Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
File:                     GEF3t2iRATugJ7Nebt_B6fgpXOw.mft (raw, json)
Hash identifier:          Mfm6RrUvT0WVD8IRke5xaBImJxqPdc+IDXEXZ/q9sSw=
Subject key identifier:   80:75:69:D5:6D:D6:ED:E7:51:31:F3:EE:FB:BD:40:52:9D:51:4E:5A
Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
Certificate issuer:       /CN=184177b76891013ba027b35e6edfc1e9f8295cec
Certificate serial:       01967378C73C996DCB9A8D7D56183B73AD11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
Manifest number:          0A81
Signing time:             Sat 26 Apr 2025 19:00:17 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:17 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:17 +0000
Files and hashes:         1: GEF3t2iRATugJ7Nebt_B6fgpXOw.crl (hash: oo95JNTxr28nNy4FLf+VwWnBtpDMcwxokIpycfUtpZY=)
                          2: tut7oaWJNrhx8vDfjnadysvruEE.roa (hash: oXhco3AY4UNPZerjwlU5WNQYyYnT8TDpF5tOGRePMaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:78:c7:3c:99:6d:cb:9a:8d:7d:56:18:3b:73:ad:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec
        Validity
            Not Before: Apr 26 19:00:17 2025 GMT
            Not After : Apr 27 19:00:17 2025 GMT
        Subject: CN=807569d56dd6ede75131f3eefbbd40529d514e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:46:8f:37:4f:e2:ad:50:04:57:2e:a1:1b:
                    6a:66:82:40:d5:2a:9f:9a:c3:8b:36:e9:1b:c0:ab:
                    b1:f7:6a:b3:2f:4b:4a:e4:1d:0a:3d:44:87:5b:5f:
                    6d:3e:dd:2e:bf:75:af:fa:d9:cf:d1:40:88:68:bf:
                    a7:0e:80:67:7f:af:be:ab:69:9d:d9:ff:44:3b:2f:
                    89:27:84:4f:77:47:ab:e2:89:37:f4:ce:cd:5b:73:
                    99:aa:7d:04:08:77:28:bb:65:a9:11:27:e2:33:f7:
                    fe:78:76:3f:23:5f:fc:15:1e:95:63:bc:f0:cf:87:
                    19:aa:5f:4e:6a:e1:82:c2:85:cb:a5:af:e5:64:64:
                    31:58:b0:f4:d6:5c:33:0d:c3:d1:ad:d3:50:14:ae:
                    4f:72:0f:80:18:df:68:54:73:7e:66:9f:ee:71:cf:
                    89:60:63:ca:d2:d5:5e:35:3b:9e:bd:e3:fd:a4:22:
                    d2:81:47:b2:1c:d7:67:3d:9f:d6:f8:65:4f:16:c9:
                    21:a8:b4:c4:0b:84:9a:a6:b3:11:11:c4:4b:78:d7:
                    29:dc:4f:80:1c:03:a4:71:f6:f8:61:87:56:74:eb:
                    0a:9e:51:55:55:5d:a0:a0:44:77:08:63:77:ee:d7:
                    31:1d:75:c0:37:95:7e:44:a9:45:3f:89:ad:e6:74:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:75:69:D5:6D:D6:ED:E7:51:31:F3:EE:FB:BD:40:52:9D:51:4E:5A
            X509v3 Authority Key Identifier:
                keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e7:01:94:af:2a:b6:a2:8e:cd:df:80:f0:a1:a3:78:19:60:
         07:2c:28:87:d0:60:5b:ac:84:ff:2b:7e:ad:02:eb:6c:a9:a5:
         6b:85:bb:6e:c3:9b:cb:1a:73:85:a1:cb:3d:77:45:80:44:01:
         92:f2:fa:60:0d:57:88:79:4b:44:40:41:bd:d0:39:93:b8:0a:
         3a:d0:96:69:f5:98:c9:cf:32:86:9d:4a:94:5c:c6:b8:c9:35:
         ba:b4:aa:e0:70:33:7e:15:21:3b:92:0a:c9:2d:b5:68:7b:58:
         37:a5:8b:9b:fc:8a:28:a2:85:cf:2e:3c:7e:84:c4:75:1e:b7:
         29:aa:61:21:5d:21:2c:2f:c8:fa:a0:ef:49:90:21:33:d2:61:
         16:0b:f6:ab:e7:d9:02:79:38:d4:6a:15:07:a7:88:39:a7:6f:
         72:a4:04:a2:d3:62:09:d8:f2:d1:43:8a:d8:08:03:dd:de:89:
         ed:1e:11:0c:6c:74:a3:ac:10:c5:d5:0f:fb:88:70:ea:fb:24:
         59:08:60:43:58:50:06:98:a8:36:f0:56:34:51:41:e4:dc:57:
         b2:bc:d6:c2:b5:f6:ec:9f:0c:ed:02:c1:ca:c6:50:38:5f:1c:
         34:7a:40:a3:73:aa:5d:24:a4:e7:4a:2c:42:f8:ca:8a:01:24:
         2c:c2:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:44 2025 by rpki-client