Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
File:                     GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json)
Hash identifier:          j3LP1D9k6vxGJskCwLreLLQ/5I5spHzF40wbOcfX2OI=
Subject key identifier:   D0:A2:B5:D7:B5:CE:9A:77:29:D3:32:6A:09:2E:2E:AC:90:18:BC:0A
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Certificate issuer:       /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial:       0196488F3311F9DA88DA6A3798B0D106E6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
Manifest number:          14FA
Signing time:             Fri 18 Apr 2025 11:01:06 +0000
Manifest this update:     Fri 18 Apr 2025 11:01:06 +0000
Manifest next update:     Sat 19 Apr 2025 11:01:06 +0000
Files and hashes:         1: C4rk1AoVqjrEH7_zmAJ_svnQgQc.roa (hash: 6jKvc5VnDLqI6HwXgEfuuUIvLcH534eewNyGGwZxdKE=)
                          2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: FXFVgb4ANWPPz3FM637u2Lr+Yjethyh400A0tMzsYy4=)
                          3: O6hC_E85D-gML2iRrUU2b5ibO0s.roa (hash: F14l9yzbuoxNtXqq8ma/CyqbNDJtpPWFpWAVl55tljo=)
                          4: RHkq_2B9aSMLyQYFQ9FNfjZTBIs.roa (hash: H0KL1J+ki0U19ojTdr1t7y2YJD+4cxGfJhTHY1ROEwg=)
                          5: kb5y1-Zbrkx7MXP5JuLQmArjfW8.roa (hash: HnOpO7aMn3/CAKcuytA4hwDqnkBIYl9jaOvFbzTHg2g=)
                          6: pZmFD-f-bh4pXBFGtCsTwrl3XA0.roa (hash: QUgueN8QgFQMRwHuvSGXOdyJNx8a23P2PHJjPzXyVW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:8f:33:11:f9:da:88:da:6a:37:98:b0:d1:06:e6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
        Validity
            Not Before: Apr 18 11:01:06 2025 GMT
            Not After : Apr 19 11:01:06 2025 GMT
        Subject: CN=d0a2b5d7b5ce9a7729d3326a092e2eac9018bc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:ce:5d:b8:03:69:07:6d:7a:2d:a2:13:65:
                    f6:b5:ed:ad:ba:88:19:b5:fe:5d:c7:66:24:7d:4e:
                    a5:d2:7f:b1:c0:72:50:f7:f1:bd:8a:60:8d:ad:cc:
                    b5:5a:06:19:0c:b9:cd:82:a3:22:bf:17:19:f9:d4:
                    a4:e7:23:19:74:33:16:b1:ce:57:5c:c9:3d:65:6f:
                    2a:63:ba:e6:c0:f7:eb:1e:be:fb:97:59:09:97:4c:
                    95:39:7b:f7:77:07:7e:ed:c6:a8:64:7b:15:d0:dd:
                    01:f4:6d:04:5f:b9:05:0c:78:83:06:ce:95:50:d3:
                    38:94:29:e1:06:c0:0e:12:39:a3:cf:b3:82:b4:76:
                    63:76:1d:8d:5f:a7:dd:df:0c:ec:09:5b:0c:83:8b:
                    f7:77:0d:52:51:ae:b9:c6:a6:54:5d:4f:7d:03:e5:
                    f1:f9:4c:f8:12:7c:d4:42:7d:6e:a8:98:a3:f8:5d:
                    78:6a:5e:75:56:37:cf:77:24:56:9e:74:c5:8f:53:
                    bb:f3:17:74:96:b8:4e:ba:7d:b8:2f:3d:33:83:6b:
                    c4:38:cc:82:2e:d5:c3:4b:19:1f:a5:69:4e:b3:56:
                    b9:14:bd:f9:60:bf:72:89:9d:f7:c9:d7:33:61:e7:
                    ed:f4:c0:05:15:22:00:f8:c5:c2:bf:68:96:06:25:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:B5:D7:B5:CE:9A:77:29:D3:32:6A:09:2E:2E:AC:90:18:BC:0A
            X509v3 Authority Key Identifier:
                keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:79:5d:0e:6b:ab:d9:c7:c7:b7:d7:2e:c6:a7:b5:de:f5:5d:
         cb:1e:62:10:65:64:fb:8c:9b:d4:83:7f:ad:86:79:7b:77:78:
         ab:1f:eb:8d:ca:ab:30:ff:07:67:ad:56:d8:15:32:13:b5:5d:
         08:1f:25:77:88:b5:2b:52:74:3d:b4:13:d2:a9:98:fa:78:69:
         7a:0c:83:0f:8f:11:fc:cc:7b:2b:af:75:66:c5:bb:e9:b8:68:
         20:c8:13:c5:c0:63:84:3e:17:97:a9:8d:43:3b:31:85:e2:c9:
         ae:71:d9:e3:80:e3:a3:62:10:f5:bc:eb:f2:79:eb:02:e9:a6:
         0e:0c:4a:fd:97:8b:bc:87:aa:e8:d8:99:93:03:ea:d7:63:49:
         55:a8:2e:21:e4:67:6f:2f:7a:92:e2:a2:7f:bd:e8:15:30:be:
         4b:5e:91:e3:fd:3e:e9:5d:95:21:af:57:71:33:b5:c4:b9:5f:
         32:41:46:54:f5:30:08:f7:75:42:08:19:99:e1:c8:96:55:64:
         61:45:bc:8e:42:b1:ee:00:65:18:12:cd:ef:1a:f3:e6:82:2e:
         11:0a:39:8d:37:c2:26:55:04:98:27:ed:37:b4:34:48:31:a9:
         d1:d3:6e:d0:7c:7f:80:fa:9b:d4:54:4c:d8:c0:c1:5f:92:06:
         01:93:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:09:41 2025 by rpki-client