Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File:                     gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier:          Cpzh851DjP9RJd/MHMe5wQGK5F6xlBZqCfb3WTHvOGE=
Subject key identifier:   98:6D:18:B8:29:AE:FB:D0:74:1C:85:CC:B7:D4:D4:64:2D:46:FD:CC
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer:       /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial:       019770E3914FE9DF304B10798D3CC82D0605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number:          0C3A
Signing time:             Sun 15 Jun 2025 00:00:51 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:51 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:51 +0000
Files and hashes:         1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=)
                          2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: iTVKMZt1h1Zkh0ZF3WdcGuxqC65uDcuzFUeOqbiQalM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:91:4f:e9:df:30:4b:10:79:8d:3c:c8:2d:06:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
        Validity
            Not Before: Jun 15 00:00:51 2025 GMT
            Not After : Jun 16 00:00:51 2025 GMT
        Subject: CN=986d18b829aefbd0741c85ccb7d4d4642d46fdcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:7c:95:69:49:17:31:ce:48:31:7e:29:f6:
                    e5:4b:60:6b:ab:25:33:d1:a4:f0:45:a1:a3:ea:be:
                    9b:13:7a:30:37:97:93:13:32:63:3a:b9:43:f7:e5:
                    2a:ae:f2:05:77:f0:94:43:fe:17:94:33:50:bd:2e:
                    4a:e1:38:fb:38:c8:18:78:21:66:60:02:56:ff:1e:
                    16:6a:4e:29:65:eb:51:97:75:b5:47:44:63:94:75:
                    43:f2:25:d0:a8:17:19:e5:f5:1c:ee:d3:f4:e0:86:
                    ad:13:bf:25:fb:93:5e:d0:ec:19:a7:c6:dc:e6:1d:
                    97:48:d0:3d:e7:73:0e:04:44:f7:88:a4:c2:c5:aa:
                    d8:3c:91:92:f0:ac:96:92:6b:e6:ee:33:6b:fd:98:
                    89:01:29:1b:16:e9:e7:12:36:71:07:6f:ea:8b:0b:
                    2a:f6:ec:7f:0e:fd:54:ce:ed:b4:a1:5a:7f:a7:88:
                    b3:af:f6:13:be:60:d2:03:e7:7f:2f:7a:3d:7d:05:
                    85:46:a6:a1:95:6d:54:ae:b2:ad:26:e8:3a:b7:06:
                    c6:03:b9:f7:73:14:31:51:9a:e6:d3:19:46:83:06:
                    44:f3:7d:81:42:41:75:67:db:cf:46:26:16:9e:4c:
                    0b:86:eb:15:43:e9:2a:95:a2:56:66:fc:36:ce:74:
                    76:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6D:18:B8:29:AE:FB:D0:74:1C:85:CC:B7:D4:D4:64:2D:46:FD:CC
            X509v3 Authority Key Identifier:
                keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ae:4a:75:02:73:4a:a6:60:3a:0f:61:69:78:8f:89:7b:e4:
         f0:9c:31:45:c0:b4:4d:2c:d4:f4:1f:e7:dc:e7:ba:0b:3f:88:
         84:04:a2:d3:b7:c9:e8:c0:72:e4:58:5e:95:20:f7:af:5c:bf:
         11:c0:ea:1e:6a:00:38:0e:80:bb:36:dd:c7:ee:65:ef:fb:46:
         04:9c:82:80:0e:c3:74:1a:17:75:b7:14:5f:a9:95:5d:ec:fd:
         45:d3:0e:84:c7:90:ee:b9:19:e2:37:6a:76:ae:a2:5b:9a:47:
         ef:e8:1b:86:1a:de:44:41:b0:2a:58:19:54:28:7c:2b:3a:b3:
         e3:5c:e7:79:e8:15:69:3e:99:77:e9:34:15:bd:23:41:a0:33:
         eb:da:9c:c9:f6:de:20:a8:8d:ad:a6:dc:e1:6b:f7:d3:c9:4a:
         0b:26:26:2c:3d:3d:c7:56:a9:36:69:6f:8d:a9:b9:57:a4:4a:
         28:ca:f2:51:64:28:1b:6a:bc:fd:24:93:63:91:b0:56:06:6e:
         e9:22:06:db:d5:32:fd:82:79:06:84:c5:f5:d9:61:6c:1b:88:
         7b:42:83:7a:a9:38:0d:fc:9e:cf:7d:21:f0:07:be:a6:36:f4:
         d8:7b:32:75:b9:f9:3f:52:ba:5e:94:f8:f9:4f:31:21:e6:12:
         7d:99:b4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:29 2025 by rpki-client