Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
File:                     gC-luYQiYYMgG3AVlrA2iifKkZY.mft (raw, json)
Hash identifier:          cRVRmvtt/cthN8+uhA5AY3/qia2d17fVIFyaTq1BneU=
Subject key identifier:   D1:2C:F8:EA:AE:C2:B5:16:A1:8F:38:D6:DD:98:F9:CE:79:85:90:6C
Authority key identifier: 80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
Certificate issuer:       /CN=802fa5b984226183201b701596b0368a27ca9196
Certificate serial:       019747E7982EF4D15264B5B152DCF6177993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
Manifest number:          0718
Signing time:             Sat 07 Jun 2025 01:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:49 +0000
Files and hashes:         1: gC-luYQiYYMgG3AVlrA2iifKkZY.crl (hash: OD7z2MA2LREWmYRLgqvJ7V5q6OUczw8kDshwA05L4NM=)
                          2: iOg6nBqVzcdi2Akc2tXxbjOUGMU.roa (hash: 7kGU2Yz8c6ke6znrEKsk6Gl+moXJfyEygACJlbdXCNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:98:2e:f4:d1:52:64:b5:b1:52:dc:f6:17:79:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802fa5b984226183201b701596b0368a27ca9196
        Validity
            Not Before: Jun  7 01:00:49 2025 GMT
            Not After : Jun  8 01:00:49 2025 GMT
        Subject: CN=d12cf8eaaec2b516a18f38d6dd98f9ce7985906c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:14:d4:da:bb:5f:b4:cb:a6:fa:19:b9:46:92:
                    e4:7f:57:06:6a:c3:ad:df:4d:b9:d7:37:7f:fd:5e:
                    b8:9a:40:8d:22:e1:43:48:c4:75:58:c9:99:c4:ba:
                    8d:48:0b:3b:02:7a:41:e0:6e:bc:0d:62:e2:ca:48:
                    64:7a:a5:a0:c4:80:d2:79:8a:72:cb:dc:8f:a3:59:
                    cc:fd:1c:d2:77:d4:53:ce:51:15:14:1a:f2:e8:08:
                    88:ed:d8:be:7f:70:ed:d3:ee:68:ac:cd:f4:17:23:
                    7f:2e:85:fb:8d:1d:b1:13:ad:1d:bb:f8:ef:26:22:
                    cb:7a:69:cb:92:75:f5:fc:f1:46:a1:ca:61:d6:23:
                    b4:ef:ee:88:91:fb:12:7e:98:83:7d:8c:79:be:ef:
                    e8:d0:b1:b3:20:f2:a4:0c:03:32:d8:95:c8:62:71:
                    77:bd:eb:65:e0:71:b7:d1:8a:40:61:cb:2d:58:f9:
                    e6:ef:c4:67:ae:8c:76:b6:1e:a9:de:b9:bc:96:51:
                    16:3c:89:86:47:4d:6d:69:32:4b:f6:eb:17:08:c9:
                    32:79:5e:6a:94:37:e1:6f:88:c8:37:cd:66:8d:f6:
                    88:61:2e:79:22:2c:d9:e3:c8:37:d5:5b:63:5c:a0:
                    df:90:c0:36:32:2c:be:9b:a2:4f:d8:21:96:a5:be:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:F8:EA:AE:C2:B5:16:A1:8F:38:D6:DD:98:F9:CE:79:85:90:6C
            X509v3 Authority Key Identifier:
                keyid:80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:62:98:09:93:7b:1c:79:68:21:f9:05:07:b3:cb:e9:a6:47:
         2f:77:e8:31:b2:00:d1:ac:76:f0:2d:fc:f0:54:e1:a1:3c:07:
         d4:de:7b:14:2a:4f:94:0b:b7:53:d9:bd:fa:7b:f3:a7:c6:94:
         01:f7:9f:ad:d1:58:4f:83:24:e5:32:cd:36:99:60:e7:ec:97:
         e4:f8:ad:4e:d1:66:ca:27:38:b2:19:92:4d:3f:47:81:50:4b:
         2b:b7:74:ab:b5:68:68:e0:86:c0:8e:bf:ad:41:70:2f:91:90:
         78:16:a6:9f:29:19:70:09:31:60:7c:24:26:89:5f:ee:59:7d:
         b5:f0:a0:9c:62:89:ca:c0:69:25:e0:0b:b7:7e:e2:07:35:3f:
         72:09:ec:68:ef:cf:1b:be:07:53:ab:bb:f6:39:8f:54:6b:97:
         62:e0:d1:92:ba:2a:bf:ff:88:0e:8a:cd:1d:a6:6c:21:05:cc:
         87:8e:5a:52:b9:88:43:0e:e3:02:21:28:30:aa:4c:67:28:99:
         07:7c:43:94:92:94:34:ad:11:81:40:4a:74:df:aa:2c:7f:b5:
         35:14:ae:f5:e4:33:46:ba:0a:d9:2f:cc:73:c7:fa:28:45:67:
         53:3b:0d:80:96:7d:39:57:dd:f8:00:e0:f5:81:a1:64:9d:ef:
         fe:65:31:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:30:47 2025 by rpki-client