Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File:                     Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier:          KnNnSQ4pNgoLlkgXYHgsphGosoaFnzgUQBMg4zT1YAk=
Subject key identifier:   45:D2:60:77:A3:5E:9A:EF:BB:3C:12:E5:FB:17:B8:CA:33:31:5A:0A
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer:       /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial:       01984966814A78C5D98ADEA1450BFD8575F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number:          0E96
Signing time:             Sun 27 Jul 2025 01:01:51 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:51 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:51 +0000
Files and hashes:         1: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: Uc7pOCx0+ektJEA/8AjeSaamgWrY+RbaJ5GGwpkqrp8=)
                          2: ZdLIbn9HJxp8pdvNeDczvn0TQ4Q.roa (hash: rg+IefpKLZ6BZTDP0ZlvyqCjjEypkuxTFlnDiZulEgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:81:4a:78:c5:d9:8a:de:a1:45:0b:fd:85:75:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
        Validity
            Not Before: Jul 27 01:01:51 2025 GMT
            Not After : Jul 28 01:01:51 2025 GMT
        Subject: CN=45d26077a35e9aefbb3c12e5fb17b8ca33315a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:81:fb:9e:9f:a2:7c:27:44:19:ea:b7:10:
                    26:36:68:81:bb:fc:8d:6d:b1:9a:fa:bb:2b:16:4c:
                    67:d6:38:fb:2d:77:a1:61:b7:5b:b7:37:0b:33:08:
                    52:97:dd:ff:cf:f4:36:08:a2:40:8b:bc:20:dd:e7:
                    ce:f2:64:cb:aa:18:a0:09:63:48:f8:82:d4:c7:e2:
                    8f:9e:0e:07:7e:8e:d2:a2:36:4c:3f:f3:8e:fd:4c:
                    ac:54:ff:6f:c5:fe:c6:0d:5d:fc:1f:e6:b2:9d:eb:
                    f8:df:ea:7f:2e:42:60:34:5f:38:82:56:0c:b2:36:
                    66:18:13:b9:ca:6b:9f:62:c8:8e:ef:41:5d:c0:ba:
                    b2:b0:34:ee:f4:2f:7d:e2:42:49:00:26:a2:dd:7f:
                    72:5a:a2:99:ff:29:2a:6a:19:d1:8d:53:d8:08:09:
                    67:d2:54:b4:44:15:1a:57:2c:fa:8a:38:91:3a:91:
                    4f:22:86:84:f0:df:72:b0:73:2c:25:48:99:f1:5e:
                    11:0b:58:34:34:ad:ce:66:32:a9:8a:76:0e:7b:22:
                    d4:46:7a:c3:74:cd:4c:a0:67:77:20:1c:c7:41:53:
                    40:08:95:dd:ee:9c:77:03:5c:a5:16:53:5b:75:7f:
                    fd:0b:3b:55:94:77:59:20:e7:71:53:83:e7:39:ff:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D2:60:77:A3:5E:9A:EF:BB:3C:12:E5:FB:17:B8:CA:33:31:5A:0A
            X509v3 Authority Key Identifier:
                keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:e3:c7:81:e3:34:80:95:4a:0d:b2:fd:99:8f:a3:9b:a1:
         7c:ac:a1:b2:34:7f:d5:35:70:a2:eb:61:e9:03:b1:ec:73:46:
         5c:f7:eb:6c:b7:26:7e:72:1b:bc:d4:34:88:f0:2f:f0:01:93:
         1a:e2:94:19:c2:48:30:b5:a8:5e:81:ca:76:5b:04:d4:40:5a:
         05:8a:5d:bf:7b:f5:1e:3c:36:68:a6:53:95:0c:0c:4c:9a:b9:
         7d:60:68:45:e6:33:a7:78:36:36:8c:f0:d8:d6:b4:fb:af:ed:
         5e:6c:6d:be:36:23:c7:0a:82:e8:84:30:4b:18:c1:33:1b:3b:
         c3:f0:7c:88:43:e3:a7:7c:57:81:17:7e:d0:7f:e5:c4:3c:34:
         ff:38:1c:fc:d6:d9:7f:41:df:d3:a6:56:71:f3:7f:ae:71:04:
         d7:05:f1:17:6b:59:7e:2e:0e:35:98:ca:d6:7a:1b:e0:60:79:
         45:44:33:5f:ac:53:a4:42:b0:12:41:e6:c9:4e:20:78:89:26:
         16:fa:85:d9:e9:50:f7:51:e3:d8:04:0b:0c:16:7c:b5:fe:5c:
         9f:f9:55:9f:0a:fa:c4:e1:ff:76:22:d0:4d:a6:75:da:b7:f7:
         fa:43:fb:ef:7b:6e:aa:5f:d6:82:f0:a1:2d:63:21:f7:fc:24:
         cd:c6:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:11 2025 by rpki-client