Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File:                     D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier:          TLJKGYxm8tUGz7+CfZgxYm/RQTI4UUocYyu+6zhHBno=
Subject key identifier:   50:1C:B2:5E:3B:38:A2:9B:DA:0D:95:41:FE:5B:36:8A:DD:C8:26:29
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer:       /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial:       0197586D15881082AD16DA612A31C589544F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number:          AC
Signing time:             Tue 10 Jun 2025 06:00:33 +0000
Manifest this update:     Tue 10 Jun 2025 06:00:33 +0000
Manifest next update:     Wed 11 Jun 2025 06:00:33 +0000
Files and hashes:         1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: /fop3Ax2OtG//xIY8EAD5tet1xThk0c3CbGOyS7dWXI=)
                          2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:15:88:10:82:ad:16:da:61:2a:31:c5:89:54:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
        Validity
            Not Before: Jun 10 06:00:33 2025 GMT
            Not After : Jun 11 06:00:33 2025 GMT
        Subject: CN=501cb25e3b38a29bda0d9541fe5b368addc82629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a3:18:07:9b:6b:5e:7d:0b:34:0e:77:23:e6:
                    c4:4a:95:0d:7e:53:b2:80:fc:2f:23:51:31:43:01:
                    63:eb:81:d5:97:af:04:51:d2:3b:19:e9:0b:1c:6d:
                    1e:5b:2c:09:5b:b5:7a:3a:93:96:54:8c:83:fb:e7:
                    66:70:38:39:98:be:42:92:60:67:2f:5f:8c:39:d9:
                    95:e9:fe:11:40:a8:e9:8b:6b:ba:b4:95:2f:d4:05:
                    a6:2d:c2:a2:db:a8:61:f8:5b:b4:14:ee:5e:11:56:
                    08:b4:0c:f2:3f:81:b0:d2:4d:f6:1f:fa:3e:97:d4:
                    35:0d:b9:05:1a:48:c8:50:36:8b:ee:0d:2b:f4:c0:
                    1c:76:32:97:8d:01:1e:6c:14:14:11:34:23:dc:3f:
                    7d:db:d5:2f:6f:06:cb:9e:c0:52:f5:a4:80:26:6a:
                    f2:50:17:e3:95:f0:33:db:64:d4:fe:f4:ac:1b:a5:
                    c5:d6:ca:72:e9:10:b9:1a:f8:3c:2a:bd:e6:c4:6a:
                    a6:8c:32:0b:a3:28:d2:f1:d0:93:ad:09:02:93:f4:
                    5a:ec:28:4b:35:aa:90:46:3e:11:29:8f:4f:15:ac:
                    15:fd:47:8d:47:66:d8:fc:48:73:e2:e2:10:a7:11:
                    23:93:bf:d0:73:7a:18:3e:10:0a:ed:d6:90:8b:8a:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1C:B2:5E:3B:38:A2:9B:DA:0D:95:41:FE:5B:36:8A:DD:C8:26:29
            X509v3 Authority Key Identifier:
                keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fa:a0:58:97:84:84:37:2d:36:34:dd:a4:29:82:82:ea:a2:
         5a:1d:e2:85:e2:0a:27:dc:ec:3a:4e:47:b5:d7:bb:5e:fe:a8:
         77:b9:4e:0c:fb:4e:a0:11:5a:41:d9:1f:43:f4:52:1e:4c:a4:
         5a:28:8f:79:e3:d7:9b:d5:f6:27:f9:20:20:f4:d7:c9:6c:29:
         89:95:54:5d:84:08:d1:ef:b2:11:3f:8b:61:d4:e6:06:0d:d7:
         95:75:23:3a:6e:8f:7b:2e:4f:57:dd:2a:0a:a3:e9:3a:c4:7e:
         18:c1:58:a5:97:e1:a6:64:1b:de:44:35:2b:ef:a1:e4:a5:96:
         16:33:c2:9f:cc:47:e9:eb:4b:77:6d:64:0f:b5:c8:df:47:9f:
         f3:b4:ab:3c:3a:c1:8e:1c:1c:bf:54:cb:aa:98:91:65:6b:57:
         75:5c:f6:ca:30:1b:5b:74:ff:5c:a6:cb:c0:b8:03:b8:ec:0a:
         08:af:fc:f6:40:3b:e8:ba:83:01:cf:c8:bc:f3:95:2e:d8:98:
         bb:e9:ce:cd:be:6c:ed:a3:2f:1b:e6:c6:42:6e:ca:70:3d:09:
         01:21:3f:54:83:0e:ba:79:d4:4b:29:52:5c:fe:0a:77:10:98:
         4c:76:d7:d2:d2:21:08:93:23:19:01:2e:92:1e:9f:a9:d3:f8:
         f1:78:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:22:44 2025 by rpki-client