Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File:                     GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier:          M0KP3MwfOjvUHZfG5puSWwuxOLgDhSHJ1Jk5Nb6k5Rs=
Subject key identifier:   09:C8:78:90:B1:F8:96:DF:3E:27:CD:4A:05:EF:61:38:45:14:EF:5A
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer:       /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial:       019674F9BB8B7B6D0AFFE6BA293DF0AB1C3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 02:00:45 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:45 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:45 +0000
Files and hashes:         1: D2QGXtZvmL4KeLGdXQs__twf4cc.roa (hash: yx8HKD3i4ZtDorjPhtWxamWyQ9PcoYYTYwiIZAy3Cf4=)
                          2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: AWiK0qOCUNv+yy82rMdiJvD/vMc7R6phVEt3mb5mkJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:bb:8b:7b:6d:0a:ff:e6:ba:29:3d:f0:ab:1c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
        Validity
            Not Before: Apr 27 02:00:45 2025 GMT
            Not After : Apr 28 02:00:45 2025 GMT
        Subject: CN=09c87890b1f896df3e27cd4a05ef61384514ef5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:22:ac:75:ca:b1:8c:9f:f0:03:2a:6e:21:
                    fa:5c:14:0c:4d:00:79:86:cd:e5:20:82:e2:86:f9:
                    30:6c:50:9b:1a:47:22:df:91:49:bc:f1:39:82:38:
                    71:d5:55:ff:fc:7e:e6:6c:f7:a4:22:e6:58:a7:b3:
                    02:fc:f7:28:64:48:8c:a4:cd:1e:09:81:b7:a8:55:
                    8b:22:61:f0:2f:26:c5:90:5d:51:d1:32:8a:64:75:
                    24:0e:49:90:10:45:d6:c0:a8:9c:eb:ce:65:3f:90:
                    fc:01:cd:03:37:40:e5:36:43:01:6d:db:6d:2c:6d:
                    ea:03:35:22:52:72:12:17:66:5c:5e:39:21:e1:d6:
                    4e:db:68:a5:ba:7c:a7:a1:88:ba:13:31:79:15:39:
                    99:91:a0:e1:f6:5d:72:5b:a6:fa:9f:bc:62:cf:29:
                    08:cf:22:26:6b:d0:e5:14:55:26:67:f9:0d:fe:b8:
                    9a:45:6e:d2:1b:b4:50:d1:64:aa:f5:57:2b:b6:ca:
                    f6:d8:16:ac:8c:4b:63:7d:f6:ef:f2:8b:2f:ce:dc:
                    28:73:1b:61:64:97:c5:b1:b0:ba:c3:e2:39:d0:6e:
                    1a:a4:76:59:cc:04:21:fc:fe:8e:54:e3:74:bd:da:
                    89:56:79:47:6a:54:37:b8:7c:ac:c7:8c:23:e4:7a:
                    68:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C8:78:90:B1:F8:96:DF:3E:27:CD:4A:05:EF:61:38:45:14:EF:5A
            X509v3 Authority Key Identifier:
                keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:6b:ed:89:1e:f3:d4:aa:53:bb:30:72:45:db:f8:96:b3:
         9d:ba:f4:4c:8c:9f:6e:7d:70:48:09:51:9f:64:02:2e:67:92:
         a4:a2:5b:99:ec:54:1a:6e:d1:4a:69:41:31:3c:58:ba:f1:c5:
         4f:1f:6a:99:d7:a1:80:6d:ec:51:0f:34:cb:2d:8a:97:12:02:
         84:04:d5:dd:dc:c5:a3:9e:19:ca:16:85:9f:66:0b:37:ca:0b:
         00:13:d3:35:40:fe:c8:22:d7:73:35:c6:b8:70:dd:fc:83:d0:
         77:f5:bf:5d:cb:37:ce:1e:67:17:b5:2b:cf:66:43:bc:d7:79:
         eb:9b:14:82:21:2b:f2:fd:26:73:0b:4b:db:d7:c5:ef:d1:98:
         06:e3:06:fc:93:8d:78:4a:f0:7b:f2:ae:ee:45:52:8b:ee:aa:
         91:d7:15:f7:16:d3:05:3a:0f:29:d8:ef:43:bb:fd:1d:c1:7d:
         44:ff:4f:b5:74:3a:a2:f9:e0:e5:aa:d1:6f:28:e0:ce:e7:bc:
         f5:1d:82:5b:03:46:65:c2:29:20:51:6b:ec:62:11:1d:4b:2a:
         2f:bf:1d:01:10:96:ec:e3:84:7f:5b:11:af:f9:68:0f:14:41:
         a7:a8:8f:f4:3b:ca:15:ad:a7:d9:da:40:e4:65:13:22:a4:b8:
         88:b7:da:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:07:02 2025 by rpki-client