Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
File:                     GtXRdMu0aq-GVVuA4XczMbhwtWg.mft (raw, json)
Hash identifier:          jP7eb/fpTCrMWs9lf2ZMDQkZ1GbzUcmrycL9Q8RQRSs=
Subject key identifier:   7F:70:33:29:74:48:54:55:6D:4C:24:49:8F:53:6B:28:3B:4E:76:E9
Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
Certificate issuer:       /CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Certificate serial:       01958B4D578C5183D08AF03BD1D99D2EB654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
Manifest number:          0350
Signing time:             Wed 12 Mar 2025 17:00:56 +0000
Manifest this update:     Wed 12 Mar 2025 17:00:56 +0000
Manifest next update:     Thu 13 Mar 2025 17:00:56 +0000
Files and hashes:         1: 9dcg4kop7SgWnE6_RqxuTw6E4S0.roa (hash: 0Gyw3aRec61kP8ssDusbhrk3Tfc+FxYebdPIc+4lPH0=)
                          2: BCx9uHR447EqnUAT6LDXDmc-U64.roa (hash: uKePdL/bKCVHy8Q2jDMnzQQFWnYFjJHWmlJeT5g86S8=)
                          3: GtXRdMu0aq-GVVuA4XczMbhwtWg.crl (hash: dymBJ+xTz2WwaAjL8uDF5XbawNxfThb6WrcQ/zba5uQ=)
                          4: XUhnIv1VyzEH-O2IlJPEOJmVv7s.roa (hash: ia3ApPA9xBWk3etwJmYP71gyRoYwwrPnhqVB0ZSnJZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:57:8c:51:83:d0:8a:f0:3b:d1:d9:9d:2e:b6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568
        Validity
            Not Before: Mar 12 17:00:56 2025 GMT
            Not After : Mar 13 17:00:56 2025 GMT
        Subject: CN=7f703329744854556d4c24498f536b283b4e76e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:fa:95:9e:01:28:24:9f:7b:f2:26:51:ee:
                    c1:c5:2d:13:e0:c1:6d:35:dd:26:43:47:1d:1c:5d:
                    96:2c:fe:0a:3c:b1:38:83:c5:7e:01:2e:bc:e3:7b:
                    f5:c0:4b:0c:ad:ad:10:70:02:32:30:0e:c9:25:37:
                    d6:2f:33:ce:da:75:be:a7:45:1c:57:ac:96:63:c5:
                    8f:24:a0:0f:87:dd:05:35:29:70:09:e7:e5:f8:7c:
                    39:a7:12:3f:3d:a9:d0:fd:92:77:d5:21:76:6e:2a:
                    2d:6d:d6:e3:bd:ad:ed:b4:bb:0f:d0:0a:06:9a:c1:
                    82:4a:5b:29:4d:3f:99:6f:78:47:c2:57:6e:32:aa:
                    0c:ca:06:c1:bd:81:0d:4d:b3:53:9f:e4:c5:93:b3:
                    5b:a9:58:d3:9f:2b:b0:f3:43:dc:d9:d3:3c:c6:60:
                    71:40:cc:bf:15:11:6b:54:35:e4:6a:e6:94:19:74:
                    98:e5:47:f9:88:60:f9:c0:1b:ee:66:dd:06:53:ad:
                    cb:4e:68:bf:18:78:ea:8f:75:d6:92:69:f4:27:ad:
                    29:fe:f5:3c:8d:a6:8d:cc:d3:b4:9e:63:1f:77:1f:
                    9a:e8:dd:b9:3f:fb:dd:9c:02:85:33:ed:ec:a5:4c:
                    1e:b4:b5:95:0a:58:84:57:04:26:90:c1:ea:79:fe:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:70:33:29:74:48:54:55:6D:4C:24:49:8F:53:6B:28:3B:4E:76:E9
            X509v3 Authority Key Identifier:
                keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:75:97:5e:ab:40:d6:5f:87:dc:28:88:07:00:93:ad:93:80:
         24:35:f0:c7:33:28:34:80:42:31:cb:e9:f8:f8:b9:5b:f7:05:
         df:0c:87:12:e5:0e:1f:ff:37:11:35:ba:32:fd:1f:7c:c2:02:
         90:c0:72:cf:c6:80:8e:18:43:29:10:55:af:6b:27:e7:bf:fd:
         a7:0f:a1:35:4f:5f:4e:fe:09:37:fa:09:85:38:25:7f:25:9b:
         5d:68:73:93:37:80:7a:78:a5:d3:07:88:01:d8:82:f3:75:d2:
         04:e2:48:c8:f0:b8:b5:ea:cb:f8:fa:a8:98:e4:f7:d0:90:aa:
         c4:6c:a3:59:d5:ac:6b:45:52:55:bd:e6:82:7a:74:a4:f4:04:
         56:a8:79:20:d9:65:00:90:28:1d:8b:84:d7:95:50:28:21:16:
         6d:b9:12:2d:63:db:e2:c1:4c:5a:84:c2:21:ed:ae:f6:45:71:
         a8:b4:1d:3f:88:35:3b:51:14:09:23:80:44:f7:0b:58:1f:14:
         2b:2d:06:2f:2e:0c:38:8c:64:e1:b3:f9:60:da:bf:b9:d7:a1:
         ee:7c:53:2f:2a:0f:d3:8a:05:9b:47:32:94:1b:eb:e2:01:2c:
         44:ef:e9:9a:f6:90:03:61:63:44:f1:cd:de:d0:eb:a9:08:4e:
         cf:91:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:21 2025 by rpki-client