Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File:                     gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier:          /lPfwCosrsGdx2GmXJ3HsHl7+9akfK/Y4+pez/AW5l0=
Subject key identifier:   49:02:BA:EE:B9:1F:18:4E:20:41:2E:A0:9A:28:DF:B3:A7:43:6E:CD
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer:       /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial:       01976FD17268A865AC30E1DB82E699ED27A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 19:01:26 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:26 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:26 +0000
Files and hashes:         1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: 4swBhXDRM325k4wgACcvNUCa5DiQZqgXMtuQ/648oSs=)
                          2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:72:68:a8:65:ac:30:e1:db:82:e6:99:ed:27:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
        Validity
            Not Before: Jun 14 19:01:26 2025 GMT
            Not After : Jun 15 19:01:26 2025 GMT
        Subject: CN=4902baeeb91f184e20412ea09a28dfb3a7436ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:3f:48:9c:1a:69:a8:33:b3:a8:e9:d8:86:
                    47:5b:73:23:d0:85:a9:d4:2a:8b:74:f3:48:f1:20:
                    43:c8:ba:ff:91:d5:26:45:d1:64:a8:5a:3e:12:88:
                    2c:f7:d7:21:79:ed:da:f8:11:b7:67:4f:1c:ad:e1:
                    90:e1:32:bd:c9:e5:14:34:17:b4:c6:49:7b:24:15:
                    94:2e:15:c4:c0:ce:59:d4:4a:5d:93:e4:62:95:ce:
                    18:bf:ab:23:81:f4:4d:48:34:68:d3:51:9b:3c:99:
                    17:6e:1e:b8:5a:e0:03:e2:5f:57:95:58:3e:92:a9:
                    56:a5:ad:c9:b3:bb:a4:8d:d0:af:7d:93:f4:93:df:
                    2d:08:9b:87:9f:c2:13:3a:17:cf:4c:92:9b:f1:ac:
                    7a:70:8b:af:53:20:15:f4:ce:59:b1:8b:fc:5d:2d:
                    3b:eb:2f:0a:6d:7d:b1:aa:ec:58:b5:5e:8f:91:5a:
                    fb:38:be:dc:76:10:b5:ab:c0:6d:bc:d8:1e:f9:65:
                    cb:f5:80:c2:c8:b8:eb:94:72:15:33:84:39:7a:65:
                    bd:a1:e1:f0:65:2b:ff:60:8b:6a:51:b4:de:56:56:
                    f7:48:e1:fc:07:23:bf:19:64:fb:83:8e:7d:a7:df:
                    22:30:24:4d:eb:6c:88:80:8a:d8:7d:9a:ef:c5:62:
                    49:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:02:BA:EE:B9:1F:18:4E:20:41:2E:A0:9A:28:DF:B3:A7:43:6E:CD
            X509v3 Authority Key Identifier:
                keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:73:e3:1c:cb:a8:98:24:7b:26:32:26:9f:a3:45:40:b7:
         d4:cc:14:5c:ae:0e:c9:02:e9:58:53:96:68:66:74:d2:17:8e:
         c4:ff:44:93:5e:cc:90:21:c3:f2:98:2e:9d:20:ce:f9:fa:b5:
         73:0a:5a:55:2a:2a:0c:61:42:a0:b7:54:b9:68:db:ad:cf:e7:
         75:f0:76:97:c4:ec:75:8e:8f:b7:55:c7:c7:56:ef:ad:93:4b:
         5d:de:d4:22:02:c8:a9:47:a1:81:50:79:fa:9d:f5:b2:79:46:
         75:d4:42:3f:a4:5c:fd:e6:aa:86:e4:da:c9:e5:ab:5a:6f:f4:
         99:6b:d3:6b:ca:a9:12:16:35:19:40:fb:6b:d4:62:4f:ef:6c:
         64:13:45:5a:94:6d:f3:f9:ad:75:9f:5c:7b:86:54:67:1a:e2:
         f5:e2:25:ff:6e:e6:94:40:55:1f:a3:cf:8e:b9:3d:2c:71:52:
         86:94:55:6c:86:cd:c0:c2:7d:4e:53:c3:fa:f9:69:f4:73:5f:
         07:3b:9d:b3:2c:c1:f2:17:f4:3f:69:e8:ce:88:66:06:aa:05:
         0b:27:88:e2:34:ce:96:2a:8d:57:10:18:d3:98:7b:1a:a5:8d:
         55:49:ba:32:01:d6:28:1e:5f:7c:37:20:35:2b:7e:ef:e6:d9:
         54:16:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:19 2025 by rpki-client