Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File:                     GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier:          iXAzfLFl9fKtAy/YAtvANxtloAYS34MEVJbAGYVJ14c=
Subject key identifier:   5B:03:FC:68:BB:2F:CD:2B:A3:A4:64:D0:5A:AA:93:7E:18:48:58:80
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer:       /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial:       01976A05BCEF6533E6A6030DC2DB3E1295E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number:          0A38
Signing time:             Fri 13 Jun 2025 16:00:50 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:50 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:50 +0000
Files and hashes:         1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: M8sa2IXWZnYnNEvlz2znb/j4Z0jNqTvCu9I6rbAVMAA=)
                          2: ddpb_wuKnMlAr7zHGIm8AB82iUA.roa (hash: B1F9vY9BeWV/mZWmkHXRYrhz+CLltzOE+dJil3lfRag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:bc:ef:65:33:e6:a6:03:0d:c2:db:3e:12:95:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
        Validity
            Not Before: Jun 13 16:00:50 2025 GMT
            Not After : Jun 14 16:00:50 2025 GMT
        Subject: CN=5b03fc68bb2fcd2ba3a464d05aaa937e18485880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bc:51:65:28:22:c6:a4:9e:fa:e5:6b:3e:2f:
                    02:58:7e:03:81:ba:78:d1:50:04:ee:c0:2c:99:26:
                    75:46:00:96:f3:27:43:91:5d:77:ef:67:72:08:7f:
                    32:df:60:d0:0d:21:06:15:4b:d5:4a:38:39:0e:2b:
                    f4:4e:ad:79:73:19:68:4c:7b:f5:ca:ba:d7:76:8c:
                    e2:89:14:53:f5:de:29:dc:27:7f:60:07:73:32:ec:
                    b8:f0:a5:b2:ae:4c:31:e1:d9:24:6e:6d:ab:03:f3:
                    a1:e8:22:34:2f:ed:ce:51:e8:d9:f4:37:57:de:37:
                    de:c7:38:0e:2f:d9:a8:a7:f9:bc:80:d5:8a:a2:91:
                    d7:fb:dd:bb:db:9c:da:29:38:2b:1f:08:1e:73:22:
                    5b:12:6f:4a:60:d2:f8:4b:f6:af:af:2f:4c:cf:53:
                    d1:5f:15:c2:49:82:08:48:42:5f:c7:32:50:cc:25:
                    86:41:24:24:50:99:ed:08:00:8c:db:f0:a2:ad:e7:
                    c6:4f:89:71:f1:40:f7:ab:4b:65:7f:98:fd:94:ac:
                    73:b0:79:83:ea:71:a8:99:8e:00:44:4d:92:ce:b8:
                    58:a7:87:8f:6f:0d:5f:e5:77:55:2a:2f:37:bc:fa:
                    7e:30:41:83:f9:3d:64:2f:10:8d:6f:e1:2a:1c:df:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:03:FC:68:BB:2F:CD:2B:A3:A4:64:D0:5A:AA:93:7E:18:48:58:80
            X509v3 Authority Key Identifier:
                keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9b:03:6c:1b:f0:e6:82:59:1f:74:a7:b9:4e:dd:f2:0e:ba:
         2b:df:bd:6a:0b:7d:8f:37:4d:d9:e3:c1:0a:c1:15:fe:4d:30:
         60:cd:d1:49:82:29:0f:a9:03:46:72:20:81:10:41:84:d3:92:
         94:f1:39:2f:cb:be:8c:e8:f0:15:43:24:0d:1c:41:13:70:b1:
         84:4e:73:65:78:4c:c4:c5:03:ae:ab:8c:fa:2e:86:eb:30:5a:
         46:9e:86:29:e4:8e:9b:f5:1f:59:99:42:d9:51:99:a5:03:77:
         35:3f:f2:a1:12:77:26:66:b0:e9:fa:8d:35:b2:93:7e:c1:2a:
         ed:30:f7:eb:3b:2f:93:9e:23:02:88:04:70:3d:6b:ec:a6:a9:
         c0:a2:92:f7:5a:59:27:7e:41:bd:45:17:71:f1:63:f6:5d:b3:
         e6:d8:45:f8:14:2c:a8:9d:25:dc:49:ae:72:26:6c:09:57:50:
         19:3f:bd:44:e8:47:ea:ed:a7:7d:c6:82:fb:39:78:d0:b7:86:
         b2:49:ac:a8:00:7c:63:26:fa:5b:91:95:70:27:8d:71:91:fa:
         ae:7d:04:da:3a:bb:57:37:a9:c6:6f:c1:f1:a1:d0:b8:b9:35:
         58:0d:d0:93:d6:f7:b1:ad:6b:c5:88:65:02:57:46:6c:51:5d:
         ee:45:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:29 2025 by rpki-client