Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File:                     GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier:          Px+kRhUYego5nWki6loSYUHtwdMXaqQudaQxKGvN/m4=
Subject key identifier:   41:65:25:40:4B:29:C6:CD:69:EE:39:E3:C4:13:3F:9C:05:7B:3B:2D
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       019756115B56C8DB879B09369C2F7B54D35E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number:          1583
Signing time:             Mon 09 Jun 2025 19:01:07 +0000
Manifest this update:     Mon 09 Jun 2025 19:01:07 +0000
Manifest next update:     Tue 10 Jun 2025 19:01:07 +0000
Files and hashes:         1: 3SDO9hGSLXcvKio5nucfHtpBZqo.roa (hash: UySF852N3LzIIXg+WlqkSuDwnOKj/L9pAk/WjttqTkE=)
                          2: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: SHuyti65SoRxJdF6eHY07yH4KfPriFTBR6y3FyWA05g=)
                          3: QYv8HyZwcR2EgwyDNXO4DNm4alY.roa (hash: 4y8aidT7cf46oC9Rb8MtLIG+06WpyEeua6nqGV7vmw0=)
                          4: t3Zx6p1wvn7jY8kHjzfJnnc7eNg.roa (hash: OLIfG4z0xwuSo4+uWrBPz+WPutgwTrYoDXIoHunSp5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:11:5b:56:c8:db:87:9b:09:36:9c:2f:7b:54:d3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: Jun  9 19:01:07 2025 GMT
            Not After : Jun 10 19:01:07 2025 GMT
        Subject: CN=416525404b29c6cd69ee39e3c4133f9c057b3b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:a9:89:84:6e:73:42:2d:bb:15:45:9d:22:
                    2c:e0:a0:3a:7c:51:d9:29:b5:14:9c:54:62:4e:c9:
                    13:23:3e:90:04:52:e8:2b:10:08:5f:7a:15:a9:46:
                    f5:fa:69:62:fb:57:39:82:58:14:e5:6f:d3:d3:d7:
                    76:a6:78:7d:11:62:3b:2b:c9:b2:16:10:4a:4a:47:
                    74:98:64:a4:c6:df:4e:f9:63:70:66:52:8b:53:87:
                    03:fb:82:71:4d:8c:01:0b:6e:00:d8:e2:2c:77:25:
                    dd:7f:f0:4e:ab:bc:0f:6e:82:fa:50:34:18:ea:4e:
                    6b:9c:19:c8:17:61:fc:49:f8:d3:e0:d6:1e:f8:5e:
                    1d:1e:0e:d6:58:c2:21:81:9f:c3:d3:f3:ee:17:35:
                    30:d6:6b:88:ad:57:98:39:76:ee:76:10:02:b8:3c:
                    08:03:f9:ea:94:41:b7:51:48:4a:92:70:75:d6:33:
                    23:41:a9:a3:5d:30:5d:51:55:b7:50:2b:7c:c2:f7:
                    1d:f2:61:c9:de:d4:06:d0:3a:0d:a4:9b:54:56:e1:
                    06:35:83:3f:09:70:8b:74:65:c3:03:60:f0:9c:3a:
                    37:2a:30:69:26:78:b0:aa:d7:37:f0:11:24:65:99:
                    13:19:f4:22:d5:84:e1:28:b8:a6:a9:3b:2a:b9:81:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:25:40:4B:29:C6:CD:69:EE:39:E3:C4:13:3F:9C:05:7B:3B:2D
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:88:78:69:c4:b5:dc:fd:aa:28:07:12:7e:a5:85:a4:52:c9:
         f7:12:57:16:59:62:02:65:c0:1a:6d:ac:da:18:c7:cf:02:d9:
         96:c6:b6:86:d9:68:31:80:71:70:24:b2:11:28:06:7b:4d:71:
         5b:d2:75:1a:92:a3:66:a2:94:28:58:83:aa:4b:05:10:df:6f:
         ce:40:99:bb:6a:bd:14:fb:9c:dc:2a:81:3b:a6:d2:a5:38:cd:
         1c:48:1a:92:6f:d1:88:bd:c7:89:4d:c4:75:b2:8e:68:82:8f:
         bf:28:15:f7:53:a0:6c:dc:9a:bc:09:9a:08:2d:9a:3f:02:cd:
         18:c6:a6:cd:96:87:57:65:22:d3:04:04:32:08:ab:e5:ce:8d:
         1f:1b:ce:c8:02:19:2a:56:36:34:d3:ef:de:eb:96:c8:79:f9:
         8a:fd:f7:8d:81:f1:01:66:61:6b:36:be:62:58:25:91:11:2e:
         af:b3:4d:19:31:21:6a:c7:5f:32:5f:d9:90:03:6e:4d:a3:b3:
         12:98:36:74:33:f4:9a:b4:02:d6:54:14:cc:d9:e8:72:72:96:
         46:6a:c2:dd:1d:56:85:71:50:6a:04:71:20:3f:49:2a:60:7c:
         2a:28:80:fb:22:53:d3:86:01:13:b8:6d:d3:ac:fd:b2:02:82:
         57:a4:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:48:16 2025 by rpki-client