Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File:                     glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier:          z2XQTEMJW9mTco1qv66gtb5Q86e6Q9gD2aoB1+asAbo=
Subject key identifier:   99:BE:EC:BF:8A:BB:F6:06:78:C1:8F:6B:B8:CD:BF:33:99:40:6D:AC
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer:       /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial:       019773ADFFC682E12AAB722A3990E2B949BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number:          0C73
Signing time:             Sun 15 Jun 2025 13:01:12 +0000
Manifest this update:     Sun 15 Jun 2025 13:01:12 +0000
Manifest next update:     Mon 16 Jun 2025 13:01:12 +0000
Files and hashes:         1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: PkQWWnDBf0cz9uId+OkKhNPPLNHJKLhwxboMZKuh4pE=)
                          2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:ad:ff:c6:82:e1:2a:ab:72:2a:39:90:e2:b9:49:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
        Validity
            Not Before: Jun 15 13:01:12 2025 GMT
            Not After : Jun 16 13:01:12 2025 GMT
        Subject: CN=99beecbf8abbf60678c18f6bb8cdbf3399406dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:54:dc:22:6c:5c:21:f8:1a:bb:3b:c1:f9:
                    b6:5a:38:68:4a:bc:66:9a:17:d5:61:f5:a8:8f:8c:
                    f7:4b:68:c1:c2:f0:49:11:1d:4b:de:86:9a:9e:ad:
                    04:a5:6d:d1:52:8f:a4:45:cb:06:bf:2f:23:4d:1b:
                    8a:ed:f0:33:bc:5e:fc:a5:5c:ef:58:af:2b:6c:70:
                    5e:b8:28:4e:cc:bd:21:45:76:f6:8e:a0:75:4f:57:
                    a2:68:ac:c9:dc:56:cb:19:01:e1:7c:a9:65:cc:ad:
                    9b:3f:70:66:e5:03:1f:00:0d:5c:0c:df:67:e8:a0:
                    e5:c4:d6:81:d6:56:50:b0:b6:88:4e:de:8f:66:05:
                    97:e2:ee:10:18:22:33:c7:16:61:56:07:bd:96:2b:
                    05:67:7d:8d:ce:aa:53:be:a6:b1:89:9b:0b:e6:a8:
                    1b:8c:cb:3b:34:02:b0:38:78:64:ea:28:ce:88:14:
                    4f:f4:db:aa:94:7f:e1:47:1d:cd:3a:6f:d7:9d:81:
                    72:b4:39:b8:06:90:f6:32:8f:9e:68:ee:76:9d:5a:
                    79:df:0b:3d:de:c0:01:0a:17:bb:25:c2:39:93:17:
                    5c:b5:3d:07:e8:7c:4c:4a:15:d0:6d:19:11:ac:30:
                    c0:1b:39:69:a1:34:cf:48:18:5a:d2:b5:3c:ca:4c:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BE:EC:BF:8A:BB:F6:06:78:C1:8F:6B:B8:CD:BF:33:99:40:6D:AC
            X509v3 Authority Key Identifier:
                keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:03:20:91:fb:97:51:e4:78:3c:c4:fc:03:e0:c3:3f:c4:f1:
         32:9a:d8:63:3e:c7:df:71:cc:df:af:a2:77:f0:82:6e:14:f2:
         5a:5c:fa:8d:b5:80:e9:0d:d2:e8:7f:1c:83:d8:72:68:af:73:
         01:59:8b:3f:ab:9b:98:94:1d:4e:bb:dd:ea:9b:72:7a:c7:40:
         72:b6:65:79:5b:73:af:55:05:bb:1e:b4:33:86:40:9b:bc:e8:
         73:79:4d:68:ba:67:a0:2a:99:37:e3:18:1e:95:fa:24:13:82:
         2f:50:9f:23:b4:aa:d3:9d:ca:b7:bf:62:07:4d:b2:7d:43:a7:
         fe:ba:57:29:6c:35:0b:d6:95:0f:27:56:cb:06:d3:12:71:12:
         30:b9:6e:06:02:e3:36:18:ed:61:ad:65:1e:e2:e4:0b:6d:a4:
         92:ed:57:eb:0e:54:33:f2:8f:9b:1a:34:4d:ff:a6:ae:2f:22:
         22:66:78:66:b3:2e:df:c9:7a:83:a8:2e:3a:42:70:8a:bd:03:
         5b:fe:7a:f9:d7:53:16:ba:d1:22:c4:61:cc:5e:f3:6c:18:57:
         09:52:02:02:fc:2f:c3:ea:8b:9a:3d:95:ae:17:e5:dd:99:5d:
         9c:09:4a:36:30:52:b3:a2:df:84:dc:57:6f:d2:4e:cc:d1:96:
         36:24:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:01:57 2025 by rpki-client