Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          bUqe6MrdYyow3ZMKdPaGuPxmTq4DOXBGGQ+2UHePOgM=
Subject key identifier:   F0:FD:6A:74:E9:4C:F4:1E:59:66:B3:C5:8F:2F:90:CE:EC:BF:CC:EC
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       019848526051BEAD9ACF92D7BEE12FEF79CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          1606
Signing time:             Sat 26 Jul 2025 20:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:14 +0000
Files and hashes:         1: 1iYEgcqm-mVKBLd2WjzT59pt1Xw.roa (hash: ewHcbw+PNeGShWbnRhXrGjXtzrFjBvJAIqeP6DT6ZjQ=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: ApQ8YNmyTVBNS6hyrqev2b1ra92fmrevV7+kMgkm5wM=)
                          3: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (hash: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=)
                          4: lCgKihl6lv9I1HmInNqD60nii-E.roa (hash: +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=)
                          5: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (hash: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:60:51:be:ad:9a:cf:92:d7:be:e1:2f:ef:79:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Jul 26 20:00:14 2025 GMT
            Not After : Jul 27 20:00:14 2025 GMT
        Subject: CN=f0fd6a74e94cf41e5966b3c58f2f90ceecbfccec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:99:24:58:08:36:df:3d:43:16:c8:5c:f5:
                    a9:48:bc:dc:97:f5:e7:51:7f:00:b1:9c:98:b3:d7:
                    e9:ed:e7:cf:b7:65:47:27:0a:c4:d4:5f:68:20:c1:
                    43:02:3b:83:a1:00:6a:e7:55:7a:d1:86:80:5d:ed:
                    5e:81:02:6e:09:5c:4a:ba:e2:bb:39:df:57:f5:c5:
                    93:0d:79:9f:ad:70:0c:ed:f8:3f:b1:47:1f:39:43:
                    da:02:91:ef:9b:8a:74:dd:b6:8d:eb:ce:fa:ab:7d:
                    4c:5b:72:62:1b:39:d1:ab:e8:eb:6b:a8:7c:b2:a6:
                    57:ce:03:ce:75:15:a5:3b:9d:44:78:22:fd:f8:de:
                    5b:c2:a3:fe:89:39:d2:ac:f3:6e:a3:08:05:27:40:
                    d1:24:fa:70:39:78:18:f8:5d:e6:9d:3f:b9:b0:22:
                    3e:0a:30:97:ca:36:73:bb:1d:ec:32:56:66:6f:cf:
                    99:b2:07:65:bd:dc:93:2d:20:f7:f1:5e:7d:95:07:
                    69:08:d9:a5:03:14:ce:bf:28:47:dc:7c:da:23:aa:
                    72:8f:72:3f:22:a9:2b:9b:f2:87:93:16:79:2b:6f:
                    91:2d:85:1c:5b:84:ed:5c:c3:ad:c0:b0:83:27:77:
                    f1:8a:b8:6a:16:0d:86:d7:8b:3f:29:41:9c:f9:62:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:6A:74:E9:4C:F4:1E:59:66:B3:C5:8F:2F:90:CE:EC:BF:CC:EC
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bd:bb:e5:5a:30:c9:81:e5:07:f2:20:ad:2d:0e:1d:2d:a9:
         d7:5c:35:23:39:b9:3e:e2:e9:cb:63:aa:86:b3:76:79:8d:a6:
         ee:11:57:c6:26:48:aa:32:d7:ef:92:3d:32:da:fb:75:1f:e0:
         bc:e3:f2:67:8e:2f:35:88:a6:3e:5b:ec:34:00:cb:3f:87:b6:
         99:01:68:7f:ca:c4:30:04:ee:0b:ff:d4:ba:d7:fd:2d:a0:6a:
         cc:55:ce:f0:5d:56:0a:b0:ef:9d:01:ea:57:0c:02:1b:3e:61:
         0b:0b:dc:e0:d8:c1:d2:34:f8:5c:7f:d5:1d:e5:51:89:a9:fc:
         81:b1:d2:26:f1:6f:60:e2:5c:8d:d7:6b:5c:d9:2f:30:1f:08:
         4f:a3:1f:74:a1:e4:38:1c:b5:df:a7:d7:0a:de:2b:ba:8f:d6:
         fc:72:4e:a7:69:bb:06:eb:b3:6a:27:87:b1:d1:6b:a3:82:fb:
         cc:4e:ff:55:7a:d9:ab:d3:b8:a3:f1:2e:f1:b4:cb:04:9f:bf:
         54:ba:f7:62:53:07:38:8c:b6:bd:d8:58:07:77:25:e1:b7:d9:
         94:47:55:4d:c3:c0:38:84:d6:32:00:a3:06:a7:5f:3d:7d:c5:
         9d:9e:9d:bd:06:73:c2:ba:07:ac:ea:5c:a8:fe:c8:31:f9:54:
         ee:e4:29:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:15 2025 by rpki-client