Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File:                     gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier:          g3uSsd7U9BY/q0HdeNIUyiE+hpsl709yagcNz9LAgKk=
Subject key identifier:   FD:1D:6F:11:55:E1:1B:5B:A3:2D:86:40:AE:F1:3F:CB:BE:5A:5C:7B
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer:       /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial:       01976997926BB5975C508B162C3D9D166E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number:          1594
Signing time:             Fri 13 Jun 2025 14:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:30 +0000
Files and hashes:         1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=)
                          2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=)
                          3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: 00xdS7euNOjhwHPF0MXhHSZ1bgQSeHNbDABhvdUCfsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:92:6b:b5:97:5c:50:8b:16:2c:3d:9d:16:6e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
        Validity
            Not Before: Jun 13 14:00:30 2025 GMT
            Not After : Jun 14 14:00:30 2025 GMT
        Subject: CN=fd1d6f1155e11b5ba32d8640aef13fcbbe5a5c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:5c:b1:af:03:c3:fe:fb:55:91:b0:b7:f6:
                    9f:49:cc:21:8b:ae:2b:24:6a:58:30:ab:cc:35:2c:
                    29:4c:f0:96:55:80:53:b1:08:b6:c4:5a:a2:40:10:
                    47:a7:3d:47:96:4b:45:96:7b:81:b0:0d:e1:53:f2:
                    d1:32:9d:a4:e3:aa:c6:9b:2a:37:a5:87:3f:3c:59:
                    1d:39:4a:0a:7b:ce:0a:93:8a:4b:44:c5:8b:32:4c:
                    ed:1c:2f:33:c7:92:51:f0:01:f6:d9:02:b0:7c:f0:
                    ba:7e:f8:42:d5:c2:79:b3:c3:f1:0d:34:1a:c9:50:
                    a1:74:dd:93:a7:e5:2b:f3:d5:c9:a0:d1:ae:b5:c3:
                    04:e7:6c:55:a0:20:a8:76:e3:86:af:bf:5c:36:b7:
                    4a:02:cd:be:98:b6:35:35:27:75:86:f0:aa:e5:7a:
                    28:1d:76:30:25:66:5a:a1:4e:f6:6d:44:83:e3:e0:
                    2d:bb:1a:d0:80:70:21:f1:02:6a:da:cd:75:c8:74:
                    6f:54:d8:fe:13:91:d1:0e:34:47:d0:56:d4:af:d5:
                    2b:0c:8b:f3:5f:7b:61:09:49:15:44:ca:3c:82:d0:
                    8b:0d:d7:1a:32:e7:2c:56:db:74:22:ae:d1:4e:44:
                    b7:7c:21:e4:b5:e4:b1:4c:b2:3c:aa:11:4e:e7:ba:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1D:6F:11:55:E1:1B:5B:A3:2D:86:40:AE:F1:3F:CB:BE:5A:5C:7B
            X509v3 Authority Key Identifier:
                keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:94:06:81:16:8f:f0:22:04:0e:1b:1c:22:31:fa:c0:2c:f1:
         dd:ea:35:5b:a8:ab:aa:d9:55:46:5e:4d:58:62:e5:64:00:a4:
         53:08:73:b2:9b:b1:a8:78:b6:86:c1:3f:1b:87:a7:94:bb:c5:
         00:62:b7:13:dc:85:96:ff:03:74:23:e3:13:94:85:a6:54:82:
         c5:d7:a0:26:13:de:14:0a:65:49:a1:5c:b5:33:30:14:26:71:
         d2:42:d3:ce:8c:20:82:42:26:9d:e1:ca:e5:96:92:6c:4a:e0:
         26:94:3e:cb:5f:b0:63:ba:66:cb:b3:66:4b:50:be:de:ff:74:
         97:99:9a:e0:29:21:05:a0:a5:6c:c2:e1:44:6d:fc:62:57:6d:
         f2:48:f6:2d:c9:ce:49:fa:da:11:09:02:f0:b6:f0:37:1c:93:
         5b:34:b3:76:54:04:da:1c:ce:ce:4d:e7:29:31:cf:a0:43:db:
         0a:a9:2b:aa:3b:a5:50:8d:e5:a6:5b:9d:03:b5:a6:a1:86:0e:
         b3:bc:e8:76:b1:af:12:2a:75:78:9c:a1:4a:fa:be:be:59:00:
         ee:12:61:b3:b7:00:dd:fc:23:6b:96:97:47:c1:87:42:50:a5:
         af:02:93:92:94:99:29:8f:af:96:c7:48:a6:f1:d6:68:97:fd:
         48:a5:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:40:08 2025 by rpki-client