Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
File:                     Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft (raw, json)
Hash identifier:          D4st/HoJUqgUQ91qmFZNoQYRAl9hRsY/y61q1gkF9GI=
Subject key identifier:   EE:39:D5:93:50:6A:DD:F9:37:5C:AB:D7:20:7E:59:45:C0:1B:7D:65
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Certificate issuer:       /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial:       019771BF6C51AD6B7898047F570EE5888C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
Manifest number:          1593
Signing time:             Sun 15 Jun 2025 04:00:59 +0000
Manifest this update:     Sun 15 Jun 2025 04:00:59 +0000
Manifest next update:     Mon 16 Jun 2025 04:00:59 +0000
Files and hashes:         1: Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl (hash: TLe8wjQXsESfDrk+Iftpb6IzjJgCe4guPzh/NdGkCHU=)
                          2: Z0_nKn5Ppf7O_xlPG_HQgKTjKfg.roa (hash: lqxBjj1kSi94JV6i0p7bCeDB9JZ982zRhs/Zft9BEa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:bf:6c:51:ad:6b:78:98:04:7f:57:0e:e5:88:8c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
        Validity
            Not Before: Jun 15 04:00:59 2025 GMT
            Not After : Jun 16 04:00:59 2025 GMT
        Subject: CN=ee39d593506addf9375cabd7207e5945c01b7d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:63:2c:ba:a9:3e:cc:d2:83:0b:5c:59:ec:
                    06:e6:7a:e0:b1:79:df:fc:3b:a8:1d:1e:e3:39:e7:
                    93:e1:05:90:ae:05:de:d2:c6:b0:b7:5f:5b:a1:0d:
                    55:fa:1a:a2:19:fe:a2:0e:9d:dc:27:90:43:76:d9:
                    ac:79:9e:c8:69:e2:52:ed:dd:8f:5b:8e:52:97:3d:
                    92:d5:c5:0b:06:38:4f:02:94:4d:6c:ae:cb:bf:b2:
                    0c:cc:8d:e9:9a:b5:7b:39:ce:32:80:97:84:b5:1e:
                    bb:6d:47:4a:d4:f2:b1:25:9b:dd:fc:1e:ea:40:79:
                    e0:ff:54:65:f8:7f:7d:44:78:35:92:19:52:e6:b9:
                    f1:d4:cc:89:b7:dd:b2:23:12:6a:a4:d7:6b:9d:7d:
                    68:8f:5e:c3:6f:43:08:2d:a5:78:54:a8:b7:27:93:
                    89:0e:6c:4f:e4:59:a7:57:ce:ef:28:1a:24:c2:64:
                    fd:03:82:6f:88:1f:b6:c8:f8:62:9f:10:71:a7:98:
                    a8:7f:e7:fa:6b:65:cc:86:61:ad:41:21:2c:85:6b:
                    bf:f0:d0:0c:81:78:dd:99:b1:e5:35:43:c8:a1:cc:
                    4f:88:5c:1c:21:6c:89:fd:eb:ec:88:26:40:41:d3:
                    21:2d:97:c1:76:04:8e:81:9f:30:cd:e4:1a:73:a4:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:39:D5:93:50:6A:DD:F9:37:5C:AB:D7:20:7E:59:45:C0:1B:7D:65
            X509v3 Authority Key Identifier:
                keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:90:4d:84:e4:b7:36:db:9e:85:01:42:37:a7:28:cf:96:45:
         11:c7:9a:b9:4a:fe:93:43:95:3b:98:32:3a:2e:58:cc:56:23:
         e1:11:ba:4d:a9:d2:11:cb:0c:cc:21:36:1b:52:f8:75:67:32:
         f9:11:d2:72:33:04:06:5d:0a:b5:26:81:91:fa:96:79:c0:6f:
         42:92:fb:69:10:7a:0d:46:3c:66:7b:89:26:64:3f:82:f6:95:
         3c:c1:56:73:e3:ba:79:0d:2c:13:1b:9b:35:39:4c:02:b1:c1:
         00:d3:53:5e:63:32:7e:3f:33:c5:fb:b2:d4:01:92:66:16:a3:
         53:c5:11:cd:df:31:dd:da:9a:15:0a:f5:85:e2:ad:39:1c:03:
         ca:b2:9c:3c:e9:d2:27:26:da:f5:2d:62:43:df:cb:97:e0:82:
         a5:a0:31:ea:18:bd:5f:2b:84:06:f2:a0:2c:dd:3b:c3:12:ca:
         11:31:5e:0a:be:87:55:5d:d8:2c:9c:1b:7d:10:0c:38:55:f7:
         63:80:58:22:e0:8d:5e:db:ec:47:55:8f:11:1f:dd:d4:1e:05:
         b8:09:0d:50:dc:f2:e0:3d:af:96:0f:d2:72:b6:a7:c9:74:76:
         9c:00:df:ae:35:be:26:66:40:68:4f:c1:c6:25:b4:6f:04:34:
         c6:21:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:01:52 2025 by rpki-client