Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File:                     gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier:          ceD86+2zEvB6kUCEcJwkw3jMkieJHWf1tKxMaAlmiDc=
Subject key identifier:   8E:D2:C6:16:28:11:8F:DA:5B:4B:A1:71:08:CD:56:E5:FD:2E:06:68
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer:       /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial:       01976D06BA15600A8A7A7FCD690806E9269C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number:          10B2
Signing time:             Sat 14 Jun 2025 06:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:46 +0000
Files and hashes:         1: Yk_mB5Br41Nhda13vL3dksE5LgU.roa (hash: K0LuZJCRzNJs5Bjbkimkjj4nwWKGnFgBw0hG+qjP3AM=)
                          2: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: 3sDPKm7Af8z3+uDBe/c14ENtGryBS2kYbSVRWGIs8G4=)
                          3: lkCjPKHQ8Kw51UGG5Fx-gWmfZeo.roa (hash: IrYEpIdSCLf/ZAAdJvK3O7zC/ibmRmQLp4sdzgkQJvg=)
                          4: mRlLG-5kU_wBciWClXIVvCGQxeE.roa (hash: ZuSklCsUXIbLUEwi1a/wPQy/93NYaA4MC8miFKmm96c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:ba:15:60:0a:8a:7a:7f:cd:69:08:06:e9:26:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
        Validity
            Not Before: Jun 14 06:00:46 2025 GMT
            Not After : Jun 15 06:00:46 2025 GMT
        Subject: CN=8ed2c61628118fda5b4ba17108cd56e5fd2e0668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:f4:2e:a6:d9:54:d1:ed:02:03:3a:61:17:
                    7a:92:67:8e:14:83:db:ad:c0:54:a1:71:e2:af:e5:
                    c1:54:6e:6a:97:6d:50:e7:04:ad:c8:4a:e3:bb:97:
                    58:48:80:33:d1:ea:b9:d1:9f:7a:7a:ab:41:b4:4f:
                    fc:0f:20:84:ef:03:4e:31:45:7a:97:dd:9b:9b:25:
                    c8:48:db:10:c3:fe:15:54:87:ab:61:a4:2f:b5:4f:
                    88:5f:c3:da:f1:45:19:35:4f:81:7c:cb:f7:4f:0a:
                    d5:4b:64:3b:18:d6:11:c7:b2:c5:bf:fc:19:e9:44:
                    9a:ed:84:0b:30:79:39:c8:cd:92:2f:3c:3c:21:f7:
                    0e:e1:f2:3c:66:22:d7:5b:83:97:49:45:cc:80:98:
                    b4:29:b4:4a:c6:c2:b5:5b:3e:0c:cc:0a:33:1e:af:
                    80:a5:31:00:dc:92:bb:6d:cd:ff:c7:5c:4f:d7:52:
                    16:be:3b:8b:37:9d:cc:7e:62:d4:61:66:ce:24:cd:
                    e2:28:cc:9a:8d:7c:5c:b3:98:94:a7:cc:d4:48:da:
                    b2:5c:34:81:24:c5:c3:89:01:21:61:e7:84:fe:37:
                    a7:eb:dd:dd:58:38:df:ed:1a:11:af:ce:dc:16:24:
                    3d:f8:0b:df:a8:f4:d0:05:9d:99:60:99:b4:43:d5:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D2:C6:16:28:11:8F:DA:5B:4B:A1:71:08:CD:56:E5:FD:2E:06:68
            X509v3 Authority Key Identifier:
                keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f2:07:07:a8:e0:e6:c0:12:09:d8:4f:de:bd:f7:55:6e:71:
         35:c1:6e:0e:0f:66:9c:24:f8:52:0f:59:d1:e1:ac:b5:d0:3d:
         2b:de:f0:eb:54:5e:34:bd:17:f0:96:dc:5f:d0:db:8e:ce:6c:
         75:c0:60:24:a9:c5:1a:2a:52:50:25:cd:a4:97:06:7d:fd:7b:
         e1:b9:40:f7:79:10:1e:d6:03:c1:04:65:2b:e2:bb:2e:c6:81:
         cf:c2:67:7e:3f:27:2b:99:f9:e8:9b:61:84:24:b8:5f:fb:91:
         a0:79:69:fb:4f:ee:f6:9d:ac:58:a4:66:6d:09:e7:01:70:e1:
         bd:4d:24:c8:00:fe:cc:54:3a:35:d8:3c:7f:bd:e5:01:e5:7a:
         9e:a8:e6:43:91:02:18:3c:5e:cd:82:1b:e2:9a:01:40:75:ba:
         29:22:4b:33:cf:49:dd:98:de:fd:8c:78:1e:2a:a0:5a:50:c5:
         75:bc:20:19:10:59:25:f7:59:6a:8a:e3:6a:45:dd:90:09:4c:
         4d:9d:0a:ce:69:38:a9:31:1f:24:e0:51:55:90:fe:9f:9e:91:
         08:fb:6e:2f:2e:20:8a:22:a2:43:7a:9a:a5:f9:e2:a7:47:bc:
         50:d7:43:ea:df:4b:08:8b:ed:48:db:63:69:4b:c4:b0:5f:45:
         44:c8:54:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:30 2025 by rpki-client