Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File:                     G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier:          M15Ld+lKylc7br/f3Jf9bXUWF0ZBlhG5g+g/DCLMmcs=
Subject key identifier:   B6:7F:77:30:7E:5B:4C:BB:CE:B9:FE:B8:31:D5:5B:1F:30:A7:32:9E
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer:       /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial:       01974EFC2EEF7DBBF7FDAE77B956CBBCA208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number:          101F
Signing time:             Sun 08 Jun 2025 10:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:39 +0000
Files and hashes:         1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
                          2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: k2Hkz+sl+GRGFQjF03qeng0175wyIZLz0gSCd0wNVAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:2e:ef:7d:bb:f7:fd:ae:77:b9:56:cb:bc:a2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
        Validity
            Not Before: Jun  8 10:00:39 2025 GMT
            Not After : Jun  9 10:00:39 2025 GMT
        Subject: CN=b67f77307e5b4cbbceb9feb831d55b1f30a7329e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:d3:0b:4f:a0:d2:42:80:d6:a6:f4:78:81:
                    eb:77:12:94:c8:3d:21:a2:63:c7:28:c3:36:60:5c:
                    c6:da:9d:ec:68:45:12:7a:66:a3:90:e0:d0:75:36:
                    f1:0d:0f:65:9c:4a:08:78:17:4d:eb:17:39:db:02:
                    03:32:ae:8d:43:1b:d5:d5:93:26:6b:b2:14:14:55:
                    82:65:ce:b9:56:5f:26:dc:d2:3a:3e:01:d7:c4:8b:
                    d1:39:ad:a7:f6:12:0d:2f:4c:22:92:f4:43:50:44:
                    50:f9:05:83:d0:fb:c0:3e:54:ee:ff:f5:7f:82:79:
                    ce:ac:96:2b:c5:4f:35:9f:eb:79:26:b2:2d:bd:69:
                    e8:bd:66:06:ae:af:d9:1b:6a:d9:98:58:86:49:dc:
                    09:f4:ff:ad:57:f2:82:45:fb:b1:6c:51:b5:d4:2c:
                    18:f3:4a:66:46:ce:95:7f:44:f7:fa:3a:84:8e:27:
                    20:0e:c0:61:80:ac:44:c1:b2:11:a7:72:45:e4:14:
                    2f:1c:e8:2d:18:d0:e9:bb:da:9d:05:fd:ff:f0:a3:
                    e2:e8:46:e7:ae:49:2d:ba:bb:75:46:8b:39:4b:0d:
                    53:41:38:da:ca:14:b8:08:82:e3:44:c1:60:b7:ab:
                    ca:0c:45:4b:97:e2:53:7b:e8:a0:7f:56:36:b8:02:
                    01:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7F:77:30:7E:5B:4C:BB:CE:B9:FE:B8:31:D5:5B:1F:30:A7:32:9E
            X509v3 Authority Key Identifier:
                keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1d:57:d3:c4:da:d8:04:40:52:bc:5b:2f:21:d2:e0:67:60:
         4b:10:3d:7a:b9:68:a1:87:46:09:c1:f2:04:36:6c:16:9d:9e:
         a3:84:27:e6:35:89:0c:5a:cd:10:d1:5c:df:86:a6:d6:66:4e:
         94:00:cf:e4:a5:a0:a2:f7:2a:cb:b1:1d:b7:9c:70:80:d0:d9:
         cc:92:56:4a:c9:cb:2e:d0:7e:5c:88:bc:0e:14:21:6c:72:a4:
         24:13:35:11:43:3d:27:c7:41:97:8c:3a:93:0c:47:0a:dd:66:
         51:3b:c4:33:1c:bd:a6:eb:25:52:df:8f:1e:40:84:73:2b:3e:
         0b:a2:3c:ae:26:be:ca:25:d0:76:80:83:1b:7e:5b:63:47:84:
         2d:59:c2:9e:61:dd:c0:d5:37:37:91:65:87:12:f3:ad:30:6b:
         46:52:65:01:d8:e4:5f:b4:a6:ce:8d:d4:4f:e9:9b:04:6e:11:
         6d:90:f0:46:ba:73:d9:2c:c3:99:1e:bc:1b:75:b8:e9:04:cf:
         85:0b:37:59:93:08:c7:63:93:b6:c2:ae:9d:5d:87:b6:04:c8:
         75:c5:e2:15:cd:0d:9d:74:c0:c4:b3:0d:3a:0f:92:98:f0:31:
         84:e0:a3:95:d7:57:4e:16:e0:26:b3:9a:25:f3:60:a9:91:e6:
         ea:e2:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:44:21 2025 by rpki-client