Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
File:                     GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json)
Hash identifier:          GReEQXP+WrklJfpU95zfFa+LBt6FzuO7ClruHfKs1dE=
Subject key identifier:   3D:D5:06:3B:9C:05:27:0F:C3:B2:CF:DA:EA:75:A9:4E:BD:D7:D0:DB
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Certificate issuer:       /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial:       01965982BAD1FA29110DBB5D8D04243AC8B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
Manifest number:          0812
Signing time:             Mon 21 Apr 2025 18:01:01 +0000
Manifest this update:     Mon 21 Apr 2025 18:01:01 +0000
Manifest next update:     Tue 22 Apr 2025 18:01:01 +0000
Files and hashes:         1: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: m5fFodPtTbWFPoNS9WilRB+33ybxzoVeyAqh5RA9U/E=)
                          2: Ni5vtm0M3bjCTeGdNSnDAVszYLE.roa (hash: OME01+LPKlOdHdZ6RncStdMa9nK9uQNDcVGUK02vlcM=)
                          3: UN74uc5YlLqW_undi6fagl4jLqE.roa (hash: T8wwQEk35bUytAqstSvFlsiKKzh4r6h8H/xSeUZvLig=)
                          4: YRiImFoNZVxU37wmm_1wL-_QqNY.roa (hash: xKbt/nH87U6XbMkmr2VvoP8n6E36rmfBqZRV+O9xVJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 18:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:82:ba:d1:fa:29:11:0d:bb:5d:8d:04:24:3a:c8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
        Validity
            Not Before: Apr 21 18:01:01 2025 GMT
            Not After : Apr 22 18:01:01 2025 GMT
        Subject: CN=3dd5063b9c05270fc3b2cfdaea75a94ebdd7d0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:94:0a:13:6b:89:90:7d:55:81:b5:ce:51:
                    b6:2b:6d:50:5e:71:13:67:f5:0c:1a:04:ea:82:c1:
                    11:4c:16:ef:81:10:79:0d:e9:89:26:4b:2d:c1:26:
                    56:4c:fe:ad:c0:c1:bd:13:c9:06:64:06:9e:24:e9:
                    27:25:d3:0a:2c:89:d8:0d:ed:de:9c:cd:be:ec:14:
                    aa:f3:de:a5:70:1b:06:bc:be:fe:d1:e3:4e:19:96:
                    41:90:7f:7c:c6:e3:7e:7f:a4:ee:74:b2:71:a1:e7:
                    55:7d:70:41:4c:fc:a0:2a:a6:ab:79:ac:7b:84:9b:
                    6b:4e:61:60:58:b1:73:db:d9:e7:09:78:63:a6:86:
                    e1:8d:d4:f7:00:4d:ae:6a:78:b6:de:21:8b:d2:d9:
                    60:a4:e7:72:45:18:e5:07:ea:29:17:a7:d2:13:60:
                    c7:9a:ad:a6:a3:87:e4:17:f3:ee:01:ea:36:37:90:
                    29:b0:1c:2a:ef:8a:ec:03:f7:ef:2a:a9:c4:d1:36:
                    2f:80:ac:ce:ee:d5:7a:be:29:89:4b:85:f4:99:7b:
                    69:6a:c6:fe:d6:cd:7b:b9:39:4c:aa:9d:56:7c:4d:
                    cd:e6:e5:6c:23:d3:4b:c9:33:6a:2d:67:d6:d6:00:
                    5c:51:1e:46:f7:25:92:e2:cf:46:fe:8a:28:e4:1c:
                    48:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D5:06:3B:9C:05:27:0F:C3:B2:CF:DA:EA:75:A9:4E:BD:D7:D0:DB
            X509v3 Authority Key Identifier:
                keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:70:38:4a:bd:67:ae:fe:86:5c:ce:f6:d7:7c:36:64:3d:c9:
         bd:a7:a5:c2:11:e8:86:c1:18:89:2e:d6:b0:10:1e:b4:67:45:
         fc:59:b0:f8:87:6e:34:4b:92:0d:a9:db:fc:21:6a:39:19:8f:
         f4:54:2a:44:c9:85:f2:05:58:0d:f4:70:7f:81:52:cc:e6:df:
         01:0f:e7:a6:a1:0a:e7:88:65:98:cc:43:29:6e:88:14:03:a6:
         1e:02:fe:3f:83:eb:62:44:ce:15:aa:92:c8:4c:d5:c5:ea:56:
         19:d6:3a:8f:d1:bd:c4:51:5b:ef:83:2c:52:6c:0c:9f:f8:e9:
         ff:e0:3e:53:51:4e:e1:80:d4:79:27:33:d1:0c:b0:f5:39:65:
         6a:11:85:ae:8e:c9:db:6e:9f:53:47:83:80:a0:13:b1:43:b5:
         5b:88:bf:de:cd:c3:d8:8d:c1:3a:ca:b6:91:2e:12:73:51:35:
         32:46:8f:b5:00:63:9a:43:af:6c:80:81:0e:92:14:cb:f1:b4:
         3a:e3:09:63:14:cd:e7:ae:fa:09:9f:1c:9f:2b:37:18:2a:89:
         ab:25:b3:8e:cd:a5:0d:0b:84:76:c1:05:7e:a6:95:79:0f:4b:
         c1:7e:f3:f8:01:ec:bf:83:61:97:6b:8d:c2:88:cb:02:bb:e7:
         3d:c3:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:44 2025 by rpki-client