Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File:                     GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier:          MaoFi22H/hF/T1iJ/MWb/POBmkd2tZK/u6jx+KtSDbA=
Subject key identifier:   F7:06:7D:97:A0:16:C7:FC:80:FD:9C:E6:BA:1D:84:B6:8E:E4:E6:CC
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer:       /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial:       01984A0A6B2451BE0DCCD7A1671D467164B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number:          040A
Signing time:             Sun 27 Jul 2025 04:00:53 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:53 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:53 +0000
Files and hashes:         1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: sLM/4mzuHKJQeNrVFJuV7XLMabO+HZnVqqmqGRJr91c=)
                          2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:6b:24:51:be:0d:cc:d7:a1:67:1d:46:71:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
        Validity
            Not Before: Jul 27 04:00:53 2025 GMT
            Not After : Jul 28 04:00:53 2025 GMT
        Subject: CN=f7067d97a016c7fc80fd9ce6ba1d84b68ee4e6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:5a:70:ec:70:00:e0:91:aa:1c:d5:56:6b:
                    74:77:cb:64:c9:1a:f3:ed:b5:8a:c9:01:39:03:fa:
                    be:30:60:01:ce:db:d2:6f:44:c3:8b:d7:8d:dd:55:
                    89:3e:60:24:01:ea:51:52:ba:66:b8:39:b6:ac:c4:
                    1a:8f:a2:37:3c:99:1b:c8:ff:04:f0:98:3d:a8:2e:
                    03:1a:d0:c5:6d:a9:e0:23:26:cb:da:d1:c9:f4:e6:
                    9a:2d:4f:0b:f7:0a:ba:0c:64:61:b5:03:21:42:ef:
                    ea:a9:12:17:bb:51:78:d2:18:27:1e:ba:ab:c9:39:
                    d1:ca:c7:76:d0:dd:ae:43:04:54:78:65:66:23:d1:
                    df:af:8a:61:a1:32:33:ee:f5:04:6b:0c:c3:f3:32:
                    7b:1c:13:f8:c8:c7:41:30:dd:ac:d3:76:cb:83:e6:
                    51:64:c6:6b:e0:ba:8f:c6:db:93:22:b1:54:ce:42:
                    34:cc:3a:fb:91:4b:d4:f3:9e:7b:88:ce:5d:50:45:
                    08:52:8b:53:54:5e:27:d4:01:f2:42:77:79:86:e1:
                    50:6b:cb:0d:8a:f5:5c:be:d7:97:2c:38:96:76:9b:
                    4f:79:45:fe:89:fe:96:e0:81:6d:3d:70:3f:fa:03:
                    c2:1e:35:ad:5e:f5:78:e1:e3:e9:f5:8a:11:9e:63:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:06:7D:97:A0:16:C7:FC:80:FD:9C:E6:BA:1D:84:B6:8E:E4:E6:CC
            X509v3 Authority Key Identifier:
                keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:92:4e:71:f3:3d:15:93:38:38:de:cf:81:66:96:99:6b:79:
         cb:f1:fe:92:2b:2b:68:07:ea:d7:00:58:4a:3d:0a:0c:83:e5:
         e4:b4:f0:cb:50:d6:ba:51:69:f4:ea:e7:ba:7e:c7:c7:a0:4d:
         23:b5:c3:bd:5e:17:77:2b:91:1c:de:75:00:e2:74:e8:d8:2c:
         bb:17:fe:d2:ff:64:f0:f4:04:88:23:dd:72:b9:64:63:22:5f:
         a0:11:d7:ed:0d:75:e9:ed:00:11:5b:a7:bc:2c:2c:d9:84:94:
         20:f1:7d:83:07:80:1d:e8:36:8f:5f:bd:62:08:32:f2:22:d7:
         4c:f1:d9:d5:03:6c:5a:f4:c1:d3:a4:f6:cc:99:2e:4d:52:f2:
         94:d7:d7:26:61:09:c1:42:29:f8:e6:90:f0:06:9c:28:0b:70:
         11:b3:20:be:b6:b7:a7:0d:51:c7:b2:e3:fc:55:1d:48:00:aa:
         c9:47:40:9e:0f:6d:c6:5f:07:87:20:01:62:d6:57:48:e5:b1:
         fd:b7:fb:ff:ff:62:36:8f:03:44:a4:6b:f8:21:3d:b0:97:d4:
         d0:b6:d7:70:b5:ba:67:33:a8:f2:84:0f:2a:cf:61:1f:ce:7b:
         f0:79:b3:d5:86:72:8f:14:0b:45:eb:88:94:ce:84:e7:c9:5a:
         da:2f:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:53 2025 by rpki-client