Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File:                     GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier:          CoUKGvsyzNq7cmdLuHzqdOoAIDP0oG1RtKnIqWIhNLQ=
Subject key identifier:   42:94:3A:47:1A:68:36:36:3A:2C:1B:58:28:9D:C6:1D:1F:E3:28:7E
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer:       /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial:       01976C2AA3A7E6F4732A0B8FCED1F10E1DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 02:00:22 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:22 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:22 +0000
Files and hashes:         1: BegdDrTAjfq3QF_xE0SFA-JsmmY.roa (hash: UdhM2lVwgozCDdJmvHRy0hTuIS1j9lD7X7Mun/eqHgw=)
                          2: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: CvI33fYqNXvBC7a+IUU3kk/7RYb8bt9Hl5nv7ncyXoQ=)
                          3: Q-JTW2pMbNHJuQzQ3GB1MFwgWco.roa (hash: Lazq6w2zk0BI/gQTS7LpUxVn4e7nb0oKSy4DjZT1z9U=)
                          4: czVnbZc92doWqy2gBGIdv1iBjnw.roa (hash: FGIHMIe1fM4M87IQciBzvSamGa61S/MPL+xAE/AMTyI=)
                          5: h31D8UJNE_u1sTKbKP1SFsGVcFY.roa (hash: kwansroYJJGhl0jfhBp7y2GRUoE1YU2JrM6J/UDWiVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:a3:a7:e6:f4:73:2a:0b:8f:ce:d1:f1:0e:1d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
        Validity
            Not Before: Jun 14 02:00:22 2025 GMT
            Not After : Jun 15 02:00:22 2025 GMT
        Subject: CN=42943a471a6836363a2c1b58289dc61d1fe3287e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:ba:e5:53:90:41:8c:7c:4a:41:df:0d:c5:
                    27:6b:b3:7f:e4:7a:1d:f8:bd:f0:d9:08:1f:f9:01:
                    94:ff:01:5f:5c:42:de:43:63:24:1e:2f:bc:66:1e:
                    ca:21:63:a4:6c:50:ae:46:80:43:2d:68:6f:2b:71:
                    0e:7b:15:0a:d9:1f:ed:a1:d2:4f:54:0a:1f:24:57:
                    d2:5d:a4:57:6b:75:d9:5d:cb:9b:b7:1f:1c:7c:4b:
                    b8:c4:45:e3:f4:ad:eb:4b:ee:0c:81:e4:52:38:97:
                    2d:cb:fc:e3:d9:df:40:60:2a:bd:19:c8:2a:99:11:
                    4c:7e:3d:c7:31:a1:61:d3:9f:5c:c2:41:c7:a6:4a:
                    cc:87:33:de:98:90:c9:fc:60:6f:94:2f:87:22:77:
                    bb:ec:14:da:39:46:59:f4:99:d0:5b:47:69:4d:36:
                    3d:38:32:80:b4:d1:1f:c0:86:a5:c1:3a:ca:b0:ee:
                    21:6a:9b:40:3f:a1:77:9b:f2:cb:b8:a6:d8:50:a5:
                    1e:29:d6:da:26:47:0a:cd:68:e9:d8:8d:5e:3b:fa:
                    09:7a:a8:e5:c6:b4:4a:07:77:b0:a5:e3:aa:35:7d:
                    23:04:39:d5:87:60:59:3e:33:81:71:f3:22:44:f1:
                    ba:b8:91:c4:be:c1:70:83:34:a4:0f:bd:e0:01:0d:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:94:3A:47:1A:68:36:36:3A:2C:1B:58:28:9D:C6:1D:1F:E3:28:7E
            X509v3 Authority Key Identifier:
                keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5f:39:6d:20:7c:72:a9:95:f3:bd:97:4c:f7:77:65:b7:1d:
         35:cb:b4:f8:08:f9:a4:df:90:ab:47:fd:00:4a:bc:57:a5:24:
         74:05:32:1d:27:01:79:7c:cb:3f:c8:55:5c:b7:2d:5e:d0:a2:
         74:f3:3c:4d:63:18:5e:92:60:cb:c3:f1:67:79:8a:2a:1e:33:
         45:9c:35:70:32:e8:07:f7:da:b1:86:1c:19:9b:62:ef:a8:58:
         8e:86:b9:3a:de:24:06:62:34:59:e6:e3:4f:64:35:e9:0a:10:
         95:af:3c:bb:c2:20:3e:d4:43:79:fd:c4:6a:55:5e:8b:25:4f:
         8e:e6:7f:3c:a3:1d:9b:88:e9:20:83:ee:40:b6:20:e1:9a:1f:
         79:24:9a:9f:ea:d3:59:8b:0f:61:68:ef:0b:9f:87:ce:e1:36:
         17:26:e9:9d:19:e5:24:17:4f:59:e8:43:fb:cf:50:2e:df:97:
         e1:1c:85:d0:29:09:6e:a4:a6:b3:bb:70:fe:5f:4f:10:3a:f2:
         f6:9f:d3:38:ef:68:bf:c6:35:14:1d:d2:85:40:69:07:3b:e2:
         55:1d:3f:ee:06:5c:11:ae:ca:27:45:4a:4a:f0:9a:35:28:4a:
         28:c0:ae:6d:dc:7c:d4:4d:94:3c:43:bb:78:a2:c4:1f:45:91:
         12:74:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:52 2025 by rpki-client