Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
File:                     GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json)
Hash identifier:          VtSv5a77jdTIyuR/1e7tn5NUjZRMwBlhl53TRyde2zs=
Subject key identifier:   61:D2:6E:4C:C7:1F:F3:56:52:F4:A1:2D:DA:C9:B3:E3:E1:00:18:7B
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Certificate issuer:       /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial:       01964D7F201091849884CC42C5DE76236F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
Manifest number:          1513
Signing time:             Sat 19 Apr 2025 10:01:38 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:38 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:38 +0000
Files and hashes:         1: 1JOZ7dbb5H6duThfeMsJ0JbBk7I.roa (hash: 0Pd6o8RRKlvvsS/YlVCGhUpZijHcF0bp4ry/V9YxdXE=)
                          2: 8cLxwhiwZ15o52IG0lIcBm8BfIQ.roa (hash: PFZiPiXQsPniAQ08Y5K+gzotL1tE/fkVxovwe7IBhnM=)
                          3: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: CMVA+2gInwkz9mIbh7mYZowN5/ZcJSNGL0FWWKgkY0Y=)
                          4: IUhjeSZNLRuDHaFdnLWNCkDEtoA.roa (hash: 7mHS1yKQvcVUsvgxBWbk52TGnvHhH+IlGhrKPQMDS/Q=)
                          5: Jfkb9wIjflJ9g_nlBWaCF6laiWU.roa (hash: /ljWZ+p/6L9vGqqgT4FUCtEB1Y8qOikrC1+ICoRutK4=)
                          6: eSjPZbIfbzV_-2dY3DLb0TWTSdM.roa (hash: AL9fqh7ceKqnHM3PxeRD473MOSaIbFz8D+64dfZV0bI=)
                          7: shcI5ksCijvvRLID7bxpTU4Ek38.roa (hash: 5j6UIvbPGZk819fhFv2lIK9RILlN83FerZg8FUEwxJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7f:20:10:91:84:98:84:cc:42:c5:de:76:23:6f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
        Validity
            Not Before: Apr 19 10:01:38 2025 GMT
            Not After : Apr 20 10:01:38 2025 GMT
        Subject: CN=61d26e4cc71ff35652f4a12ddac9b3e3e100187b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:c3:a5:fb:bb:3f:b7:97:fb:56:80:3d:14:
                    23:d5:25:e8:f4:e2:2f:de:2e:79:83:36:5a:3b:b4:
                    09:90:c9:e9:60:48:1d:e6:73:17:ed:bc:29:6a:2d:
                    85:ee:f3:00:5d:1b:2d:56:36:08:62:05:f1:35:9e:
                    5c:23:ad:9b:f7:a0:77:db:ab:87:f2:c2:23:11:f1:
                    fc:e0:6e:1f:9e:f6:f8:8b:dc:43:ee:47:59:01:a1:
                    46:f7:07:7d:07:42:bf:40:69:23:8d:3b:30:7e:8c:
                    82:c6:d3:db:26:07:ea:30:72:2e:07:f5:76:e1:38:
                    62:7f:6a:6f:f5:c2:78:e6:d6:53:ba:ca:02:48:31:
                    65:42:e9:37:93:42:58:92:46:42:eb:d3:c0:ee:4b:
                    85:0c:c1:dd:7b:44:56:85:7b:23:5e:16:ec:c7:dd:
                    31:d8:59:42:7e:68:f1:b4:7b:c6:f9:7b:8c:0f:a3:
                    9d:98:30:e1:28:6b:dc:89:28:01:33:2f:50:a5:7b:
                    47:8a:0e:43:b4:37:29:a5:d8:ad:37:71:ac:3f:9f:
                    b3:47:a4:15:7b:93:75:72:43:c0:25:1d:fd:77:00:
                    0b:1a:8b:27:d7:0e:8a:bf:21:6a:aa:ce:a1:de:f5:
                    d2:2f:83:62:92:c1:64:fd:0b:13:57:38:f1:9b:92:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D2:6E:4C:C7:1F:F3:56:52:F4:A1:2D:DA:C9:B3:E3:E1:00:18:7B
            X509v3 Authority Key Identifier:
                keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7b:61:50:a3:e6:2d:33:21:68:a0:82:03:12:30:31:eb:d1:
         50:a2:f5:df:e1:1e:06:af:99:3a:f4:c4:dc:e7:b8:e1:f1:31:
         d9:2f:bf:74:dc:3b:6a:91:08:05:70:17:7b:0a:41:9f:6d:7c:
         33:bd:a8:a6:2e:c3:af:b5:d2:c7:4d:0b:17:f8:fb:c9:40:74:
         c0:d1:47:99:1d:3d:35:f3:6a:37:21:fe:5a:42:9a:0a:95:8f:
         56:3a:24:52:36:56:ee:bd:01:d6:8b:a0:01:10:63:fa:63:7a:
         83:7e:78:c3:61:8c:15:24:08:73:6f:87:0f:45:11:df:17:cf:
         26:78:cb:92:59:da:8f:7a:10:a7:5a:d6:0a:45:b2:bc:d5:2b:
         0a:f4:70:76:87:e1:76:84:de:f7:9f:a8:85:09:94:2f:8c:1d:
         33:d2:20:d2:d7:7f:53:13:14:6b:35:c6:dc:0a:57:ff:2f:15:
         b6:54:a2:ae:fa:5c:90:f9:d1:bb:bb:5a:e3:a5:e0:d1:3a:e1:
         63:cd:e2:c9:d9:88:c3:35:20:63:30:38:58:8e:e2:8f:ea:b0:
         a5:d7:0d:bc:71:07:90:fb:74:9b:a2:06:41:2f:fb:1c:53:e2:
         47:08:d1:49:3b:19:c8:29:af:bc:3e:0e:b1:6c:06:a2:5e:46:
         c4:b1:aa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:14:46 2025 by rpki-client