Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File:                     gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier:          7vfIY2ZiG1kLOog4D9e7jL+oHQDTJhI6OyX6He5Azm4=
Subject key identifier:   3F:89:C2:2B:B7:4F:F0:2A:46:FF:F9:7B:02:54:F2:3E:30:62:EF:6F
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer:       /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial:       01974B568DBF1ED2DF4C6BCB15AE8E282878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number:          08F1
Signing time:             Sat 07 Jun 2025 17:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:52 +0000
Files and hashes:         1: RKmtjmx8dGmZLS6fAJiBKQnORQs.roa (hash: uAM4Z/WN2c7W0xTj1SOSxZNG72uS1HvTkZghAtYIMtE=)
                          2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: Tmi4IJw9RIWD5BmrQwzTdKw5F2amS71gEjdyjvOJTjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:8d:bf:1e:d2:df:4c:6b:cb:15:ae:8e:28:28:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
        Validity
            Not Before: Jun  7 17:00:52 2025 GMT
            Not After : Jun  8 17:00:52 2025 GMT
        Subject: CN=3f89c22bb74ff02a46fff97b0254f23e3062ef6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:d8:77:6f:eb:c8:24:a0:b7:4b:93:5f:07:
                    5e:fa:ed:31:6e:3a:04:7a:c0:af:f9:58:dd:d1:f1:
                    11:35:ba:25:26:64:35:84:b9:ec:f8:1f:6e:14:82:
                    47:a9:7b:61:c2:40:b3:0b:0b:e6:fa:0f:3b:2a:54:
                    4b:10:5e:f9:b7:d7:79:28:56:22:cd:6f:8a:dd:65:
                    08:63:e9:de:1a:16:6d:7c:b4:13:8c:e8:e3:02:cd:
                    d8:61:bc:fa:b2:70:43:b1:0e:a9:dc:1b:b0:da:a1:
                    37:89:f8:c7:ef:a7:9c:b4:a9:59:fa:b8:de:b6:b9:
                    20:bb:23:5d:62:45:21:c1:e2:d2:05:a2:30:18:45:
                    ba:7d:90:da:01:dc:f7:89:d5:2f:3a:fe:61:62:f5:
                    dc:09:2a:4d:06:78:14:80:3a:e8:ff:b1:40:35:36:
                    78:2b:ee:8d:9c:f5:f0:08:f7:03:3c:81:40:30:2a:
                    a3:ab:82:a4:8c:3e:3b:a1:66:41:0e:4c:dd:63:de:
                    5d:f3:c2:87:12:b5:5a:cf:84:bc:35:b4:37:f9:5f:
                    a9:b6:75:74:f9:f1:16:94:b0:58:bd:12:79:15:db:
                    dd:e0:44:98:34:42:57:ef:a5:de:34:cd:d1:38:c3:
                    36:c8:3f:b2:fd:c9:d2:ac:82:4f:bf:e5:83:21:db:
                    07:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:89:C2:2B:B7:4F:F0:2A:46:FF:F9:7B:02:54:F2:3E:30:62:EF:6F
            X509v3 Authority Key Identifier:
                keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:46:fb:06:a8:5c:35:7e:92:61:10:46:95:c2:97:a5:a9:ae:
         3e:21:fa:dd:77:d6:93:cc:8b:95:35:19:2d:04:db:cd:6d:fb:
         75:e2:d2:f5:71:27:78:0f:ab:c5:3f:82:54:90:da:53:cc:68:
         4b:ef:f0:8b:d6:a7:a5:17:49:52:18:8f:c1:d3:6e:0d:67:53:
         82:44:b6:e4:31:ca:8a:57:6e:46:e6:61:b4:fd:90:ce:5e:4b:
         29:f3:47:28:cf:51:99:20:ed:4a:bc:de:17:24:c2:e9:ce:19:
         a8:7b:5f:10:b2:2d:71:cb:14:73:cd:21:36:9e:92:b4:4f:39:
         aa:6d:f0:4c:4b:06:91:2d:23:81:f4:e0:9c:c0:4a:15:7e:9d:
         6d:13:19:1f:84:f6:f2:d2:5b:49:0c:42:9e:87:d8:17:94:10:
         14:38:c6:bb:ba:eb:2b:41:6c:ac:86:77:fa:ab:17:8d:13:ee:
         3d:f8:85:14:a6:b1:8c:2f:8f:64:d7:a0:16:6c:61:a7:6b:0f:
         e2:91:42:8d:65:ac:c8:88:49:08:f9:57:80:3a:50:a1:0f:15:
         21:28:a3:3e:b2:d9:23:dd:62:3e:ea:a3:d4:c6:ea:e3:8e:ed:
         b4:bf:2b:8c:31:ba:e0:38:45:d0:d1:d3:8a:b6:95:e6:62:46:
         7f:a2:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:27:17 2025 by rpki-client