Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File:                     GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier:          zCr8gh9Fob0xLC4/6l8cdQRfrTbWbNmbnzQtl5jHJLs=
Subject key identifier:   3E:08:8C:E3:DF:69:90:6E:58:F6:48:26:23:40:9C:EF:14:93:95:36
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer:       /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial:       01976BF4448C8E36261A5E67F32618E2195F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number:          0397
Signing time:             Sat 14 Jun 2025 01:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:59 +0000
Files and hashes:         1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: 05NJJCYUJ3dZQt9iy+FH6HsX+df53JIlHqRKwq5QgRY=)
                          2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:44:8c:8e:36:26:1a:5e:67:f3:26:18:e2:19:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
        Validity
            Not Before: Jun 14 01:00:59 2025 GMT
            Not After : Jun 15 01:00:59 2025 GMT
        Subject: CN=3e088ce3df69906e58f6482623409cef14939536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:90:59:58:33:d0:83:ee:b9:7c:7d:05:18:73:
                    55:30:d7:e7:2b:0c:d8:31:4d:b4:21:b7:c8:40:e1:
                    20:67:59:b5:d4:88:36:35:36:88:03:49:06:a0:dd:
                    0c:bf:2e:5b:27:53:05:dd:4a:ca:54:08:0d:6f:f2:
                    0e:9c:af:45:16:9f:7e:b5:19:c3:e1:7a:09:90:3e:
                    98:23:fe:8a:5a:fb:04:11:1b:b9:d4:e9:c6:b7:98:
                    a2:1e:70:2c:97:86:d1:ad:3f:b4:cc:d9:b0:29:95:
                    a2:aa:40:a1:74:de:a4:d2:fd:70:2c:0b:96:59:9e:
                    eb:94:b9:e8:53:a2:77:11:4b:df:e5:03:8a:fb:97:
                    76:47:ad:45:26:43:de:2c:8b:d7:55:1b:0c:cf:27:
                    7b:11:66:04:b9:6b:10:24:47:23:d6:9f:f0:85:8c:
                    26:39:b5:32:f2:94:ab:9c:23:02:00:51:d5:c2:70:
                    f1:c3:f3:1e:b0:ce:a5:d3:2c:18:73:eb:a6:9f:ee:
                    3d:f0:65:2f:e9:11:a7:e1:8a:8f:c3:48:d0:ab:c7:
                    6f:72:1e:23:05:b8:f0:69:1f:b3:48:9c:60:66:7b:
                    07:06:18:a2:a8:7e:d7:fe:a7:75:85:e8:94:6d:17:
                    6a:ec:3f:b1:f6:9a:b5:f1:94:9f:9c:67:2a:0e:7a:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:08:8C:E3:DF:69:90:6E:58:F6:48:26:23:40:9C:EF:14:93:95:36
            X509v3 Authority Key Identifier:
                keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a1:d2:49:1f:5d:aa:35:77:fd:80:44:7c:05:4a:25:df:3f:
         fd:cb:b1:66:88:50:b6:4b:ee:81:4b:6f:f8:08:77:c8:2c:98:
         1e:01:6b:e8:b1:6d:3d:d4:65:4d:78:ee:10:2d:6c:74:d8:0f:
         f1:aa:cc:29:5c:b4:75:5c:b8:e1:ea:48:7b:a5:af:06:46:22:
         ee:c3:01:72:20:c4:2b:50:c4:a7:a4:38:a8:ef:7a:c0:67:65:
         35:20:c1:b8:13:ae:d4:56:b2:f7:8f:51:c1:db:8a:5d:d9:96:
         9c:6c:7e:4a:e1:54:39:6e:8e:73:65:57:ea:0c:54:ad:40:5a:
         52:78:67:5a:3a:e6:e7:fc:e8:f6:f8:8b:71:8b:c7:1e:59:bb:
         1b:22:a0:67:47:1b:da:51:87:d8:d8:be:6a:2d:90:3c:68:84:
         22:70:19:ca:9c:dd:77:70:13:08:0e:26:55:11:f8:39:8a:4e:
         3d:38:12:bf:54:3b:e1:3f:e8:f8:25:77:c6:14:94:b8:ce:74:
         15:5a:54:0c:1d:bd:f8:31:a6:aa:f7:a7:51:aa:00:b7:cc:92:
         e6:41:ad:a2:1a:0d:0d:05:c1:1d:e0:c3:27:76:c5:ab:2e:58:
         2f:60:e5:fa:cf:c4:47:59:df:70:f6:b7:43:f3:cf:d6:d8:68:
         21:a0:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:15 2025 by rpki-client