Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File:                     GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier:          V6njTofH3OTij88vLzycuR1ZNeqe3RoOanrIYL9KZfY=
Subject key identifier:   C3:BC:83:82:B0:62:F4:76:25:EE:51:A4:B4:9A:A7:FE:BD:5E:65:23
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer:       /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial:       01976C2ADB0F607326FCFE847FC4713103DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 02:00:37 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:37 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:37 +0000
Files and hashes:         1: D2QGXtZvmL4KeLGdXQs__twf4cc.roa (hash: yx8HKD3i4ZtDorjPhtWxamWyQ9PcoYYTYwiIZAy3Cf4=)
                          2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: 86DtjYwPYl6pT4utP+7vq5uvO9KJ9C9ptPwsRrjvNlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:db:0f:60:73:26:fc:fe:84:7f:c4:71:31:03:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
        Validity
            Not Before: Jun 14 02:00:37 2025 GMT
            Not After : Jun 15 02:00:37 2025 GMT
        Subject: CN=c3bc8382b062f47625ee51a4b49aa7febd5e6523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:66:8d:18:ad:26:b9:60:6e:db:82:a8:58:
                    d7:2d:3f:3c:15:a3:a5:e8:8f:d5:75:10:80:73:4e:
                    26:79:5b:73:65:04:df:f4:62:2a:25:d2:74:f8:bb:
                    1b:60:b5:f2:72:69:f3:fd:1b:40:de:53:fa:4a:ca:
                    a0:07:cb:a2:43:fa:30:c1:d1:31:4e:a7:53:91:d9:
                    be:f2:ae:c9:96:15:28:97:40:ce:42:f3:d7:71:13:
                    20:ec:a8:f0:62:02:ed:54:56:f0:69:0d:b6:58:39:
                    20:51:68:49:11:42:54:42:e7:76:2d:ae:53:14:fd:
                    94:2f:54:f8:fb:5e:0e:33:72:95:f1:50:79:af:91:
                    a4:b2:06:4c:e7:26:19:e1:44:45:1a:b3:d6:12:80:
                    77:6a:ac:55:33:83:13:8b:2b:c9:9d:6a:71:8c:b4:
                    77:e9:ae:6e:77:69:fc:1d:dc:fb:79:fc:b8:69:15:
                    39:0c:c8:9f:79:ec:b1:dc:1d:cd:5f:75:4d:26:fb:
                    d6:75:6f:16:66:3d:0a:cf:f6:ab:51:f4:82:b4:a0:
                    59:d9:53:f7:20:18:bd:32:05:8c:10:83:c7:c8:ff:
                    15:1c:3e:4c:b4:fd:e9:a2:46:27:cb:31:f4:96:94:
                    36:49:68:cf:a7:c5:cf:a1:c5:dc:74:3b:6f:8e:71:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BC:83:82:B0:62:F4:76:25:EE:51:A4:B4:9A:A7:FE:BD:5E:65:23
            X509v3 Authority Key Identifier:
                keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bf:da:d7:6f:85:2c:7f:3d:16:98:e9:44:41:c4:4a:7c:e1:
         f0:76:fe:2f:00:ed:e0:e2:12:42:3e:95:28:91:b4:e4:c6:45:
         1a:da:c7:37:66:8d:53:5b:5a:48:b1:7e:f4:7c:31:26:0f:8d:
         b3:14:58:70:9e:ff:88:fc:13:4c:8b:03:cd:ec:fe:8b:b7:89:
         76:9a:63:ad:b9:fb:76:50:cc:c4:2f:41:38:b1:aa:e9:65:ae:
         d4:45:d0:0d:a9:c0:4c:4e:b6:18:91:db:07:04:10:84:5f:54:
         ad:9e:77:b9:18:46:23:0d:23:ae:fa:59:8a:39:a8:b2:80:5f:
         18:aa:46:25:a7:49:b4:19:88:15:e6:7c:b7:d9:c8:da:66:81:
         89:ab:66:7d:94:c8:7d:0c:8a:15:77:bb:f5:b3:a8:c7:fa:f1:
         ff:78:68:f4:e6:96:fd:be:d2:a4:85:97:d3:8c:bb:12:9c:da:
         fb:8c:e1:64:f9:5f:7e:a5:97:17:d9:d1:de:b0:44:0c:59:d8:
         d2:22:88:ea:f7:17:ca:58:38:ea:39:f7:5d:52:a3:71:6f:68:
         21:49:13:1a:68:a0:86:ff:30:08:dc:78:44:83:ed:58:0c:31:
         65:fe:81:26:6b:c1:fa:93:3a:64:a6:9b:37:bd:d9:c6:b8:64:
         a4:da:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:53:47 2025 by rpki-client