Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File:                     gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier:          /9M4bsJYDWC6jp5P2We/futtbFWYYGPW3vhgODh5zn8=
Subject key identifier:   67:78:5C:A9:57:9B:27:09:95:8F:E2:91:AE:AB:B3:D3:5D:39:A3:E8
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer:       /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial:       0197507CF2717CC4250A8CCAA6441260C38A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number:          01CB
Signing time:             Sun 08 Jun 2025 17:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 17:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 17:00:55 +0000
Files and hashes:         1: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: elK9wsRlo4IyzZP4E96CsoebQx8Sq0GXOddrVc1rEM0=)
                          2: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (hash: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:7c:f2:71:7c:c4:25:0a:8c:ca:a6:44:12:60:c3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
        Validity
            Not Before: Jun  8 17:00:55 2025 GMT
            Not After : Jun  9 17:00:55 2025 GMT
        Subject: CN=67785ca9579b2709958fe291aeabb3d35d39a3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:ec:30:74:26:78:fb:9a:bd:88:6e:c2:6c:
                    8d:92:31:2d:ba:bd:fd:13:77:a8:71:92:2e:94:34:
                    e6:6d:14:19:88:27:2c:b4:b2:49:13:43:26:b9:79:
                    ad:83:71:d6:28:ee:f7:63:2d:23:48:1c:70:0d:b7:
                    bd:fc:4a:37:87:af:12:e2:f0:53:ba:18:2e:a0:d7:
                    87:08:b0:5e:04:20:a4:15:af:53:81:ec:8e:90:c2:
                    38:6e:0a:54:a5:65:34:b3:d4:f7:cd:d2:84:e1:d4:
                    b3:99:74:d2:d4:3b:22:c3:8d:3c:d5:29:7e:34:8e:
                    b7:eb:a7:4e:e7:de:f8:1e:7e:41:02:d5:02:b2:7a:
                    03:23:5c:30:6a:07:38:c9:8f:00:ca:5e:7c:6c:77:
                    c6:00:7f:04:ae:8d:0a:c1:35:cc:ff:9c:8a:34:a1:
                    59:2a:0a:dc:ac:e5:9c:e2:31:3e:98:1b:90:ec:55:
                    42:5e:b5:df:62:cd:2e:ca:f6:9e:fd:3d:16:b6:36:
                    82:01:49:58:f9:f0:c2:24:d0:5a:bc:a6:97:59:80:
                    3c:eb:7f:8a:5d:a2:d3:44:ae:e6:b2:2d:16:ed:6c:
                    7e:98:75:00:81:1c:43:06:e2:bf:91:31:51:b3:19:
                    01:8a:0a:9b:24:56:d7:cd:08:7d:24:8f:2c:eb:86:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:78:5C:A9:57:9B:27:09:95:8F:E2:91:AE:AB:B3:D3:5D:39:A3:E8
            X509v3 Authority Key Identifier:
                keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:03:b5:1a:d7:9b:bf:18:32:d2:0c:ad:a5:bd:c6:68:c0:03:
         88:82:06:12:8f:91:f4:57:92:05:49:96:df:2e:70:4b:d5:47:
         a9:69:f1:2e:a6:7e:c9:7a:62:d7:4c:10:fa:93:89:42:2e:f4:
         ce:0f:d2:39:61:36:f4:d0:d6:5c:b5:2f:7d:16:83:30:be:66:
         52:aa:6e:be:0c:77:72:22:36:d7:1e:9d:93:66:97:55:e5:6f:
         a1:d1:dc:13:e1:d6:a0:27:22:9c:74:91:58:e9:74:8e:f3:1b:
         52:c8:bf:15:95:40:d3:95:da:8e:8d:c7:e3:1a:39:27:7f:03:
         04:a1:ed:31:00:e6:80:ff:e9:78:fe:c5:27:3c:36:8b:25:5d:
         af:d3:dd:cf:44:0e:1a:1e:12:8d:ce:1a:17:8b:ff:58:63:05:
         32:52:d4:f4:56:75:17:60:f7:50:0c:53:f6:67:f0:eb:d1:3c:
         89:fb:a6:ec:c6:78:5f:22:e4:95:96:92:8d:54:5a:51:80:d9:
         dd:dc:e3:8e:bc:f7:b1:83:e6:86:57:c9:70:2c:9c:ea:24:5b:
         80:8c:30:6b:d2:0d:38:bb:d9:14:f1:f3:40:45:8c:1b:1f:90:
         3a:42:9f:c5:fc:39:c3:c6:73:f7:10:63:fa:bf:2b:2a:06:8f:
         13:94:f4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:39:25 2025 by rpki-client