Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File:                     GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier:          hbG3hJPHGJLUxxEry2PvgFFiNpFqf+5yMM3p6g4A6kI=
Subject key identifier:   DC:54:79:9D:10:D2:71:35:21:98:C1:0B:46:36:7E:05:DF:F1:57:F3
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer:       /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial:       019649A265FF904D6E3A23D2B7BFA4F0C3D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number:          1317
Signing time:             Fri 18 Apr 2025 16:01:41 +0000
Manifest this update:     Fri 18 Apr 2025 16:01:41 +0000
Manifest next update:     Sat 19 Apr 2025 16:01:41 +0000
Files and hashes:         1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: g8YQDqXgpnCFZPPXK0EUvJGb6Co2TuKLfIp4wwicE3I=)
                          2: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (hash: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a2:65:ff:90:4d:6e:3a:23:d2:b7:bf:a4:f0:c3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
        Validity
            Not Before: Apr 18 16:01:41 2025 GMT
            Not After : Apr 19 16:01:41 2025 GMT
        Subject: CN=dc54799d10d271352198c10b46367e05dff157f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:49:ab:ea:a3:99:de:fe:0f:42:3d:ed:46:
                    0f:7d:6c:80:c7:63:5f:26:8d:17:cf:96:b1:aa:b9:
                    ec:a2:96:54:60:de:98:2a:c1:4c:3b:59:15:52:ec:
                    1e:06:72:3f:ce:67:5e:f7:ac:57:5c:b5:9c:b2:2d:
                    0c:a2:d0:cb:ca:d0:e3:9d:41:01:07:0d:83:09:d8:
                    11:cc:21:01:a0:d9:69:f2:76:5d:d9:52:7f:65:ff:
                    03:30:73:ac:35:65:7c:d1:fa:f5:8f:f4:8a:1c:97:
                    81:27:3d:4b:8a:e8:91:1f:2a:93:6d:08:58:fc:48:
                    e4:43:9b:f4:8f:6e:df:fc:91:73:4a:17:15:74:d7:
                    7c:44:84:28:90:16:07:34:dd:56:9c:3e:a5:5c:21:
                    72:52:56:5c:0c:e7:b1:91:ee:93:de:30:2d:af:78:
                    90:51:62:30:a7:5b:98:59:39:75:44:08:2f:a6:c4:
                    77:da:9a:17:f5:a1:60:a1:86:da:be:18:f5:b1:69:
                    9b:23:53:c3:92:30:33:ee:61:4b:90:6a:c2:3f:b5:
                    c0:d5:be:aa:9b:76:41:60:e2:a7:9d:cb:65:8e:d6:
                    27:8c:8f:48:6e:b9:ab:6c:94:ca:e9:65:2c:d7:38:
                    a4:ce:8e:7c:5f:62:60:dc:fb:94:c4:ad:f6:38:b2:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:54:79:9D:10:D2:71:35:21:98:C1:0B:46:36:7E:05:DF:F1:57:F3
            X509v3 Authority Key Identifier:
                keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:10:a3:61:1a:4c:a6:46:77:58:6e:cc:22:7d:c5:ae:44:48:
         44:fd:aa:3b:2c:dc:15:45:de:09:22:b2:0a:41:d1:48:44:97:
         2e:c1:3d:43:e9:9b:66:0e:70:70:2d:d9:e9:37:91:88:5a:72:
         a0:db:cd:ce:e2:5a:4e:bc:89:9e:ff:bf:2a:8b:8a:57:5c:9f:
         34:40:be:c5:f9:60:11:8f:9c:37:67:37:74:3b:77:0f:ee:64:
         0f:6a:69:a7:d0:eb:5c:7c:1b:b4:7e:91:f4:97:82:ac:80:3b:
         f3:e7:c7:3f:d2:76:80:60:d5:0f:b9:5e:d0:fb:58:fa:49:71:
         55:56:76:60:b5:8d:45:5f:dd:a8:0a:53:24:d2:8c:67:35:49:
         f6:e9:19:4e:0c:db:66:6c:73:b0:60:f2:53:98:2d:1a:63:90:
         4d:5a:94:27:cf:91:58:44:a4:69:fd:de:d9:a6:ae:89:a8:f6:
         a5:d6:20:a3:22:e7:4b:00:12:09:10:7f:6f:01:94:00:7f:3c:
         d9:25:fd:86:29:e7:a1:fb:a2:0d:c6:2c:c5:dd:df:31:ea:c4:
         17:5e:b0:36:64:b1:4d:5d:0e:9d:a9:8f:6e:a2:8d:80:f8:17:
         b5:9c:ef:81:12:eb:48:9e:8e:17:c5:1b:19:64:2d:9a:76:e4:
         35:98:cb:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJomX/kE1uOiPSt7+k8MPTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MjQwMDg0MTVjYTE4NWI4ZWRkZWRjMmRjZGQ4ZDA5NDQx
YTc3OTQwHhcNMjUwNDE4MTYwMTQxWhcNMjUwNDE5MTYwMTQxWjAzMTEwLwYDVQQD
EyhkYzU0Nzk5ZDEwZDI3MTM1MjE5OGMxMGI0NjM2N2UwNWRmZjE1N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS9Jq+qjmd7+D0I97UYPfWyAx2Nf
Jo0Xz5axqrnsopZUYN6YKsFMO1kVUuweBnI/zmde96xXXLWcsi0MotDLytDjnUEB
Bw2DCdgRzCEBoNlp8nZd2VJ/Zf8DMHOsNWV80fr1j/SKHJeBJz1LiuiRHyqTbQhY
/EjkQ5v0j27f/JFzShcVdNd8RIQokBYHNN1WnD6lXCFyUlZcDOexke6T3jAtr3iQ
UWIwp1uYWTl1RAgvpsR32poX9aFgoYbavhj1sWmbI1PDkjAz7mFLkGrCP7XA1b6q
m3ZBYOKnnctljtYnjI9IbrmrbJTK6WUs1zikzo58X2Jg3PuUxK32OLKkiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxUeZ0Q0nE1IZjBC0Y2fgXf8VfzMB8GA1UdIwQY
MBaAFBkkAIQVyhhbjt3twtzdjQlEGneUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQt
N2E4MGVkNjIxNzgxLzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQtN2E4MGVkNjIxNzgx
LzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxCjYRpM
pkZ3WG7MIn3FrkRIRP2qOyzcFUXeCSKyCkHRSESXLsE9Q+mbZg5wcC3Z6TeRiFpy
oNvNzuJaTryJnv+/KouKV1yfNEC+xflgEY+cN2c3dDt3D+5kD2ppp9DrXHwbtH6R
9JeCrIA78+fHP9J2gGDVD7le0PtY+klxVVZ2YLWNRV/dqApTJNKMZzVJ9ukZTgzb
ZmxzsGDyU5gtGmOQTVqUJ8+RWESkaf3e2aauiaj2pdYgoyLnSwASCRB/bwGUAH88
2SX9hinnofuiDcYsxd3fMerEF16wNmSxTV0OnamPbqKNgPgXtZzvgRLrSJ6OF8Ub
GWQtmnbkNZjLHw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:39 2025 by rpki-client