Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File:                     GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier:          A3nV7z/w79AwSSVKBU/Bt693CP6yrlC+/LSwqPC2X6w=
Subject key identifier:   1F:22:15:88:52:1F:BB:47:9B:1C:F7:65:49:AD:D4:36:34:8C:1D:6C
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer:       /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial:       019674F9C27EAF4797E05ED3264BF991A82F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 02:00:47 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:47 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:47 +0000
Files and hashes:         1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: qwT9qsj7vFMILUqH3uEmQJP47BkYMEl9kXYBMOsj5ug=)
                          2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:c2:7e:af:47:97:e0:5e:d3:26:4b:f9:91:a8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
        Validity
            Not Before: Apr 27 02:00:47 2025 GMT
            Not After : Apr 28 02:00:47 2025 GMT
        Subject: CN=1f221588521fbb479b1cf76549add436348c1d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:57:75:a1:b6:ee:50:f1:72:63:eb:36:08:
                    a3:15:bc:63:33:8b:af:76:a8:bc:68:4c:0c:3e:95:
                    3d:bb:7c:49:32:69:54:03:39:b6:e0:1a:26:d0:68:
                    ad:72:67:ae:b5:4d:86:4b:37:08:b3:5b:fa:61:c2:
                    6e:26:a8:de:4f:7d:62:92:e4:0f:9b:ba:96:62:bd:
                    6c:21:58:c5:bd:d6:b6:a1:16:c2:ae:49:df:00:33:
                    aa:a3:b4:d7:1c:0e:9a:d0:50:00:2c:fb:95:41:bd:
                    3c:5a:7c:9c:09:b3:6a:a8:79:87:6e:af:3c:d1:6d:
                    b7:c2:9a:a6:b6:00:ce:53:43:15:1b:b0:26:78:09:
                    c7:4d:74:8c:74:83:99:33:5f:eb:7b:28:86:33:1f:
                    39:4b:91:88:18:12:ea:52:aa:f5:d5:85:c9:88:e4:
                    4b:db:d6:1d:db:98:8d:d0:ea:30:a3:10:c1:7e:d5:
                    51:70:83:f2:3a:d8:0a:1a:1f:ad:40:4d:43:a2:2f:
                    e6:54:2b:5b:42:74:5f:39:04:d7:46:53:48:6e:f8:
                    08:04:aa:86:7c:66:b2:b6:3f:66:48:4a:2e:36:80:
                    b7:2e:9a:e5:b9:e0:0e:e5:68:2b:49:40:e9:eb:6b:
                    76:66:f9:29:03:28:4b:cf:bf:24:a5:bc:7f:2c:ac:
                    ce:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:22:15:88:52:1F:BB:47:9B:1C:F7:65:49:AD:D4:36:34:8C:1D:6C
            X509v3 Authority Key Identifier:
                keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:dd:d6:5f:cf:b4:77:d7:ff:5b:b6:b3:fb:20:e9:ca:76:37:
         9b:e2:e7:a3:15:c6:19:3c:87:2c:54:59:a0:c0:6a:7f:d3:56:
         4c:42:e0:c7:02:32:5e:d6:cf:5c:c6:08:0d:85:85:0e:a3:c8:
         45:2d:a0:d9:54:57:da:d9:ed:f1:bd:0b:de:3e:1d:6b:c6:37:
         a0:1a:ea:b2:1b:1e:0f:b3:dd:dd:f2:f3:d5:9c:d9:73:5b:d5:
         d4:5a:aa:26:68:68:79:d0:5c:03:00:d3:19:5a:b1:7a:94:f7:
         73:0e:f2:42:fb:80:e3:68:14:db:fe:d4:6d:a7:c4:e5:0d:e9:
         bd:a4:94:9a:d2:7f:29:fd:57:dd:09:d9:e4:e8:58:21:45:a2:
         56:42:dc:7c:68:c5:35:ad:ef:02:3e:34:f2:ed:67:50:93:7d:
         36:f6:5f:71:00:68:27:e5:bb:54:19:9d:51:48:f8:2a:d4:f7:
         e6:83:f6:48:65:a1:34:74:12:c6:28:2e:48:0c:32:2d:d4:e2:
         8e:7a:1e:71:45:fd:58:23:8b:a6:1a:74:e3:6e:b7:ba:cb:20:
         d5:47:d3:52:40:f1:0a:61:01:db:38:74:05:ba:8f:9d:33:86:
         90:e1:80:33:a0:c4:08:78:7e:a6:81:06:10:c0:f1:27:bd:90:
         d0:4a:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:36:11 2025 by rpki-client