Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
File:                     gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json)
Hash identifier:          DQK5kWO0QPUdV6o0NvdpALmw3CIIu47M2KEmafij40Y=
Subject key identifier:   26:69:1E:CD:AB:E4:FA:1E:25:7C:F7:CC:65:CE:25:4B:AA:AD:5D:66
Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
Certificate issuer:       /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Certificate serial:       019827475F59A6CE57DFEECBFD4D410F9EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
Manifest number:          0C
Signing time:             Sun 20 Jul 2025 10:00:45 +0000
Manifest this update:     Sun 20 Jul 2025 10:00:45 +0000
Manifest next update:     Mon 21 Jul 2025 10:00:45 +0000
Files and hashes:         1: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: Wdvr1LZ0cfzFjLzpHSSoxi+Kz0NZ+0NbdEIzBLQOujw=)
                          2: lEs6g5eluA8OYcvzew0cUO730sU.roa (hash: NpVRDbdHRR1xBWUfgq3Nc+bh893oQNOgoD46/FbiD3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:47:5f:59:a6:ce:57:df:ee:cb:fd:4d:41:0f:9e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
        Validity
            Not Before: Jul 20 10:00:45 2025 GMT
            Not After : Jul 21 10:00:45 2025 GMT
        Subject: CN=26691ecdabe4fa1e257cf7cc65ce254baaad5d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:b8:d3:2f:86:52:f3:1a:f3:4f:ea:8e:81:
                    e8:3e:0a:9c:80:e8:fd:f9:ac:a4:04:d8:b9:dc:20:
                    f7:86:de:a2:43:fe:22:a2:5a:3f:65:5f:c8:10:8a:
                    16:a8:d4:d8:ba:64:06:db:fe:9e:85:b4:2e:84:ee:
                    ee:c6:29:0a:5d:97:09:4b:f7:26:8a:1a:77:9e:74:
                    8c:f5:8c:66:4c:9e:16:ad:54:17:a4:5c:28:1a:da:
                    3e:e8:b3:0f:59:97:ad:ce:d0:de:ae:d3:be:2b:8e:
                    c0:6f:40:f6:35:96:47:24:77:cc:ca:53:24:6b:48:
                    ae:c5:0b:97:45:cf:65:d2:85:af:3a:e0:9c:b9:e3:
                    62:40:76:78:f0:b6:4d:18:e2:69:e8:8b:7a:56:bd:
                    e7:10:3a:00:f1:1b:de:8b:0c:4e:ec:6c:7e:ca:4d:
                    05:4c:17:fe:93:c2:c4:26:3c:a1:bd:6a:6b:ad:8d:
                    b7:d5:3e:b8:66:d2:57:13:9d:ab:71:0b:4c:15:6b:
                    50:46:e3:bb:7f:0c:9e:ca:0c:c0:bd:34:b9:04:8b:
                    d1:fb:3e:90:25:fa:b1:0f:c9:34:ab:c1:ae:6b:94:
                    d2:0f:a0:01:97:d1:9b:c8:c9:7d:28:82:55:2d:f9:
                    20:6c:0c:2f:4a:65:81:c2:4e:05:f3:9a:94:77:95:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:69:1E:CD:AB:E4:FA:1E:25:7C:F7:CC:65:CE:25:4B:AA:AD:5D:66
            X509v3 Authority Key Identifier:
                keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:30:61:66:45:4c:83:21:e3:22:e2:67:9d:07:f8:df:be:19:
         af:c1:bc:a1:ba:d9:52:70:13:97:58:82:e7:d8:1a:d8:b3:e5:
         85:38:bd:ae:32:ca:43:ca:91:21:90:b3:cf:cc:8b:aa:2c:50:
         e9:ce:5e:c8:c1:f2:d7:92:98:8c:4a:1b:8d:33:04:b8:1d:56:
         d7:0d:28:e8:80:38:77:fb:aa:cb:e6:c6:6e:01:97:c6:cd:a3:
         e9:2d:05:2a:ee:84:cc:83:ca:dc:0e:d9:f2:89:e8:a0:62:66:
         74:85:3d:48:55:5e:c1:41:ae:e8:a8:d8:75:97:b0:27:71:5c:
         77:e7:cd:38:a0:52:9a:22:91:78:cd:89:06:f0:ce:7b:a5:cc:
         4e:55:07:ac:25:e6:77:fa:17:e6:db:34:01:de:82:bd:27:4c:
         a1:7a:54:f3:2c:7d:dd:f2:59:85:e1:60:d0:32:8c:fb:6c:db:
         8f:00:5d:98:fb:9b:bb:38:34:d7:b9:d4:0e:3a:7d:ac:b6:80:
         30:db:75:5a:b8:41:1a:87:b0:11:e3:e2:d6:44:8e:a9:1e:d3:
         13:d5:3f:10:80:3c:7e:19:77:a3:5c:41:04:06:6a:a2:be:87:
         bc:d9:36:96:b9:9d:a2:4d:96:be:8a:56:79:f2:58:e9:d7:80:
         db:9c:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:59 2025 by rpki-client