Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
File:                     G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json)
Hash identifier:          77qY2SpV8fhhhcsdz7iXpPg8PUw093bBslyWCrpd5G8=
Subject key identifier:   13:1F:9D:5C:3C:4A:50:D6:41:EF:F5:15:08:74:D6:53:68:51:45:95
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Certificate issuer:       /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial:       0196568199BDB1B7A8E49AD058FF5A9B7377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
Manifest number:          0A22
Signing time:             Mon 21 Apr 2025 04:00:56 +0000
Manifest this update:     Mon 21 Apr 2025 04:00:56 +0000
Manifest next update:     Tue 22 Apr 2025 04:00:56 +0000
Files and hashes:         1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: qcw6NFrU1AKHD9bXXfwP3jcAZTqtahU5HPYom8B/ZcY=)
                          2: f9_4yHGEiJhxZligkSR6T3R3EKU.roa (hash: zpcNNRByx6ZecO+EUAONqKSkYOomMoB7CmsUhShj7mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:81:99:bd:b1:b7:a8:e4:9a:d0:58:ff:5a:9b:73:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
        Validity
            Not Before: Apr 21 04:00:56 2025 GMT
            Not After : Apr 22 04:00:56 2025 GMT
        Subject: CN=131f9d5c3c4a50d641eff5150874d65368514595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:1e:83:2b:e2:f9:a8:87:19:c1:6a:73:bd:
                    43:06:3d:72:94:3e:f1:a0:80:81:7f:26:8b:59:3a:
                    c1:a1:37:98:a4:60:99:ae:4d:48:04:75:43:75:b3:
                    41:99:45:20:ba:fe:31:2c:b1:40:10:11:d3:b9:6a:
                    7c:b2:a8:07:81:be:58:9b:b9:67:66:52:ef:0d:0e:
                    ca:27:10:a8:88:37:16:fd:8e:80:2c:ec:42:40:c8:
                    24:5d:c9:f9:bd:67:87:d7:36:42:13:d2:93:1b:af:
                    ca:68:15:17:2c:5d:02:d7:3d:40:55:60:81:7e:da:
                    13:89:d7:dd:a9:45:d3:f1:e4:cc:90:ef:b9:1e:94:
                    e5:39:c9:00:a0:0f:e8:b8:bd:06:3f:08:c5:e2:31:
                    b3:47:74:66:94:a2:a2:04:bc:b6:2c:6c:6a:2e:0b:
                    a6:a4:5e:dc:a7:a5:24:ab:42:2c:e9:4e:99:ba:81:
                    f7:ca:b2:c8:a1:c5:64:64:2d:93:f4:c3:db:cc:ec:
                    23:ef:c9:82:94:68:59:31:e7:da:85:04:82:87:5d:
                    a0:d2:52:65:91:0a:f3:89:37:0c:04:06:14:1a:8f:
                    37:9c:f9:9f:82:b6:52:8a:7f:09:b5:2a:cf:a3:af:
                    b2:e1:7a:95:58:3d:56:00:49:e6:ea:d6:1b:ef:44:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1F:9D:5C:3C:4A:50:D6:41:EF:F5:15:08:74:D6:53:68:51:45:95
            X509v3 Authority Key Identifier:
                keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3b:30:f1:9d:24:bd:99:8b:b6:06:94:fc:63:53:db:25:75:
         bc:85:c8:81:04:08:57:a3:27:72:78:2c:f3:bc:10:af:b6:55:
         86:d7:c7:7a:16:1f:59:85:74:26:16:83:48:1b:65:cc:ae:99:
         40:7e:cb:2e:d3:fd:b9:d0:92:91:d1:a9:e2:18:6e:6f:3f:e7:
         5f:96:eb:fd:da:3c:a3:53:2e:fb:ac:4d:bb:56:4d:84:1b:f1:
         67:b3:8c:39:ab:b9:d1:7f:5a:f5:ce:27:8b:c0:ea:37:1a:5b:
         b0:57:e0:d3:e4:49:5e:63:44:d9:54:33:2c:f4:f7:19:36:5d:
         68:04:66:15:b0:49:35:72:66:24:af:12:07:9f:ef:36:3f:e2:
         1d:b5:5b:43:7e:30:5f:f2:48:c0:86:e7:34:c1:f6:61:42:5c:
         99:a7:e6:aa:77:4c:96:39:b2:55:7c:1f:c2:31:e8:8e:be:af:
         c6:80:4c:3f:a4:b5:01:f5:2a:17:2e:ac:3d:be:1f:86:f4:6f:
         f7:23:fe:66:b2:96:85:bd:39:4d:08:31:b2:89:90:9f:4a:86:
         bb:cc:a5:b6:f2:1f:0c:2d:69:2e:11:51:9d:e0:fb:b6:64:94:
         10:64:9c:c3:a1:12:91:ec:0b:6a:ab:74:d7:dc:fa:18:b2:78:
         e7:c9:61:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:30 2025 by rpki-client