Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File:                     GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier:          kMhTkhJqusUyYVAlca96+KDHmFI8j0Dx4YikAedIh0c=
Subject key identifier:   7E:6A:F5:08:C1:B6:BB:E8:F4:65:F0:4D:3E:09:40:C7:65:1E:89:99
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer:       /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial:       01975948B1B815B24CDF980487A78BDE7EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number:          0894
Signing time:             Tue 10 Jun 2025 10:00:25 +0000
Manifest this update:     Tue 10 Jun 2025 10:00:25 +0000
Manifest next update:     Wed 11 Jun 2025 10:00:25 +0000
Files and hashes:         1: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: cWuU+hmXglCrtS4UgVeuhqaMVf5bZftW3NXtkmXVCnk=)
                          2: JLeYM1Nb1WkxGedHLrl3D2YAcD0.roa (hash: kpcTVdbw29GtZxZaBOoPfJn9eSPlvRnFiHJuCzaGNU4=)
                          3: izbCDxefHi81Ceh8v70jil8PjrA.roa (hash: G81Vq+SeFhUUiPynuXGPGqpCxUEFG0haFucomHcGaT8=)
                          4: uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa (hash: knG2zE+cphfPly9s92WP/7hjIDgEXmoUhOUrwgfF5vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:48:b1:b8:15:b2:4c:df:98:04:87:a7:8b:de:7e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
        Validity
            Not Before: Jun 10 10:00:25 2025 GMT
            Not After : Jun 11 10:00:25 2025 GMT
        Subject: CN=7e6af508c1b6bbe8f465f04d3e0940c7651e8999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:38:e1:47:e3:77:fa:6e:c8:35:96:ab:e4:
                    4d:a1:46:a7:8d:3f:94:d1:b1:3b:05:0e:94:ab:e6:
                    b6:fc:83:e6:f1:13:4a:24:9a:dc:25:78:f6:ab:ef:
                    8d:5d:ee:2d:4f:fc:7f:3d:44:ec:ce:2a:84:b3:34:
                    07:58:af:81:aa:a5:e8:f3:47:85:7a:6e:ab:bd:f7:
                    ad:e5:97:c4:db:ec:dd:22:82:a8:e9:f7:42:cc:91:
                    c5:42:bc:de:80:83:f2:c8:5a:12:5e:38:5f:e8:fc:
                    87:1f:9c:c6:8b:66:74:b3:8b:1d:bf:46:15:f5:b0:
                    7f:f6:c5:93:2d:c4:26:78:66:41:8a:06:be:a1:d1:
                    32:6e:e4:8c:61:6a:6e:11:61:e1:0f:20:79:71:3e:
                    2e:f0:d1:a9:fe:c6:58:c4:74:0d:4d:7c:fe:2d:94:
                    d9:54:8f:8d:5d:1d:66:36:b6:fc:01:d4:ab:4c:d4:
                    20:56:9c:93:44:26:ac:30:4a:99:12:2e:23:94:ae:
                    90:a2:1b:c5:ad:39:19:e3:b3:ad:b4:d5:65:87:bd:
                    45:2a:c2:fd:7f:d1:ac:b1:f4:3b:90:9b:99:9e:3c:
                    78:5b:72:1e:64:93:c4:5b:92:91:41:ae:5b:42:b2:
                    83:b4:47:42:aa:6a:76:48:f7:06:3e:28:43:b8:c9:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:F5:08:C1:B6:BB:E8:F4:65:F0:4D:3E:09:40:C7:65:1E:89:99
            X509v3 Authority Key Identifier:
                keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:06:02:d0:a6:6d:cc:80:cb:84:0f:c5:7e:0a:b5:ba:4f:da:
         b5:c8:d5:f9:1e:1b:cd:82:de:b2:df:35:51:87:14:3c:9d:e2:
         c9:d3:ad:f4:de:5a:a3:72:39:54:4c:1b:b4:cf:f0:f7:f1:41:
         c7:13:4e:0b:c8:9d:97:0e:10:f3:29:ab:93:2b:eb:29:29:e9:
         2b:05:bd:79:dc:fc:ee:c3:ef:1c:93:ce:d2:eb:f6:7e:ea:e1:
         83:8c:42:c2:53:ea:0a:4a:88:17:91:68:f8:a2:79:38:8d:56:
         8d:61:e6:77:07:2b:cd:d9:7d:22:31:54:84:68:33:96:33:fb:
         f1:bd:ec:32:dc:cf:5e:17:2d:42:83:0c:b4:5a:1c:02:f9:86:
         26:d3:3b:94:4e:fd:d1:72:b6:70:79:65:41:61:2d:b8:73:24:
         7c:3b:44:d9:bc:d3:0b:0e:4d:23:b6:2d:0e:40:5e:56:da:94:
         1e:f2:80:17:0d:b6:8c:d6:79:9f:04:da:5c:74:ef:e7:5a:90:
         8f:dd:ad:8d:8a:3e:e7:d4:31:53:0b:66:15:5c:b8:fa:4e:6b:
         ff:a2:67:77:7c:50:f5:75:79:d4:a4:e7:d0:80:6d:d7:38:8b:
         6a:6c:77:84:4d:f7:1f:c0:46:4e:65:a4:a4:0b:04:6d:a9:6d:
         b7:2a:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:15:31 2025 by rpki-client