Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File:                     GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier:          gnF6NVQaHZWzzXTellSfFa7LyKOy361cblSze3gNInY=
Subject key identifier:   B1:6D:9D:3F:7C:71:FC:7C:F9:56:9D:0A:C0:2B:B2:C9:66:96:A3:C0
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer:       /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial:       01974EC5146915BE85934FB71FA4941161CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number:          157D
Signing time:             Sun 08 Jun 2025 09:00:28 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:28 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:28 +0000
Files and hashes:         1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: 3A4TEAAFrJ/5VsEyL/Qa0Lo6jZ7hwzm482ets1zfQZQ=)
                          2: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (hash: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:14:69:15:be:85:93:4f:b7:1f:a4:94:11:61:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
        Validity
            Not Before: Jun  8 09:00:28 2025 GMT
            Not After : Jun  9 09:00:28 2025 GMT
        Subject: CN=b16d9d3f7c71fc7cf9569d0ac02bb2c96696a3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:94:d9:71:33:2e:ae:7a:4a:ac:ad:22:95:
                    7f:35:60:1e:f1:e0:0b:c9:d3:62:35:2a:32:67:86:
                    67:c7:1d:79:53:95:63:64:c2:2b:da:ea:05:af:d8:
                    79:c3:40:1b:42:25:52:52:69:c8:19:10:2d:bc:6e:
                    2a:0e:b1:6b:80:07:96:2f:af:8e:f0:f9:e3:d5:17:
                    fb:32:19:ff:c5:34:04:64:cf:72:fd:8d:7f:c2:9e:
                    6e:bd:bc:ee:68:96:b1:f2:fb:9f:a9:2c:1e:3b:2c:
                    07:df:c8:09:b7:90:1a:ba:ec:7f:4d:e9:56:2a:0a:
                    37:c2:79:6c:48:55:3a:b2:79:d5:37:2b:9e:15:d7:
                    80:56:e0:12:fb:ff:ba:b8:75:c0:1e:73:fd:9b:d2:
                    02:75:2c:47:8e:be:54:bb:aa:f2:50:97:51:e8:2e:
                    7d:64:af:90:b9:8a:8d:5c:11:69:e1:95:e9:1e:70:
                    4b:e1:e5:0c:af:78:a8:e3:30:5a:a6:49:13:aa:eb:
                    b4:02:59:0d:01:b9:25:0d:10:10:96:40:40:d0:95:
                    08:ca:cf:62:ac:8a:f1:55:c4:0e:55:f4:0b:1a:d1:
                    f6:f4:cb:e2:70:6e:31:6a:d5:23:14:62:85:67:01:
                    53:a5:b7:d6:11:ad:10:6b:b2:ce:a0:31:36:14:19:
                    df:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6D:9D:3F:7C:71:FC:7C:F9:56:9D:0A:C0:2B:B2:C9:66:96:A3:C0
            X509v3 Authority Key Identifier:
                keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b8:36:7d:60:7b:53:e1:55:29:b4:81:5e:a8:64:fe:f5:15:
         11:86:95:ac:9f:3d:89:d9:a9:36:e8:b0:ba:0d:68:e8:99:af:
         fc:ce:5c:c7:3d:37:ee:39:07:c7:2f:f6:f8:50:9a:d5:b9:f3:
         aa:41:1c:b4:1a:de:3d:4f:05:3e:98:f2:30:c4:c9:6d:5b:ea:
         9b:e0:0c:85:42:1b:d2:60:f5:f9:31:c7:3d:97:c4:3e:fe:19:
         8a:e7:c1:1d:30:9b:d1:94:ae:5e:9d:00:31:3e:de:40:2e:8b:
         10:15:04:47:6a:76:b1:4f:b9:b2:0f:b2:fa:40:00:bf:79:75:
         d2:d9:20:a3:ed:f9:ff:ef:7d:56:53:2a:ad:73:b7:6e:85:9c:
         5e:8c:0d:80:85:27:9e:0a:78:28:ea:44:a2:a1:a6:6b:90:f9:
         6a:10:5e:48:7a:d0:13:a2:01:f8:42:62:50:7a:1f:50:8f:2c:
         f0:00:60:47:15:81:f6:c4:37:0b:0d:a8:df:f1:1a:cd:8f:6b:
         e4:32:91:1c:8a:7e:0c:8f:0a:b2:05:4c:cb:c8:d8:15:6a:2d:
         1f:26:2d:68:89:e8:da:f1:d4:78:cd:ea:0b:ba:26:9a:26:6d:
         29:b0:d6:f0:f2:ba:79:76:61:7b:9b:44:87:4d:43:81:b5:11:
         b5:9a:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:44:17 2025 by rpki-client