Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File:                     gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier:          ter4YzMof8/eNobxUI9IznwPnCEa16V5U+Zo9YzNhgs=
Subject key identifier:   E8:A0:9F:19:21:75:8C:5F:95:3C:AE:31:A7:C4:6B:B4:8A:6C:A7:8E
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer:       /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial:       0197470BBF3D8B7528875AAA94B6B241896A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number:          0E12
Signing time:             Fri 06 Jun 2025 21:00:41 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:41 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:41 +0000
Files and hashes:         1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=)
                          2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: 2g01cO1kbhQY/1W3YbZh+3uv8GCvGgTxMCeLHi0849A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:bf:3d:8b:75:28:87:5a:aa:94:b6:b2:41:89:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
        Validity
            Not Before: Jun  6 21:00:41 2025 GMT
            Not After : Jun  7 21:00:41 2025 GMT
        Subject: CN=e8a09f1921758c5f953cae31a7c46bb48a6ca78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:13:48:21:4b:cb:4a:4d:2e:4f:b9:f6:ab:
                    c7:df:61:06:03:d3:ca:0b:b1:43:a9:bc:12:19:6b:
                    81:98:8c:87:41:9f:64:76:8f:1d:6a:15:56:46:7d:
                    1c:03:00:41:b0:f2:bf:10:4c:c6:14:da:ba:61:f4:
                    78:f8:1f:32:77:e3:8d:d2:df:77:dd:47:a5:1d:1c:
                    37:09:d1:e0:97:8a:ef:76:15:43:0f:0e:80:1a:ee:
                    2e:e0:07:d2:de:03:39:4a:d7:bb:4e:48:d3:79:92:
                    ec:b5:d8:ed:ac:d7:9e:23:c0:88:c1:ce:40:7f:7e:
                    fb:9c:5e:4f:64:8b:97:18:a8:89:0c:e5:87:9e:71:
                    91:c3:65:71:42:82:da:35:de:91:29:b8:62:0a:7a:
                    a3:72:18:a2:ff:d4:1e:1a:fc:a7:b4:c1:8f:86:52:
                    c8:29:22:c8:52:a0:10:7d:bb:5c:da:16:55:e3:51:
                    b7:0c:3a:86:64:f1:a6:b1:47:28:ce:d9:a8:b5:86:
                    e6:eb:d0:71:9a:cc:26:a7:22:b0:8f:9a:f9:f0:ff:
                    0d:4e:de:65:9d:3b:63:ee:98:1f:15:88:ec:a5:77:
                    2d:5c:43:8d:55:26:a6:9b:5e:b0:07:16:59:9a:da:
                    ef:b9:3e:6f:35:2c:66:93:66:0f:1e:42:f8:88:98:
                    f3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A0:9F:19:21:75:8C:5F:95:3C:AE:31:A7:C4:6B:B4:8A:6C:A7:8E
            X509v3 Authority Key Identifier:
                keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:88:1e:bb:ea:e5:cb:36:92:69:17:78:75:f5:66:99:b8:fd:
         84:81:88:3e:91:b1:97:ba:c9:b7:2c:c0:a4:75:ec:8b:40:53:
         93:97:88:b3:84:28:b5:d0:88:1b:6c:8d:28:36:c3:fd:c7:b2:
         52:38:a1:fb:53:9b:7b:90:44:eb:90:86:9d:69:aa:a5:8c:c1:
         37:7b:f7:46:21:c0:07:d6:01:b3:1f:a4:9e:3e:39:d0:f9:74:
         37:7c:11:c3:b7:1e:9a:0f:fb:1f:e9:59:d5:04:ec:64:ea:77:
         12:87:61:14:9d:85:b0:0b:80:ed:3b:0e:c6:e0:61:6c:c9:12:
         35:29:d4:a4:65:57:ca:3d:ae:de:fa:da:cf:d1:f2:8c:f2:7c:
         f4:b5:97:89:43:55:94:8d:ba:04:ae:ad:43:e8:18:39:66:00:
         a3:76:dd:9b:6a:55:3e:e3:b9:bd:60:64:8b:7e:72:5d:b8:d4:
         c4:cb:ca:31:8a:7f:55:ad:47:97:b5:4a:c0:36:38:81:3f:6c:
         a9:58:25:e1:6c:cf:b1:3f:d3:19:25:61:f2:1d:f1:b9:ce:20:
         01:b8:19:8f:85:ea:d5:d3:35:c4:16:0c:e5:b5:13:02:3f:86:
         5b:ef:6f:a3:2c:5f:06:be:35:51:6e:73:70:c0:e0:e3:6e:19:
         a8:0c:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:17:28 2025 by rpki-client