Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File:                     Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier:          L2tI2kz+RlauQpxJM43EzPBZgR9lp0M8L+7OUGMRKMI=
Subject key identifier:   82:05:D8:1B:54:01:F3:E7:1E:15:ED:30:72:C0:30:AF:BA:4F:C3:A4
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       01974AE90110DEA5D445C29A44BCBEE2002B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number:          1581
Signing time:             Sat 07 Jun 2025 15:01:13 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:13 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:13 +0000
Files and hashes:         1: FPpOTBKmvHdioInyAceH2PiTSvg.roa (hash: 7KPVyyz4s0tMlqQlKNiyZSMIJyFa//iS/eNcNHIUsks=)
                          2: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: Nw338gbgn4dmkV1Czv/iQmo0JQUEZJksd3YZ37KHqJo=)
                          3: YUvzYRFbDZwpo5_LDw6OQYXrOWU.roa (hash: A9tNEkwBv00N9f8wPpHIeu7SSAIiBzAHZmfokT+2re4=)
                          4: fbMdnuR0es_HjgTaYkDoz6AE4eQ.roa (hash: b27haQtyNO61SdNpnuLEVI2t6aVsy/NGgbKBT4i0JIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e9:01:10:de:a5:d4:45:c2:9a:44:bc:be:e2:00:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: Jun  7 15:01:13 2025 GMT
            Not After : Jun  8 15:01:13 2025 GMT
        Subject: CN=8205d81b5401f3e71e15ed3072c030afba4fc3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:76:05:58:36:84:4e:5b:5c:50:ad:62:34:
                    c6:75:5e:07:66:60:e1:fe:fc:ca:5f:06:59:b6:f1:
                    59:66:17:b5:8f:0b:6c:e6:3d:73:20:1b:1a:db:12:
                    77:77:0c:ed:b6:55:d8:27:72:c9:0c:34:e6:e9:c1:
                    db:15:20:f8:65:f8:bc:a6:aa:50:fd:3e:e8:c3:bb:
                    d1:e5:69:e9:23:f1:bf:58:f9:4f:fd:16:02:46:75:
                    32:c1:f7:9e:9a:9a:16:13:25:18:1e:6b:b0:99:67:
                    de:97:6e:85:ce:8b:c2:a0:65:29:a4:25:46:6b:35:
                    60:ac:eb:b4:fb:17:4e:30:aa:5e:86:7b:d0:45:3a:
                    01:0b:6c:39:22:d8:f0:6a:3f:20:30:37:d5:9f:3c:
                    fd:38:b2:25:47:19:b8:a1:a5:ca:22:95:e1:d7:72:
                    2c:32:fd:bf:45:c6:c4:22:dd:31:3b:b8:4c:37:94:
                    6d:6f:6c:da:a6:d4:61:9b:02:7e:34:b4:59:30:5c:
                    74:df:e4:de:28:56:76:7a:3b:57:f1:9c:a9:78:d7:
                    de:0b:c1:08:b8:82:f5:93:67:66:62:68:d8:53:8a:
                    05:44:08:01:43:6a:20:c4:fd:c2:3b:55:33:6d:c5:
                    68:a5:e6:8f:70:61:c2:f3:2e:5d:4a:2c:0b:51:bf:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:05:D8:1B:54:01:F3:E7:1E:15:ED:30:72:C0:30:AF:BA:4F:C3:A4
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2b:df:19:10:82:1f:9d:ba:a3:0e:33:62:4b:d1:b2:f2:1c:
         24:7f:49:fb:24:64:8c:5f:f4:f3:e4:65:0f:75:04:b0:f5:d0:
         40:4c:be:54:be:05:88:c0:e5:d0:c9:95:2e:82:38:b0:af:c6:
         d0:35:6d:d8:b9:08:b9:a2:86:44:5a:84:ae:07:e3:92:28:46:
         4a:6b:f1:8b:cb:a3:6c:5a:8b:7f:49:b3:c8:d1:fa:b8:f2:80:
         d7:d3:db:b4:09:c8:b3:59:a7:e7:05:bd:79:6b:44:78:7d:a0:
         a5:30:02:65:4b:45:54:b6:9c:4e:fe:28:3f:a7:87:20:86:35:
         de:5f:d3:aa:6e:ce:89:90:2e:95:47:92:35:2a:4d:4c:25:d0:
         1d:19:5a:dc:1f:b2:e0:6e:7a:5d:bf:d6:5c:d9:57:ef:50:d2:
         5b:20:f0:c1:86:f3:56:7a:f1:d7:1b:d8:47:62:48:a4:bb:f0:
         6b:ff:c8:c4:82:dd:3c:4b:58:94:95:56:e7:a5:5e:22:8e:21:
         bd:33:7f:aa:b2:3b:5b:d2:e1:8c:9e:6a:4a:e1:2d:52:90:aa:
         78:6f:96:49:21:fb:d8:67:4d:2c:cb:d0:f2:34:e0:59:de:b2:
         02:9b:ce:6e:fc:c8:1e:ca:81:51:d1:18:db:11:6e:28:ae:c7:
         16:18:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:51 2025 by rpki-client