Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File:                     gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier:          9XTXU0VI9xEBUtgLWjIiYKL4xTfHe8wMi3C8FXuc7Is=
Subject key identifier:   B3:C4:73:E0:00:E2:06:67:43:E3:FC:92:BB:6C:62:4D:40:EE:28:1E
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer:       /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial:       0197602777F480B34DA6468F8E974E3A34A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number:          0540
Signing time:             Wed 11 Jun 2025 18:01:28 +0000
Manifest this update:     Wed 11 Jun 2025 18:01:28 +0000
Manifest next update:     Thu 12 Jun 2025 18:01:28 +0000
Files and hashes:         1: FS82XW-k77zMqGngn5r7_Yo2ofY.roa (hash: HKhziiZ0vfYbPizRPboCVEcmyagdxZmch8FNJ52Iiys=)
                          2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: +SJHTQSvr+mz7vkCMm3INoftPMz6PG4bEfSJ/sCFvFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:27:77:f4:80:b3:4d:a6:46:8f:8e:97:4e:3a:34:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
        Validity
            Not Before: Jun 11 18:01:28 2025 GMT
            Not After : Jun 12 18:01:28 2025 GMT
        Subject: CN=b3c473e000e2066743e3fc92bb6c624d40ee281e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bb:43:e5:46:08:2b:84:3f:c7:53:c3:3f:a7:
                    d9:ef:d5:3d:b8:54:0d:a3:e7:f0:00:af:ab:7b:4b:
                    89:fc:2d:50:07:99:1a:e9:d0:61:de:19:e5:98:d1:
                    c1:5d:3f:1a:8f:5c:c5:9f:b2:ca:59:1c:46:2a:25:
                    ca:b3:9a:ba:bf:a5:3d:95:0c:46:2c:81:a9:a3:b4:
                    63:5c:e2:27:38:8e:a9:8d:11:9a:59:24:eb:55:7a:
                    95:f6:e5:5e:56:12:25:f0:0c:e9:2b:4b:2f:27:9e:
                    fc:52:e9:d8:6d:c9:6f:8c:72:cd:b9:a9:f8:94:11:
                    a3:ae:28:ce:84:cb:c9:24:17:f1:7c:a5:c1:3a:30:
                    f3:8b:ba:28:ed:20:ef:fd:a3:57:4e:52:a7:a3:9a:
                    05:45:93:ab:f4:2e:63:c1:e6:3e:a5:ae:95:7c:a6:
                    32:30:65:aa:e0:39:7b:f5:d0:15:c6:f9:12:04:58:
                    5d:a9:17:56:56:d6:a5:22:25:82:6a:77:83:8b:fa:
                    28:e3:ca:fa:03:ec:3e:8f:4c:7d:d0:12:db:41:a5:
                    be:bb:92:45:6b:23:03:09:35:f7:ac:16:00:c9:fd:
                    36:45:c5:3c:e5:e6:d2:e2:12:c8:33:70:ca:75:f1:
                    4c:3e:e4:bc:4b:d2:eb:7b:d4:22:0d:8e:ac:a0:39:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C4:73:E0:00:E2:06:67:43:E3:FC:92:BB:6C:62:4D:40:EE:28:1E
            X509v3 Authority Key Identifier:
                keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c3:10:27:ba:a1:9b:5c:c3:26:d1:6c:22:40:7f:78:af:a2:
         09:55:41:3f:94:c1:de:cc:a4:8c:87:e6:7e:cf:b9:2d:01:66:
         d4:3d:15:89:0a:85:26:33:99:12:7a:c8:c1:d7:b8:84:73:1e:
         b1:45:4d:d0:3a:5f:3c:19:4d:f8:f2:98:3b:9e:26:0b:19:ce:
         ae:8a:18:03:c1:b8:0c:d4:b9:c3:ef:32:40:7c:f5:75:47:9b:
         8a:1b:0f:17:51:bb:ef:b3:4c:09:66:f7:2b:74:8f:30:01:31:
         ac:0f:c3:e3:bd:f3:5f:59:c8:98:73:c2:27:a3:6f:fc:3a:33:
         b5:1b:ba:57:ef:c3:4c:8c:13:13:39:bd:4b:5b:d5:2d:17:f9:
         13:0d:13:6d:89:35:a4:6b:cc:ba:8a:50:03:8e:c6:95:43:1a:
         3c:6e:c9:6d:0d:8b:af:25:09:5f:f0:e6:14:c4:cb:b8:a5:cc:
         cc:47:19:32:99:a0:7e:34:1c:a3:d0:dd:cd:01:52:3c:be:c7:
         e5:ea:6c:96:36:a6:60:6f:5d:fd:c9:7a:04:23:0a:3b:bb:e7:
         2c:e4:ac:4c:bb:00:dc:2a:88:b2:42:e1:a6:2e:41:39:0c:95:
         1e:60:db:7b:46:2a:47:e1:37:c6:ae:57:e3:9e:6d:b3:94:fd:
         d3:97:7a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:25 2025 by rpki-client