Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File:                     gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier:          XCCo/FcUhNVf6FoCFkyQvGCGy6VD4qS0o5gYFs1CJdU=
Subject key identifier:   9E:AD:2A:C5:D7:A5:A8:02:EE:F4:37:F6:89:34:35:65:08:4C:34:47
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer:       /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial:       019747B0DAF05B184ED35CA967683C9E7E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number:          1580
Signing time:             Sat 07 Jun 2025 00:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:01 +0000
Files and hashes:         1: FG-bEioa4civ6jvoSnaUtHZPEQE.roa (hash: w4e7tpxeaBQHMoRYqhi0o1qJLopKx8fwD7s6iGDvqgY=)
                          2: aGlvUdVJOWbqaat4vglrkQH1tNo.roa (hash: svvIGknsbQhU6YBIsZkBO7bjTdjQ0GNK1yuIVKiea6E=)
                          3: eZ8arxnGDWk7xkVHJ1bRXWZ355M.roa (hash: AeIoI4f85DUeWbFvZ4SxFOX1IxHcOJjIFceKESNKiJo=)
                          4: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: IfZ2XKZjIaYF41zw5seDxLYo1tmkYW3NR0MGg/V7Qsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:da:f0:5b:18:4e:d3:5c:a9:67:68:3c:9e:7e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
        Validity
            Not Before: Jun  7 00:01:01 2025 GMT
            Not After : Jun  8 00:01:01 2025 GMT
        Subject: CN=9ead2ac5d7a5a802eef437f689343565084c3447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:be:42:43:e0:d8:f2:2e:ca:e5:68:d0:91:
                    84:bd:58:f8:45:2f:f2:22:11:51:cc:4b:c1:98:04:
                    b3:f6:f2:96:b4:8d:f5:84:71:56:57:d8:37:4d:cf:
                    f3:f5:bc:a6:b6:33:f0:8d:49:e5:6f:18:bb:b5:7c:
                    dc:f9:60:b1:5b:59:e7:80:cc:ac:80:ab:ad:3e:42:
                    30:1d:4a:0a:00:96:a0:2d:ee:88:e9:b0:fe:d4:1d:
                    39:f5:6d:da:32:2d:72:ff:d3:71:9b:0d:1c:ff:f5:
                    a8:17:e1:c6:de:fe:1e:c5:8a:28:c2:80:16:a8:a9:
                    5a:f7:73:9f:d3:12:8c:01:f3:d4:f5:0e:3b:86:4e:
                    1d:c3:41:f2:cd:2a:ff:77:b3:c0:82:bb:75:06:fa:
                    e8:79:b6:63:5a:f4:01:3c:de:6f:98:87:73:c4:34:
                    e4:ab:9d:ef:e8:db:b5:fd:83:01:68:6f:9b:29:c2:
                    85:60:45:d7:c5:b0:b2:bb:c0:a6:40:c3:94:c5:75:
                    2f:e8:cc:ee:ec:ed:fb:84:88:15:af:9d:68:d7:2d:
                    03:23:80:47:78:14:7f:ee:4a:38:e1:7c:cd:13:51:
                    0e:bf:b3:52:20:a8:07:af:04:90:73:20:54:a9:7a:
                    bd:4c:2f:d1:11:6e:0d:0d:58:59:bb:aa:b9:88:a2:
                    6a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AD:2A:C5:D7:A5:A8:02:EE:F4:37:F6:89:34:35:65:08:4C:34:47
            X509v3 Authority Key Identifier:
                keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:05:ef:47:42:40:5e:36:4b:9a:22:7f:b1:4b:e6:d6:9a:ac:
         c1:50:c3:9f:3e:8d:ed:1c:11:98:b5:4b:e1:16:70:5f:e6:c0:
         54:2b:9c:cf:de:f0:2c:18:37:d7:7b:b8:ec:2a:45:3e:1d:16:
         9e:66:3e:5a:e2:a6:98:13:6c:3a:d4:31:15:fd:4a:a9:68:fb:
         34:02:27:ed:89:bc:6a:f6:83:01:93:28:a5:46:10:05:29:a2:
         1f:88:14:c7:ea:33:b7:fa:cd:dc:e2:6e:cf:78:84:64:72:ae:
         b5:5b:ac:80:b8:58:1a:20:cf:e2:2e:c1:f4:ec:8b:9a:5d:64:
         08:75:f2:38:bc:d8:2f:7a:64:62:2c:2a:a5:48:eb:85:1d:dd:
         1e:21:93:2d:e6:d2:06:ae:9c:5a:6d:06:31:ff:49:6b:43:32:
         16:a0:0e:a3:ac:76:e9:57:97:97:33:9f:9f:85:e7:39:6c:92:
         ba:21:df:5a:4a:26:98:c7:dc:43:77:66:2d:fe:8d:d2:d9:94:
         3d:3e:14:64:34:aa:d7:ad:cd:18:0a:96:ce:53:ae:e4:3f:46:
         ad:f0:51:77:7f:df:53:93:85:8c:1d:53:02:39:ac:61:31:94:
         c8:03:5a:3c:be:5a:47:f8:4d:1d:ae:e5:26:dd:e2:c0:c2:a8:
         ca:3b:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:53:30 2025 by rpki-client