Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File:                     gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier:          bLs1jajgwgPq5q6qBkwcsMIJzCMkfixC9OFxQU3zcL4=
Subject key identifier:   7E:79:FF:FB:CB:C7:7D:0A:CC:56:0D:0E:A2:61:64:3C:6A:45:B5:6D
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer:       /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial:       01976A060EA508BFFE5718810092B10F1AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number:          1598
Signing time:             Fri 13 Jun 2025 16:01:11 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:11 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:11 +0000
Files and hashes:         1: HahR5soNktUlYKPgZEbE7H3aKhs.roa (hash: lStniR/EONynfdLx+qNvUDgudFR2+K1QsCmoIxTWUXU=)
                          2: VpDc8u2rAhCHY8dw5A-uURm2uTo.roa (hash: TnPUye+699meF5Ik4Elk4nVoV3KO8X7ti0DlB40uigY=)
                          3: ZkqOfmuhubAXa5wjbsE6j4_ahXs.roa (hash: Hey5kTZ4283sFnXZkMTOrQ0P+6y/gPOLg1iSKQS0uK8=)
                          4: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: eMHzgFU1S5w67+0guEnyvm0daI81mnja5r54GZLbj8c=)
                          5: j1-fP3sdEayV1bR9GGOFSeW4cN0.roa (hash: z2Cs0c66T/XL7AZnx0VV9qMsM3hsvemjVWPE/YF4p8M=)
                          6: kgWUcLVwnlHQ9N0edYU-mPTihYQ.roa (hash: Rkf4hqgx8RyOM/raBR82mKj09VXl9DozZJeQyPvjCIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:06:0e:a5:08:bf:fe:57:18:81:00:92:b1:0f:1a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
        Validity
            Not Before: Jun 13 16:01:11 2025 GMT
            Not After : Jun 14 16:01:11 2025 GMT
        Subject: CN=7e79fffbcbc77d0acc560d0ea261643c6a45b56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:c9:f7:79:cd:30:06:c1:4c:53:17:7b:df:
                    43:af:28:5b:4b:8e:3f:9b:55:da:a6:bb:4e:ef:3e:
                    d9:67:6a:06:d9:1c:b3:0b:af:b5:24:14:db:f9:3a:
                    2e:e9:1f:63:62:10:d1:2f:c4:a9:c6:d4:9a:2a:77:
                    7a:91:6e:b1:9e:3d:e0:40:b1:4c:91:ca:60:c6:4c:
                    04:76:9a:74:6e:e1:e3:fa:55:84:93:fa:e3:c8:db:
                    da:e6:d7:87:c3:a7:00:67:ed:38:1a:e8:6e:34:7d:
                    ff:ba:32:84:d0:1e:c5:63:90:ee:54:17:b9:ce:53:
                    d8:cb:74:9d:94:6b:a1:20:3e:6e:17:fc:57:77:8d:
                    6d:58:b6:8f:75:f1:8f:b2:54:5f:f6:67:d2:32:06:
                    c8:90:3f:f3:7e:7a:8a:0c:46:8e:c1:28:3f:88:9a:
                    37:52:82:e5:7a:3e:41:4d:68:23:e7:8e:8d:9d:cc:
                    58:80:75:2c:36:40:cf:c9:a5:f7:8d:07:d3:ac:e5:
                    03:be:f1:a7:bd:97:85:94:07:69:61:d4:6e:be:f8:
                    07:f0:46:c6:f6:62:dd:e2:b9:52:8e:1b:ea:c1:07:
                    ca:04:a2:fe:76:18:e7:89:b9:aa:17:7d:5f:51:7a:
                    a2:8b:96:1c:54:98:0f:f4:91:36:1a:a8:01:ac:26:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:79:FF:FB:CB:C7:7D:0A:CC:56:0D:0E:A2:61:64:3C:6A:45:B5:6D
            X509v3 Authority Key Identifier:
                keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:14:d3:ac:83:8c:45:5e:d9:93:de:d6:86:cd:bf:a3:f5:64:
         44:b0:80:87:e8:8e:b9:ac:db:0b:cc:01:83:e9:65:ba:89:25:
         a1:7c:93:99:90:9b:5c:d8:19:54:fb:b9:ea:d6:78:a6:5c:6a:
         96:71:85:12:26:3b:4a:f7:db:23:6f:98:53:32:07:9b:98:e7:
         f5:57:07:2e:1d:a3:27:02:43:51:74:e4:e0:7a:7e:ba:c6:9f:
         96:13:3f:e2:d6:ed:d8:ae:1d:ef:41:73:2f:68:0d:3f:1d:1e:
         d4:c4:17:1b:8b:54:36:68:0b:5b:9c:2c:f9:dd:ab:a9:b2:85:
         5d:12:79:38:a3:a1:d4:9a:1a:be:3d:02:e0:be:52:f2:35:1e:
         cc:ff:a5:94:23:5c:63:47:6d:a8:c3:a3:b5:1d:f9:ae:dd:06:
         e2:d7:d8:0d:39:32:39:10:d9:ec:e1:56:24:37:be:33:69:73:
         ff:48:15:4e:b8:18:1b:4d:b0:f9:1a:9c:54:d8:05:cb:88:b5:
         f8:eb:fe:4e:72:da:df:cb:06:bc:a0:1a:89:7b:e4:14:1b:1a:
         e1:d4:4d:38:01:c2:ba:76:58:92:af:db:09:c8:cb:1e:9e:16:
         a5:32:65:46:08:ba:4a:3a:9f:b0:5c:e7:67:43:8a:7c:47:8f:
         ec:5c:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:11 2025 by rpki-client