Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
File:                     gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft (raw, json)
Hash identifier:          IXsdJUMJCRUnmPDrvZEwJDMa8XhgdUwpXFigw2HgzK8=
Subject key identifier:   CE:53:05:88:F9:29:8B:F2:12:7F:EC:06:E7:D6:13:54:19:1F:37:E1
Authority key identifier: 81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
Certificate issuer:       /CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Certificate serial:       01974A7ABA5DA093E4BA6EBFFA48691DC164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
Manifest number:          1585
Signing time:             Sat 07 Jun 2025 13:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:46 +0000
Files and hashes:         1: boA84qDGPvl_6lnRHS_XzFFeG1U.roa (hash: mKsVzVhgFbQeWFBOvfQBj+TUfoFvXQ5IHepTPgh5BKs=)
                          2: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl (hash: V7n8wRhahSa71YQ3z+7kRkd4vEYhK5p5YdxAJGswEq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:ba:5d:a0:93:e4:ba:6e:bf:fa:48:69:1d:c1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
        Validity
            Not Before: Jun  7 13:00:46 2025 GMT
            Not After : Jun  8 13:00:46 2025 GMT
        Subject: CN=ce530588f9298bf2127fec06e7d61354191f37e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:db:36:e1:48:63:ac:cd:05:39:23:29:ec:
                    b6:77:a1:f0:0e:52:f1:04:13:3b:1e:bb:34:f3:6f:
                    29:15:38:36:f3:59:b1:34:b2:ce:a1:bc:82:f8:e8:
                    9f:f0:4e:6c:a5:c5:6c:12:04:9f:cd:fd:7a:9d:75:
                    ba:80:fa:a1:dc:94:4d:ab:63:c6:07:a7:da:86:52:
                    3a:f9:5e:35:a2:cf:dc:61:d3:f8:b7:07:dc:eb:45:
                    3d:aa:2a:da:39:fa:0c:e0:95:9a:e7:9d:6f:9c:86:
                    57:08:07:5c:44:73:73:66:28:72:e7:a2:9e:91:8c:
                    e8:29:55:1c:6d:2e:db:a2:1f:20:7d:c2:20:54:4b:
                    3d:d4:cf:4e:b9:3a:b1:e2:b9:06:51:9d:e0:b4:68:
                    56:40:01:4a:71:bc:4f:8e:64:8a:7f:5d:15:e2:a3:
                    4f:b3:fe:ce:15:41:86:8a:4f:7c:01:4e:d9:77:db:
                    85:c5:6d:2b:5c:ef:5a:b3:aa:13:91:16:5e:90:77:
                    01:08:d3:b8:fc:c4:e9:3a:70:4f:18:05:68:8f:97:
                    c6:6c:32:78:e4:9c:b3:8c:cd:6f:84:d8:67:06:b8:
                    68:2f:02:79:00:92:30:22:ea:ba:bb:ce:3d:01:b2:
                    06:be:ca:4e:da:04:bf:a9:3e:35:a7:25:1c:11:25:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:53:05:88:F9:29:8B:F2:12:7F:EC:06:E7:D6:13:54:19:1F:37:E1
            X509v3 Authority Key Identifier:
                keyid:81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c8:e5:47:aa:0a:ca:6d:60:02:7d:52:fa:3b:d9:6c:68:fd:
         1c:72:0d:1e:42:79:39:fc:32:30:0d:3b:f4:11:85:1d:ca:23:
         6a:b4:30:9c:1d:78:cc:8f:c6:1c:30:5f:0a:07:c3:96:ca:2f:
         72:d5:0d:16:11:01:3b:82:43:df:13:4f:5a:9c:44:ed:a9:03:
         67:87:36:81:4f:46:e1:7d:94:48:3d:ed:ae:36:c5:2b:05:76:
         44:01:f4:db:78:23:52:34:c1:f5:ca:0d:06:db:3d:b9:2f:12:
         bf:4b:26:64:c5:c5:62:f0:ad:d5:f3:f7:09:a4:22:12:9f:bc:
         1b:a9:f1:08:af:e3:c0:81:be:88:ec:13:84:e2:c7:02:2a:75:
         1b:64:ba:ac:d4:ef:c7:d2:b1:5e:0f:bf:d0:c2:eb:99:6a:21:
         74:2b:6f:6a:39:01:39:96:66:6d:b2:38:99:ba:04:92:0e:55:
         cb:9a:b9:23:35:96:ba:18:be:7c:d6:8b:5c:10:d3:41:8d:9f:
         65:b3:69:74:e4:b2:96:2b:2e:d1:33:2f:1c:a4:44:ea:cd:d2:
         63:42:bc:3f:08:21:f4:c5:0e:c5:af:d2:8a:aa:01:7a:ef:26:
         62:2c:a2:3e:51:6a:46:57:d4:a7:3d:40:81:2b:40:59:e1:bd:
         d3:fa:d0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:44:44 2025 by rpki-client