Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File:                     gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier:          E38IR8vL6EQ4/LMgZenc49gcMUfME4+kJc2yaQySntI=
Subject key identifier:   E3:B9:8E:37:5F:76:74:CC:C3:E2:71:1A:82:C5:F3:04:64:F7:61:91
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer:       /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial:       0196986159940954B385CA2C90F428E95AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number:          1522
Signing time:             Sat 03 May 2025 23:00:38 +0000
Manifest this update:     Sat 03 May 2025 23:00:38 +0000
Manifest next update:     Sun 04 May 2025 23:00:38 +0000
Files and hashes:         1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: kS/qJsJ+J1cQRTRUTUvKaqMRntqiwmv/ZszbLEhxe2Y=)
                          2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:98:61:59:94:09:54:b3:85:ca:2c:90:f4:28:e9:5a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
        Validity
            Not Before: May  3 23:00:38 2025 GMT
            Not After : May  4 23:00:38 2025 GMT
        Subject: CN=e3b98e375f7674ccc3e2711a82c5f30464f76191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:ec:6b:91:1b:14:b5:0a:96:50:a3:2f:d4:
                    ce:74:8f:68:a4:0f:55:8d:b7:97:5f:bb:4b:6b:d1:
                    2a:5a:27:dc:f6:a8:0b:c5:07:6a:01:b9:77:97:77:
                    f6:fd:fb:91:f4:04:99:0b:cb:d4:5f:78:86:f8:ef:
                    b2:f5:8d:b2:67:48:3d:58:c9:54:3c:3c:a5:ab:83:
                    78:f4:32:d3:14:3d:1b:1c:0c:ba:01:89:be:99:c1:
                    7a:b1:b2:e1:50:f6:55:1b:70:9d:5c:b1:52:5a:9a:
                    8c:b6:04:b7:de:03:1a:60:3b:b7:f1:f3:86:7e:5c:
                    aa:f6:d5:d1:ff:9c:17:ba:2c:e3:ba:aa:d6:73:e6:
                    28:de:2d:60:46:3a:e9:60:bd:4e:75:a4:66:4e:06:
                    ff:f6:ea:fe:a5:68:2b:50:4b:20:e1:53:5d:d8:c7:
                    a8:e9:30:fe:a5:89:65:d6:f9:8b:43:15:d4:d2:61:
                    32:72:ea:fc:fc:62:fa:8a:4e:da:40:20:20:74:ac:
                    c9:8b:99:54:2f:1c:fa:0d:79:4c:51:17:2e:83:4a:
                    a8:63:22:33:65:1c:5b:9f:ed:02:50:28:a6:46:d6:
                    32:ee:cf:10:c6:1f:de:59:cd:27:1a:f1:d3:ce:74:
                    9e:a2:e9:19:29:6f:98:e9:02:64:8b:15:29:a5:08:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B9:8E:37:5F:76:74:CC:C3:E2:71:1A:82:C5:F3:04:64:F7:61:91
            X509v3 Authority Key Identifier:
                keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c8:a5:d2:b7:79:1e:e1:68:35:0a:bd:ee:8a:a2:59:06:c5:
         c9:c3:62:da:55:8e:7c:1d:d2:e6:25:1f:79:33:89:f1:b5:e3:
         ef:09:15:5e:b2:f7:d0:80:9d:be:84:7a:b4:82:dd:44:35:be:
         16:8a:b2:35:19:6a:b4:8f:02:60:6c:71:08:b4:37:35:e1:4d:
         27:aa:ed:90:82:c9:17:8d:56:ab:a7:1e:08:ee:cd:e6:b5:dd:
         5d:df:a1:1d:3d:96:ac:7b:7e:31:cd:f7:42:a0:dd:9e:0e:53:
         b9:0d:d7:a0:ac:b7:6f:2f:03:2f:f3:99:7d:31:ef:61:ff:7b:
         98:1e:5b:aa:36:02:35:93:13:7d:91:c2:3e:2c:75:20:99:db:
         97:d2:77:ae:72:71:d4:3a:bd:5a:6b:13:a2:31:93:a2:a6:28:
         58:62:41:2e:2c:ea:eb:d4:3d:7e:bf:2a:54:b7:59:bc:6b:77:
         2e:ce:a0:06:ad:e8:06:ef:7c:5c:4e:cc:4f:df:d2:68:74:3c:
         2d:fa:e3:23:46:84:d1:03:18:8d:d8:1c:2f:d6:00:45:c8:12:
         a7:33:08:9a:c2:0f:9c:45:46:a6:64:ec:ee:a9:a7:0e:29:bc:
         5e:0c:66:2e:f0:7b:a9:67:78:18:d7:29:46:fb:f7:e9:a0:8a:
         c7:64:b0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:31:19 2025 by rpki-client