:36:14:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:42:31 2025 by rpki-client