Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File:                     gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier:          8hDENQa55yxNOkMBjy00jN0yOfL/VG6djnOe+ZqQaWY=
Subject key identifier:   0D:AF:67:1A:D4:AD:5E:96:D5:BC:C6:03:24:13:9A:D9:1F:A1:9A:C7
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer:       /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial:       01968EF07ACB55A6D8DBB1E9741172370583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number:          048A
Signing time:             Fri 02 May 2025 03:00:46 +0000
Manifest this update:     Fri 02 May 2025 03:00:46 +0000
Manifest next update:     Sat 03 May 2025 03:00:46 +0000
Files and hashes:         1: cv2xTszOP7j1k8VH8Xq8b77acso.roa (hash: gJcKaSX3/S1aDVSD+NWUNHhQVwYYx7ZgiUJVulKjqVg=)
                          2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: BC3q+PUvm2lr2PxgPD3m876xc/YgFBhYuPoqbFkop4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:f0:7a:cb:55:a6:d8:db:b1:e9:74:11:72:37:05:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
        Validity
            Not Before: May  2 03:00:46 2025 GMT
            Not After : May  3 03:00:46 2025 GMT
        Subject: CN=0daf671ad4ad5e96d5bcc60324139ad91fa19ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:ba:60:07:bc:2f:3d:8f:80:16:ef:28:96:
                    c7:26:99:76:d9:fa:ea:80:61:8d:29:21:70:7a:a3:
                    00:d0:29:36:67:19:1e:4f:e8:f4:01:8b:49:78:27:
                    84:f8:50:01:52:65:4c:11:66:13:58:d5:7a:a4:ea:
                    24:93:08:65:d9:ea:72:61:56:f3:91:5a:0e:10:42:
                    8d:c2:64:ae:85:49:c3:3d:d3:87:bc:80:16:c2:95:
                    72:49:ec:37:e2:b2:96:10:ad:9c:88:7e:e1:97:b7:
                    c7:7a:11:2c:36:19:34:20:2e:a0:1d:e7:6a:a2:ca:
                    33:e9:ac:ad:4c:ce:86:02:7e:6c:58:48:00:c5:b7:
                    88:bd:60:a1:fc:da:9c:d5:d7:56:0b:ac:a3:f9:f1:
                    be:f6:f7:c7:43:09:51:33:1a:83:22:26:37:6e:2d:
                    a8:d1:99:1b:8d:88:b8:fd:ee:14:89:83:6c:eb:e6:
                    85:7b:06:50:cd:2f:44:10:8b:0a:aa:86:68:02:b0:
                    17:65:6c:ca:69:b0:b9:c0:1e:28:52:8e:0b:23:74:
                    a3:85:90:92:41:e4:dd:f3:34:1f:92:97:6c:0b:63:
                    a9:a3:f5:37:16:b8:7f:b5:b5:45:8e:b6:89:1c:48:
                    02:44:8d:a6:eb:27:51:67:bb:92:be:47:fc:fc:0d:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AF:67:1A:D4:AD:5E:96:D5:BC:C6:03:24:13:9A:D9:1F:A1:9A:C7
            X509v3 Authority Key Identifier:
                keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:84:9d:da:9c:05:f6:25:cc:17:3d:f0:68:36:e5:ed:bf:ee:
         bf:23:55:a4:7d:a0:ee:e4:36:c6:0d:00:fd:b6:23:a7:bf:4e:
         55:bc:15:53:f6:3f:60:70:4b:88:e6:b9:48:f6:88:3a:c4:06:
         50:08:b4:92:74:e5:98:a2:ac:6e:20:bc:55:46:0d:ea:da:45:
         1f:5f:9d:16:9c:5a:13:d5:19:9b:2f:fa:e7:6f:50:36:70:d5:
         13:78:d5:32:2c:0a:1a:97:13:94:f1:92:6d:72:06:ab:a2:c0:
         78:61:a2:d7:f0:9c:ed:5f:e8:84:20:24:7e:00:25:6e:89:29:
         4c:8e:79:9f:04:37:f9:26:19:d4:af:19:08:1a:80:47:55:25:
         78:07:d6:2f:25:5e:b0:1c:82:f6:3b:cd:05:10:af:d1:c2:42:
         88:91:6f:54:96:ed:cf:e6:3b:47:ab:9f:65:cd:b7:7d:43:92:
         10:4e:b7:b9:f6:9c:12:d7:f5:20:f9:e6:5b:67:a4:78:d8:86:
         26:4a:4a:c1:f7:3a:66:49:36:bd:bc:03:8e:6f:9a:32:db:e1:
         e4:ad:1d:84:00:e5:4d:9e:a9:a9:ab:e4:1e:22:e1:4c:9f:4d:
         e6:bc:6f:8b:14:2b:66:0d:94:78:c6:1f:0e:91:5e:61:36:a0:
         c0:90:33:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:06:15 2025 by rpki-client