Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File:                     GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier:          /z9/qGokHNt66ksOCHlfSLJDNVcb8n/qw3GKtRpn9kM=
Subject key identifier:   22:DF:9E:9B:8E:23:22:40:D8:21:B8:14:4C:0F:3C:E7:54:AB:28:A3
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer:       /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial:       0197684E7DE316477CAFE191902060E2716A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number:          108E
Signing time:             Fri 13 Jun 2025 08:01:03 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:03 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:03 +0000
Files and hashes:         1: 9anLZpxCdtczPvdlYCXgAxbRs8M.roa (hash: CyG4Wg4fSftiyOPdmKS2+akGyemcGA5SuHd1aeIvuWs=)
                          2: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: YO4TejHetvRjzTvM+M51vBwHgtu/7jFZi/JgAi3OQSE=)
                          3: wgLpdQzEQiut3zZPkrk2it4-KJM.roa (hash: rQ6r9VvnZsN117x/0JkyHFIrRA5vncbf9BthsT1+A7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:7d:e3:16:47:7c:af:e1:91:90:20:60:e2:71:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
        Validity
            Not Before: Jun 13 08:01:03 2025 GMT
            Not After : Jun 14 08:01:03 2025 GMT
        Subject: CN=22df9e9b8e232240d821b8144c0f3ce754ab28a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:64:26:ea:80:ba:14:77:93:cc:49:4c:88:
                    2c:86:ef:89:dd:0d:dd:1b:37:23:56:ca:2c:c2:86:
                    84:5d:3e:1a:36:4f:fb:4e:b3:12:81:93:44:7a:15:
                    2d:c3:eb:8e:09:fe:47:74:62:43:03:be:48:9e:cf:
                    0a:2e:69:69:67:00:90:01:c8:6c:22:fe:9b:09:49:
                    cf:93:cc:42:5b:65:52:b1:de:ec:4a:d4:c5:6e:4d:
                    fb:20:42:e8:0b:8c:9e:e9:87:48:d6:a1:a6:98:b5:
                    93:32:54:e6:6c:0e:65:f1:fe:ca:6c:b3:4b:67:c8:
                    ca:c8:1b:0a:e9:f8:5f:2b:00:cf:4f:f0:83:a4:8f:
                    21:64:28:81:da:24:04:08:60:bf:3a:d1:2c:36:68:
                    e5:35:06:af:50:05:af:db:8f:32:c3:a6:69:4a:c5:
                    72:29:2e:fe:f8:7b:ed:25:0a:ac:dc:fe:d2:80:30:
                    d6:c2:df:be:75:7b:d6:3c:64:8c:97:bd:29:36:6d:
                    7c:f8:cf:12:60:0c:a0:96:6d:b3:01:30:c3:bd:cf:
                    d1:de:ac:ec:34:c9:df:72:80:ae:fc:2b:bf:81:c5:
                    b9:5a:48:d3:93:d0:f3:fd:95:a5:4c:1d:84:bc:f7:
                    fa:8e:40:0e:e8:9f:c2:a3:21:a9:88:56:5e:72:40:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DF:9E:9B:8E:23:22:40:D8:21:B8:14:4C:0F:3C:E7:54:AB:28:A3
            X509v3 Authority Key Identifier:
                keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:42:2f:bb:07:4c:9f:72:7d:ab:56:d4:74:9b:1a:0a:2d:
         8a:22:a7:2f:a9:1e:55:20:2a:5d:99:1f:8b:28:c1:97:6f:14:
         76:ae:9b:f2:16:97:5d:08:7d:a8:b2:17:34:17:b5:e4:90:70:
         ee:c3:e8:15:e5:cd:6a:18:23:d2:cd:08:42:c7:19:7f:3b:4a:
         91:92:c6:06:45:5d:1d:29:a3:2c:d6:2b:8d:c7:60:f1:14:af:
         ee:fb:77:92:58:4e:a1:8f:6e:f0:84:a7:bf:98:5c:db:c5:e7:
         1b:04:06:ae:bc:cc:d3:92:5b:73:dd:d2:42:74:84:1a:50:47:
         5c:70:f2:93:3e:c6:6e:13:d5:64:5e:df:74:1d:c2:23:cc:9e:
         54:69:08:c3:f7:be:d2:7d:cc:dc:18:b9:24:62:6f:25:01:c0:
         b4:7d:99:06:cf:75:bb:0c:86:72:70:5b:31:de:23:0b:87:ab:
         f1:b3:01:35:2b:ab:3e:da:1d:c8:67:08:13:3a:b0:80:6c:99:
         06:c8:ba:ca:cd:d7:10:5f:ab:2e:7b:f2:76:6d:a2:65:4c:c2:
         65:3f:41:2d:cb:30:5b:01:17:79:1c:f1:45:07:6b:f7:a6:ab:
         92:0d:7f:93:de:d8:0d:71:4f:61:d7:f8:46:ec:43:96:60:a7:
         80:af:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:20 2025 by rpki-client