Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File:                     GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier:          NXmh0LgkjF5EWvoJPtGYZCJ5IsAEJ0/X+0GEVqYO7Uk=
Subject key identifier:   66:28:7F:18:7F:2F:04:66:4E:38:44:93:63:1B:11:5E:86:AB:C7:E7
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer:       /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial:       0197820DF7290704F4392FF7EDF5C9FD4426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number:          0DF2
Signing time:             Wed 18 Jun 2025 08:00:42 +0000
Manifest this update:     Wed 18 Jun 2025 08:00:42 +0000
Manifest next update:     Thu 19 Jun 2025 08:00:42 +0000
Files and hashes:         1: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: uwUZoh9prq08lovPxoP+wPtC0Bbtf+vOqMeMhR5UniU=)
                          2: Kot_9W-z5W9clQssyO_RwTkY8os.roa (hash: RiAmjKyPe+jYgz0emcbcNd9sovJ3TU3wuyEDxRv4KU8=)
                          3: T8wfyMdVYO2pjTxLu-sXHav7xb4.roa (hash: wl6nwJQYbPdR2wx0aUH8mDWuK+w6c/DDvIQ/E5ZhcW8=)
                          4: f1RZXAhEg31a-K2NYzsPeQqdHwI.roa (hash: 08m92bP9sI2GbA9p2mUsOu1DMSTzd+WdkX5Gq/lzuNo=)
                          5: tm430U4MT2PCSKOqthlACUfwpXU.roa (hash: oQ5muHmRQJQhR0gSulEeCf46ida6cl+Es7PcXAkB/VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:0d:f7:29:07:04:f4:39:2f:f7:ed:f5:c9:fd:44:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
        Validity
            Not Before: Jun 18 08:00:42 2025 GMT
            Not After : Jun 19 08:00:42 2025 GMT
        Subject: CN=66287f187f2f04664e384493631b115e86abc7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:14:74:57:c1:18:cc:f8:4e:b0:5a:9b:eb:
                    44:ed:30:28:04:f3:63:cd:83:d8:9d:60:89:a7:c7:
                    d1:31:eb:74:85:14:37:dc:db:9a:c3:19:23:f8:6c:
                    8b:a5:10:6a:c8:eb:eb:90:d3:c1:c3:fb:a2:e9:38:
                    6e:36:d8:28:78:c9:16:d0:d0:db:54:73:83:3e:d1:
                    90:ff:6a:87:c4:16:35:59:bc:0d:8c:98:03:e4:cc:
                    e6:01:35:da:25:40:3c:9a:48:24:1c:61:bc:5c:74:
                    45:9f:1c:7b:4e:4e:61:71:3b:cc:e9:af:d4:38:00:
                    4d:21:96:9c:43:77:45:70:5e:a2:f1:b9:8d:f0:ed:
                    5b:33:6f:96:00:80:b9:b5:d2:66:f7:88:de:3f:3c:
                    3c:22:13:8a:56:9f:75:7b:38:70:aa:ab:6b:8b:fa:
                    56:10:2f:fb:43:2e:21:2e:98:58:75:e5:15:90:b1:
                    9a:a2:a6:ab:63:50:2c:c6:9b:e3:bd:5b:87:5d:03:
                    6c:18:7d:6b:a3:74:d5:4f:86:a4:78:c3:6a:67:18:
                    1a:d4:78:52:1e:62:51:f1:02:f7:39:3c:11:e5:81:
                    2c:fb:75:5c:d8:40:39:7d:ea:b7:d3:a1:84:8e:27:
                    5c:58:0b:99:3c:1b:f4:94:95:9e:cf:4e:9e:b2:c5:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:7F:18:7F:2F:04:66:4E:38:44:93:63:1B:11:5E:86:AB:C7:E7
            X509v3 Authority Key Identifier:
                keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:29:ad:bc:52:03:68:07:a1:7b:b0:5d:27:9e:66:3b:d9:f5:
         f9:28:cb:1f:97:78:1a:c1:27:bd:51:9f:48:05:b5:e4:1a:36:
         cf:df:4e:d2:15:c3:bf:fc:b6:73:8f:53:7a:91:6b:ad:96:19:
         22:39:1f:18:1a:3f:3a:8f:10:b9:11:ce:7a:73:21:07:8e:49:
         28:09:64:40:56:95:97:07:a3:f3:44:df:f2:b2:d9:c9:b3:98:
         35:27:33:ba:ab:4d:fe:fe:83:87:ea:fe:fe:7e:7b:95:29:63:
         cd:8f:d1:f1:d8:3d:6c:6a:70:ce:99:39:c6:44:c8:8e:d3:50:
         e9:9b:40:5e:fe:40:ee:20:14:06:be:6d:df:7a:2c:51:e9:0b:
         93:57:ce:79:a8:70:e4:73:54:88:89:24:cd:0f:4a:16:1d:f4:
         c1:62:60:c6:14:6e:45:1a:d0:32:eb:3b:26:59:38:03:fe:5c:
         17:e0:2e:f9:61:40:49:24:0c:f7:9f:9a:98:2b:48:53:7d:2a:
         0c:36:5b:ef:b4:16:01:1e:db:1f:70:70:d2:5a:95:59:de:f2:
         03:f7:9f:1d:59:bf:5c:2e:6d:3a:0f:10:9a:ce:c2:33:14:e8:
         bd:ec:51:f6:59:b1:23:50:78:1d:24:2b:ca:b9:d9:ba:6d:e2:
         ee:2f:77:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:36:06 2025 by rpki-client