Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
File:                     gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json)
Hash identifier:          y3szS95jHkZe3M0SvsO3UIWzYICpZmO6ReM6awo7mFo=
Subject key identifier:   1A:6A:91:B1:78:EC:0C:6A:F9:30:E3:F3:FD:59:44:E3:13:FA:A6:73
Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
Certificate issuer:       /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Certificate serial:       01974B8D588826D925C5AFBB5E50C1C74934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
Manifest number:          1563
Signing time:             Sat 07 Jun 2025 18:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:43 +0000
Files and hashes:         1: eS_V4C4cNESsUi7U8IjjlNIhlSE.roa (hash: wdsqtGZ831qd+AJFvCqG1OGszbCCIEt4963PPzg5D0k=)
                          2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: g9ThoatXIY7ZvW0+ihfze4o+sOWomysA8n1FdEtRfbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:58:88:26:d9:25:c5:af:bb:5e:50:c1:c7:49:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
        Validity
            Not Before: Jun  7 18:00:43 2025 GMT
            Not After : Jun  8 18:00:43 2025 GMT
        Subject: CN=1a6a91b178ec0c6af930e3f3fd5944e313faa673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:18:1a:b1:14:4d:87:00:8b:95:00:0e:77:b8:
                    1a:1b:7a:9b:2a:90:99:f0:67:96:04:bd:b5:d8:53:
                    d7:cd:2e:95:36:6d:dc:05:32:c9:95:41:22:dc:57:
                    22:00:c2:4d:c1:3d:bd:62:79:11:c3:85:dd:8e:86:
                    85:b0:f7:01:b2:09:50:b8:80:e8:1b:db:23:44:9f:
                    23:29:ac:4e:62:c6:b9:be:36:75:32:cb:9e:b1:f7:
                    06:b9:af:3e:fc:9e:ca:d5:97:fe:f3:1f:84:61:6e:
                    e0:ab:99:8b:36:e8:56:f7:b3:a6:26:d3:2f:0a:c6:
                    4c:69:05:d4:5c:d8:39:4e:5a:08:22:11:08:03:94:
                    ab:9c:11:9d:39:06:0b:b5:df:c4:23:19:ea:85:59:
                    dc:3d:b0:34:a7:45:2b:65:0a:a7:9a:c8:9d:c9:25:
                    1e:59:40:b1:ff:fd:b6:7c:e6:1e:d0:b1:71:ec:11:
                    1c:94:e0:77:e3:8f:2c:71:26:0b:90:82:cf:74:86:
                    6f:19:b3:ba:21:ea:28:61:b2:5c:cf:b3:2a:9b:c3:
                    31:b2:42:af:d5:84:07:c2:70:ae:0e:bb:43:18:33:
                    67:2b:64:31:5a:e6:a8:1a:7d:13:34:e8:db:8f:63:
                    bb:12:0f:d7:af:15:b8:ec:ee:16:8c:bd:b5:2e:93:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:91:B1:78:EC:0C:6A:F9:30:E3:F3:FD:59:44:E3:13:FA:A6:73
            X509v3 Authority Key Identifier:
                keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:8a:7f:14:6b:60:0e:c3:de:e6:08:45:52:f2:a9:e0:c8:
         9d:56:c1:db:8c:49:14:45:fb:06:44:25:b8:c4:ce:bf:9d:af:
         c8:03:8c:f6:ff:1a:36:b7:dd:f3:f1:d4:3b:14:b6:32:67:17:
         c9:a0:dc:4f:73:0d:8b:9c:56:5c:7e:db:c5:ff:22:f6:a8:fc:
         c0:9d:6d:52:53:d9:14:8e:15:1f:be:b6:cf:d1:10:34:80:98:
         48:63:4b:36:d5:4e:92:49:81:ee:f6:93:25:9f:45:28:58:0e:
         cd:d0:14:c4:e6:79:6a:4f:ef:28:cc:02:b9:af:33:4c:cb:fe:
         6b:59:71:8a:61:cd:17:66:5b:5b:1d:04:a2:18:df:3e:84:ea:
         4e:06:dd:43:44:30:9e:42:62:8f:38:e0:bc:82:d7:46:65:be:
         17:39:03:73:e6:89:bb:07:7c:5e:58:c8:35:94:c1:95:bd:36:
         af:59:d1:84:e2:22:09:4f:12:02:93:88:54:32:91:be:b6:4a:
         4e:44:0c:f4:e4:89:21:9b:42:cb:0b:c2:f8:86:de:27:ac:fb:
         91:8f:80:d2:10:a2:c3:3b:6b:7a:00:03:cc:c2:ec:3c:89:53:
         69:a7:0e:ed:07:c6:87:e2:a5:2b:2d:ef:bb:ad:76:2a:fc:d5:
         1a:81:69:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:47 2025 by rpki-client