Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
File:                     Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft (raw, json)
Hash identifier:          eYFdcnkgi4Tah4tMTVuZVV9B+ZiURYGywBEyhnYj0eg=
Subject key identifier:   27:E6:C9:D1:C2:9E:F5:F7:B0:89:8B:AD:5F:97:D3:CE:51:C5:1A:23
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Certificate issuer:       /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial:       019655DCC3623353F5CCBD4869CF0BDF8BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
Manifest number:          1500
Signing time:             Mon 21 Apr 2025 01:00:53 +0000
Manifest this update:     Mon 21 Apr 2025 01:00:53 +0000
Manifest next update:     Tue 22 Apr 2025 01:00:53 +0000
Files and hashes:         1: Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl (hash: yTFQlaLPBGIT3CSabi5M0zbfnPdi3EEG3ov2JYydvgc=)
                          2: Z0_nKn5Ppf7O_xlPG_HQgKTjKfg.roa (hash: lqxBjj1kSi94JV6i0p7bCeDB9JZ982zRhs/Zft9BEa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:dc:c3:62:33:53:f5:cc:bd:48:69:cf:0b:df:8b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
        Validity
            Not Before: Apr 21 01:00:53 2025 GMT
            Not After : Apr 22 01:00:53 2025 GMT
        Subject: CN=27e6c9d1c29ef5f7b0898bad5f97d3ce51c51a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:72:91:3a:36:c8:8b:bb:8a:ae:34:ab:a1:
                    a7:99:18:67:47:fc:cf:f2:5f:5b:f2:42:61:49:ca:
                    2e:73:72:e5:74:49:c2:73:70:cc:a6:1e:47:eb:93:
                    8b:46:b3:6f:c9:a3:14:e6:f7:67:7a:68:c2:cd:53:
                    fd:59:a1:18:fa:86:38:5f:be:39:a9:6a:cd:b6:8d:
                    bb:96:73:8f:0a:f6:7b:29:63:b6:0f:32:6c:1c:64:
                    4b:11:8c:5e:c9:ab:5f:8b:16:b0:51:42:a7:9d:bb:
                    7c:d4:bb:8a:0d:16:ae:c7:44:b7:a3:04:e6:76:22:
                    50:82:9a:d3:06:14:d9:63:94:8c:d5:83:e6:b4:a2:
                    ae:ec:54:25:e3:37:cb:7a:c4:ab:02:30:04:a6:35:
                    bd:08:5d:db:51:92:35:24:d6:76:42:21:ae:82:43:
                    e8:46:7a:a3:f1:49:38:3d:10:2f:4a:93:ab:7f:10:
                    03:72:9a:af:9a:a4:bb:7c:b8:8b:62:81:1d:2b:fd:
                    8f:89:e2:9c:d4:12:fc:3b:07:eb:fe:15:ab:59:03:
                    7c:4c:30:6e:f8:2f:74:d3:74:fd:8d:0f:85:5c:22:
                    bf:80:04:c6:25:52:c5:6e:2a:08:67:d0:46:5f:46:
                    a6:c6:6f:cd:e9:9f:d0:e0:13:2e:aa:17:3f:fb:05:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E6:C9:D1:C2:9E:F5:F7:B0:89:8B:AD:5F:97:D3:CE:51:C5:1A:23
            X509v3 Authority Key Identifier:
                keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:60:34:66:07:0a:f8:e3:93:70:06:9a:5d:49:9c:d0:4c:
         97:a8:f5:af:82:4b:f9:21:c6:31:6d:c6:e4:3a:18:6a:8d:47:
         cc:e9:a7:41:b7:5f:0c:3f:26:0c:36:62:dd:8b:4b:db:ae:c9:
         6f:28:42:c8:30:b8:49:f2:b0:c0:f7:cf:a2:2e:9f:69:8e:7b:
         8a:54:d5:de:17:ec:ec:48:e5:dd:8b:54:0f:f5:ba:6f:d1:66:
         7e:e9:39:6c:6b:ef:53:77:a2:00:ce:6c:71:59:85:32:59:08:
         f5:d2:c6:a3:18:ac:b1:07:8c:86:39:0b:d3:5c:2d:f3:49:a3:
         7e:8c:84:ed:68:ea:bc:55:ce:b1:00:a0:09:7e:c9:17:e6:aa:
         21:ad:92:eb:0a:97:85:01:37:9d:f6:8f:69:f9:a7:f0:80:9a:
         11:a2:45:eb:b8:96:24:4e:e3:46:2f:50:ba:b8:fd:fa:f0:03:
         82:97:5c:d9:82:b6:88:3a:bd:a0:39:1b:13:09:e3:e2:ca:bc:
         fa:63:2c:7a:a3:cb:b8:fa:4d:49:a0:42:4e:0f:8a:d4:4b:62:
         41:4a:dd:30:e6:9e:23:45:0a:79:c4:b6:0d:4a:c7:d3:0b:0a:
         b2:ba:14:b2:5e:3c:db:27:61:96:56:2a:77:d8:88:75:0a:42:
         d5:10:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:44:06 2025 by rpki-client