Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File:                     G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier:          IDLXb/BNNXaEQivvPpuFKee/yQIZJnF97tNpMpUdsVw=
Subject key identifier:   F3:C0:20:99:85:10:71:A8:55:D9:6A:85:01:FB:1E:F8:36:BA:7E:B7
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer:       /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial:       019748C2DCA56831B5FA1E67B370C1386DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number:          077E
Signing time:             Sat 07 Jun 2025 05:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:19 +0000
Files and hashes:         1: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: Y1dWNCGNNA6F/sbDrELpBlmJeITTVWKKS+Kd5LcmBng=)
                          2: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (hash: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:dc:a5:68:31:b5:fa:1e:67:b3:70:c1:38:6d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
        Validity
            Not Before: Jun  7 05:00:19 2025 GMT
            Not After : Jun  8 05:00:19 2025 GMT
        Subject: CN=f3c02099851071a855d96a8501fb1ef836ba7eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:9d:58:9c:e4:e3:04:c8:fb:dc:33:b9:2c:
                    38:2f:95:2e:3f:d1:f1:4b:c4:4f:1d:9b:d0:e2:9a:
                    36:df:9f:a9:01:ee:ae:67:ff:f1:b5:11:f6:47:09:
                    9e:5a:e1:04:18:47:42:89:92:66:55:d6:3a:35:31:
                    75:cc:f8:cf:30:d4:af:a5:f7:c3:db:7b:d2:a4:8f:
                    b8:ba:22:b0:dc:b3:a2:be:47:ba:9e:fe:6a:38:de:
                    1d:6a:e1:82:8b:f5:97:0b:67:a7:41:e0:4d:c7:ba:
                    b9:7f:87:17:bd:f7:98:72:0b:5a:92:53:44:06:a7:
                    0e:c6:ce:9a:c5:a9:45:91:76:79:1d:e2:91:4f:6d:
                    46:87:6e:0e:d6:e7:1c:1c:8d:c5:93:20:e0:8f:ee:
                    95:bb:69:dd:c0:19:60:1a:48:da:3f:24:5b:8b:73:
                    9b:51:ff:ae:94:f4:1f:f1:33:e1:b4:f1:f6:3c:cf:
                    7e:4c:6d:c1:9f:dc:25:de:2f:09:a3:86:51:59:8e:
                    2e:c0:28:03:a8:7f:d5:21:3f:60:32:b4:a8:4a:f2:
                    e9:d0:b5:76:45:a3:15:7c:e7:dc:61:ff:0e:ab:f4:
                    9e:27:74:48:36:9c:bf:40:0c:e7:30:08:04:90:22:
                    96:55:81:71:0d:2a:7a:1d:59:89:46:13:4e:8f:16:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:20:99:85:10:71:A8:55:D9:6A:85:01:FB:1E:F8:36:BA:7E:B7
            X509v3 Authority Key Identifier:
                keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:02:cc:41:c4:b0:bb:9b:c7:66:3a:d9:e1:f6:4d:bb:05:21:
         fb:d0:2e:ce:86:37:e9:ee:a2:ec:4e:33:3e:4c:5b:2f:6d:bd:
         28:79:e0:aa:b5:94:8e:02:64:b3:b6:eb:72:a0:dc:0e:0a:09:
         48:7d:a4:87:b2:b7:84:2d:81:d6:60:a7:26:7b:b9:c8:b4:e5:
         6e:e2:ef:d0:1e:ab:b8:8a:11:6c:55:df:2b:26:94:09:10:b1:
         7f:6c:ef:3e:4c:c3:6c:ab:47:32:54:1b:e5:04:34:ba:67:95:
         3f:00:0a:37:2e:06:f8:69:c4:c1:a0:c4:85:b3:35:c6:f3:84:
         b4:25:27:e8:de:d1:3a:2c:a1:bf:82:7c:1c:98:f5:9f:a3:58:
         e7:9d:de:9a:2f:f9:fb:06:b1:73:2a:8b:60:58:8f:30:41:e5:
         7b:4a:05:c3:93:0b:28:93:46:a4:47:59:0e:1e:26:c8:35:d5:
         98:19:0d:2a:ad:cc:f8:98:ba:2c:59:93:48:49:fe:8e:ad:5e:
         2c:8f:7c:48:df:c9:88:b6:34:cb:eb:f6:5e:34:09:b5:72:59:
         c5:4b:95:68:1a:7e:4d:ee:12:bb:36:b2:c3:be:53:c3:34:18:
         0e:8c:2e:76:61:51:5c:af:11:26:36:eb:b7:6a:b7:18:6a:d3:
         30:58:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:34:32 2025 by rpki-client