Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
File:                     GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json)
Hash identifier:          6Vt8c2A7nqlCLUlEkxgp8R2kOMH5RIC6Wc0mH+GoQBc=
Subject key identifier:   30:9F:40:78:84:91:9F:BE:8B:B1:82:7B:C8:C3:FB:60:A7:1D:4F:36
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Certificate issuer:       /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial:       01974A0CACDE355069B4A4D06109C0C248A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 11:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:34 +0000
Files and hashes:         1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: OcZqE9EUm0YKlHLYR1tCIp8ChwEmhZULCucYekOBaOE=)
                          2: PgHBT14XbyMI_bDsD-5F89TwxvI.roa (hash: yY+dt31JYDSsLmacNs98NxKQjn/3/Xoq5ab4x7nUyV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:ac:de:35:50:69:b4:a4:d0:61:09:c0:c2:48:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
        Validity
            Not Before: Jun  7 11:00:34 2025 GMT
            Not After : Jun  8 11:00:34 2025 GMT
        Subject: CN=309f407884919fbe8bb1827bc8c3fb60a71d4f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:f8:a4:80:99:b2:05:3a:de:5b:72:02:c4:
                    1c:90:ad:78:08:fd:55:9f:cd:63:df:6d:04:b2:27:
                    fd:e9:7f:3c:3a:34:b9:df:f4:b6:bc:27:e4:c7:93:
                    93:20:93:bf:2e:aa:73:53:ef:45:04:61:46:e8:7f:
                    f5:b8:cb:77:db:25:15:0a:32:a5:0c:ac:3e:7d:21:
                    25:67:25:6d:41:2e:3d:b5:4a:9a:06:e8:51:ac:06:
                    a9:7d:2f:2e:17:41:92:6c:9a:66:22:59:d7:b7:60:
                    de:fd:aa:32:e5:22:29:96:68:a0:44:56:e1:87:fa:
                    87:ec:fc:14:b5:99:b7:32:fd:10:7a:d3:fd:80:88:
                    6f:9b:68:8f:af:aa:39:9d:ba:c3:2f:5c:98:c4:a0:
                    bd:ac:30:06:32:7f:c8:51:73:11:ee:35:a9:84:2c:
                    1d:4d:ae:c8:ab:da:88:1d:5a:d0:73:b2:ec:66:03:
                    81:5d:5d:25:ec:ad:70:57:e9:03:37:58:84:8b:0a:
                    8e:94:fd:a7:06:5b:f4:80:94:b5:f6:42:28:dd:5c:
                    84:e4:b6:ff:54:52:ba:67:18:26:1c:90:13:75:7a:
                    a0:d0:77:aa:51:9e:a0:14:cd:08:4c:a0:34:10:45:
                    bf:29:e7:52:dd:a3:9d:f9:74:4b:e8:33:e6:0a:6d:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9F:40:78:84:91:9F:BE:8B:B1:82:7B:C8:C3:FB:60:A7:1D:4F:36
            X509v3 Authority Key Identifier:
                keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:24:09:b7:6f:51:d3:4c:13:c1:98:39:11:8d:6a:9d:c4:cb:
         57:3a:20:25:bc:f3:3d:95:10:f6:80:b8:e5:d6:07:48:2a:03:
         15:13:32:19:54:3c:12:00:0a:b0:31:7e:09:d7:77:4c:6f:11:
         71:de:6b:2f:2a:45:31:a7:3d:59:67:cd:4d:35:22:32:7f:0f:
         7c:c6:b6:18:2b:13:eb:84:0a:f5:e2:d5:3d:15:1a:43:ab:9f:
         7c:dd:6d:b4:3f:cf:da:34:a8:6c:8a:68:ac:54:d0:ab:29:1f:
         70:11:9f:20:46:7a:b1:7b:61:0e:27:87:33:da:aa:41:77:76:
         d4:46:33:43:49:78:09:6f:41:c2:b8:d6:64:aa:cd:e9:fc:97:
         0c:1b:9e:99:20:45:e9:58:e6:5b:a4:a4:b4:a7:2d:da:40:0d:
         27:fc:d1:ec:92:ee:d7:ca:31:d7:19:cb:cc:28:d0:01:6e:eb:
         6d:cf:79:c6:6f:95:4a:32:21:f3:3f:99:cc:96:43:b2:60:79:
         e5:69:ad:a1:34:ce:08:7a:f6:50:80:20:0f:4a:51:40:34:df:
         ce:2f:9c:cd:83:b0:fc:1b:95:f4:3a:7e:08:da:e0:93:51:33:
         36:15:54:85:cf:4a:bf:a1:e7:c7:f9:01:43:59:98:fe:fb:8f:
         19:d1:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:36 2025 by rpki-client