Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File:                     gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier:          +boagaDVtJHJsTM1rHi5pxDUpLLg/pCieeSHP8O6xxU=
Subject key identifier:   39:A0:37:4F:F7:68:6F:00:3A:C9:07:67:E9:E7:8D:30:77:A9:9B:F1
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer:       /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial:       01965E71CEC9A782F15D258918A6534784AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number:          0D45
Signing time:             Tue 22 Apr 2025 17:00:38 +0000
Manifest this update:     Tue 22 Apr 2025 17:00:38 +0000
Manifest next update:     Wed 23 Apr 2025 17:00:38 +0000
Files and hashes:         1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=)
                          2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: JkBuX8YBpU58PFij4kInosOqldJkhtdLgrANYdZngGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5e:71:ce:c9:a7:82:f1:5d:25:89:18:a6:53:47:84:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
        Validity
            Not Before: Apr 22 17:00:38 2025 GMT
            Not After : Apr 23 17:00:38 2025 GMT
        Subject: CN=39a0374ff7686f003ac90767e9e78d3077a99bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:fc:97:4d:cb:b3:fa:1d:63:24:93:1e:2c:
                    3c:27:e8:e5:6a:9f:f1:2d:f2:2c:05:d0:0d:1f:cd:
                    62:35:96:bc:a6:5e:53:e6:75:a6:66:85:ae:c0:11:
                    37:ad:84:88:d8:a7:19:aa:a5:7a:5d:3f:4b:f3:df:
                    df:c4:de:10:79:e7:6c:cc:30:b2:e6:30:ec:bf:74:
                    6b:b7:dd:43:83:8d:af:a0:c4:fb:df:c5:15:51:a1:
                    9c:a8:41:e1:c0:0e:48:34:d9:0e:75:4e:9c:93:ca:
                    e1:93:8e:4f:8b:35:f2:c4:79:4d:24:73:8d:f5:17:
                    7e:6e:02:87:6b:61:d6:1b:22:12:e3:f7:7a:2f:38:
                    16:6f:bc:6b:f2:58:06:e8:5e:05:99:10:94:14:c2:
                    f4:ec:e0:45:af:0f:f8:a8:e1:a0:90:41:bb:95:b9:
                    65:9d:db:de:17:8f:b9:7d:22:4e:9d:f4:7d:e0:36:
                    3c:f6:12:80:a4:81:6c:af:6f:5f:6a:5e:0a:56:3a:
                    58:94:39:2a:6a:13:c7:d0:f9:a8:7a:e0:e0:45:6d:
                    53:1e:1a:66:0f:91:36:ec:9f:8b:79:f1:75:e8:c0:
                    aa:06:67:87:48:66:3f:b1:10:1c:6c:7b:3c:82:1c:
                    a2:3b:bd:e6:37:c3:da:35:3b:c8:c0:ea:a8:75:e8:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A0:37:4F:F7:68:6F:00:3A:C9:07:67:E9:E7:8D:30:77:A9:9B:F1
            X509v3 Authority Key Identifier:
                keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:13:d7:b2:0c:f7:99:6d:50:34:d5:cb:21:86:ca:89:71:50:
         08:2c:37:b0:81:03:06:df:b1:33:cf:c8:e0:5b:39:cc:59:09:
         40:66:70:34:d0:d4:8e:5f:4f:8d:b8:cb:45:53:cd:f8:a3:da:
         4d:9b:a5:7c:88:e7:28:57:1a:9b:31:b4:d5:da:cf:4a:85:9b:
         86:56:4c:f6:fc:9e:50:de:af:62:b7:8b:d3:10:63:b6:c7:ba:
         cc:ee:7c:e5:4e:ed:44:89:f8:41:15:1b:29:c6:94:c9:3c:d6:
         75:07:f3:59:7a:f2:d7:81:97:ed:7e:2d:ee:72:8d:13:76:34:
         46:f0:56:53:4d:b4:22:f7:97:ed:ce:5b:28:8f:8c:42:dc:82:
         b0:35:61:c4:1f:2f:2d:23:b2:b8:f7:0d:29:97:52:dc:18:be:
         75:00:59:9a:6c:e6:0c:65:a5:d1:87:33:63:41:e3:60:19:77:
         26:b9:b2:df:01:6a:3f:b5:91:d7:3b:f4:bd:f1:59:eb:24:10:
         af:32:c9:e9:e7:f1:50:14:c1:65:35:6b:80:8f:7a:80:fa:18:
         5d:7e:cd:83:6a:19:2e:0a:3c:ca:46:47:a0:5b:0d:d4:f7:5b:
         a0:c9:b6:68:2d:5a:15:d3:b7:82:35:47:b1:c0:66:88:90:e7:
         93:66:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:23:58 2025 by rpki-client