Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File:                     GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier:          f0fISHDR14oxNwsJn5HGBxIxuY8w1/swtbL5sMuovAw=
Subject key identifier:   23:C2:F7:F3:22:D6:89:EC:AA:CE:8E:9E:A5:37:12:87:0E:C7:77:7A
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer:       /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial:       019674C27EB398EAE196A0C684EE030DF065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number:          1511
Signing time:             Sun 27 Apr 2025 01:00:25 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:25 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:25 +0000
Files and hashes:         1: Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa (hash: sSWEBAjRZaqtAdwjOfykVqgf7b7OWWPQ8cRcY8XqZmU=)
                          2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: 84tM2LRPbevdw1ulKCMaeSQ/wESSYShz1fuzw64Is00=)
                          3: LASNDVJFR7nISIIuLJuen3qOehA.roa (hash: zvljnKWMuxdFNbiIQd7aWSR9xyeCp6tRJSsTE0UC5w8=)
                          4: y0q_mnHeqqODRkh3mN1XsHcA07o.roa (hash: vPYM1qZGBQlB55R1ITXDPJhnP7mpA1SIlCNpOTcVP6w=)
                          5: zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa (hash: N6qZrGzU3tG6EdhOgnUHNSlOSI1pX79eNnDUPpj91So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:7e:b3:98:ea:e1:96:a0:c6:84:ee:03:0d:f0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
        Validity
            Not Before: Apr 27 01:00:25 2025 GMT
            Not After : Apr 28 01:00:25 2025 GMT
        Subject: CN=23c2f7f322d689ecaace8e9ea53712870ec7777a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:af:52:8b:14:ba:42:b7:8a:8a:92:7b:31:
                    2e:3f:62:8c:6a:ca:15:6b:9b:83:fe:8a:b5:74:18:
                    f3:23:ff:01:a6:6e:b3:f6:c2:c9:00:c1:cf:f6:10:
                    76:41:fd:d6:98:6b:98:82:ac:7e:7c:76:6e:48:f7:
                    4d:b1:de:72:ee:25:19:1a:27:ee:12:5b:f1:b3:f6:
                    b9:69:ea:7f:1b:33:7e:aa:9d:3f:94:03:48:1c:4d:
                    ca:51:93:90:65:62:bc:4d:7c:2b:38:f0:09:5a:c5:
                    48:a2:67:dc:47:f1:f1:bc:10:d0:82:b2:92:d6:6a:
                    0a:c8:59:bd:d9:c0:e0:96:71:79:d1:a5:03:03:a4:
                    de:cf:de:fb:38:f9:ac:b8:5e:64:9a:58:d4:90:54:
                    6a:44:4e:81:dd:83:c4:e7:38:15:c1:1a:30:b6:19:
                    82:39:02:b3:fb:41:8d:a0:03:ab:91:4c:0e:8f:f6:
                    f0:33:78:25:8d:4e:d6:84:f8:06:3a:ce:42:43:bc:
                    e8:c6:0d:03:54:fb:95:13:2d:69:07:9d:25:36:54:
                    ae:e8:2a:59:c6:3d:8b:a1:0b:e1:6b:d0:b8:c2:de:
                    ff:9a:80:9d:aa:72:f9:c9:57:f4:7f:1b:43:22:de:
                    12:8a:55:e1:e3:6f:b9:0a:7e:22:37:cc:11:af:38:
                    93:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C2:F7:F3:22:D6:89:EC:AA:CE:8E:9E:A5:37:12:87:0E:C7:77:7A
            X509v3 Authority Key Identifier:
                keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f9:95:d7:4e:3d:2f:38:ff:ca:c1:f4:b1:e8:62:1d:07:9d:
         4d:2b:d7:3f:5f:72:5d:38:41:15:2d:ed:3b:26:4c:93:58:7b:
         02:1e:e5:55:8e:4c:9e:b1:fd:cd:59:83:8a:fb:d7:33:2e:db:
         76:2b:91:94:7d:cc:a2:35:3f:41:c0:aa:09:54:99:0f:f7:bd:
         3a:f2:db:51:61:1a:f6:32:d5:8f:3b:bc:98:e3:3a:9c:1c:de:
         b1:b9:ac:64:03:9c:aa:7b:4a:f8:70:23:86:2e:2b:d6:c3:db:
         26:5d:0d:49:10:ab:52:60:33:ad:ad:5f:0a:70:be:45:04:08:
         75:c1:d9:1e:bc:f7:4e:11:18:c7:9b:74:63:08:3f:e6:cd:10:
         30:f9:2d:bf:80:dd:8a:5f:88:3a:68:ad:c9:2b:16:c8:7a:7b:
         0c:60:9e:e8:6e:26:df:ba:a5:c7:d6:35:fb:bc:c9:72:15:3f:
         74:d6:d9:9c:52:76:ad:a8:7c:5a:00:e7:42:3b:6d:1b:b2:8d:
         d8:78:cc:43:b7:2a:fa:25:bb:6a:94:7f:2f:a6:2a:72:01:6c:
         5a:8a:58:7f:85:ae:59:ad:df:17:7c:40:ef:bd:fc:36:d4:22:
         5c:60:c1:af:7d:39:0d:63:86:08:20:6d:8e:a9:94:2c:91:1b:
         b1:dd:3b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:24 2025 by rpki-client