Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
File:                     Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft (raw, json)
Hash identifier:          01TrxzR9vuZcR19LI0FCAcN/8jkDkdRipMSM+imdDws=
Subject key identifier:   D2:C5:33:53:FE:F5:F4:38:52:76:77:FA:4C:8D:38:6E:D5:98:C1:83
Authority key identifier: 1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3
Certificate issuer:       /CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
Certificate serial:       019747B0F52729C1CB8E1F6D5F605228C57D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 00:01:08 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:08 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:08 +0000
Files and hashes:         1: Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl (hash: da/KmAiTxEkpmu8vgwtZknkFiwBnS97KRfwRMROGQ0k=)
                          2: ttZNv6l1EeF-xiTWTGqQIM7MdNI.roa (hash: 7CYeRmxgoUhsy4kTyySHz2v5rlglnUVr1BYD9Sp0a6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:f5:27:29:c1:cb:8e:1f:6d:5f:60:52:28:c5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
        Validity
            Not Before: Jun  7 00:01:08 2025 GMT
            Not After : Jun  8 00:01:08 2025 GMT
        Subject: CN=d2c53353fef5f438527677fa4c8d386ed598c183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:b0:62:5b:36:59:61:fc:74:cd:eb:d8:24:
                    b9:c5:bc:54:69:6b:4d:88:b3:df:67:b8:e8:0f:20:
                    eb:f0:a8:ea:fc:45:59:11:8b:7b:0e:52:78:c8:61:
                    c7:77:b1:e6:1f:2a:00:7a:16:2b:e8:71:29:2d:98:
                    69:50:9c:bc:c5:df:90:35:31:a1:e8:7c:c2:31:cc:
                    39:a8:e3:aa:c3:59:79:00:aa:c4:7d:46:ac:6f:4f:
                    4b:07:e2:c4:80:ed:ae:9a:f9:54:37:48:83:fd:bf:
                    d0:31:7a:0e:99:ec:58:a4:0a:67:5e:f6:ff:38:7b:
                    65:1c:23:ff:0b:91:56:f6:d6:61:c0:bb:06:57:24:
                    bd:e8:3e:ec:1e:3c:d0:38:12:6c:4e:0f:17:f4:1e:
                    b8:06:f3:e8:41:26:05:46:55:15:aa:8b:53:8e:96:
                    7f:5d:db:e8:b7:2e:cd:9b:b3:73:68:07:f5:e7:9f:
                    07:71:2e:61:55:fb:99:b2:01:96:0f:4c:d8:cc:17:
                    cf:78:f6:26:e4:6f:08:4a:51:ee:e6:8c:5b:c2:9d:
                    39:c8:a4:84:da:f7:05:0d:46:7c:e5:3c:e0:0f:f8:
                    ee:8e:61:a2:c1:5a:54:a3:83:a3:bf:e8:74:1c:eb:
                    65:76:e5:7b:47:07:71:93:f2:05:89:81:1e:23:0f:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C5:33:53:FE:F5:F4:38:52:76:77:FA:4C:8D:38:6E:D5:98:C1:83
            X509v3 Authority Key Identifier:
                keyid:1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:36:66:0b:0c:29:9a:9e:06:fd:80:02:30:9c:66:2b:6e:22:
         3d:a2:16:61:73:b8:d6:d5:03:4f:99:22:e2:03:55:bd:7f:61:
         61:1d:4b:89:f6:34:11:68:56:cf:d8:ce:2d:1a:02:c4:d1:d7:
         c0:27:83:18:90:f6:c3:b3:ef:fc:fd:16:7c:40:60:8b:c5:27:
         89:11:72:a5:a4:a9:12:45:0c:ab:19:e1:50:1e:70:85:90:fb:
         59:55:24:67:b4:0a:df:5f:1b:ec:89:85:c9:28:63:bc:79:b9:
         66:56:64:c2:3f:a9:ef:5b:0a:45:3b:ea:a6:cc:f8:36:c1:cc:
         9e:60:39:55:b8:4a:63:a1:6d:06:f3:da:3b:1f:3c:8c:0a:f6:
         d1:da:31:d8:e2:26:0e:80:1c:f9:6d:52:94:57:05:d6:9b:56:
         ba:2b:11:b2:9e:e6:61:b3:77:96:dd:22:e5:ab:0e:14:67:fa:
         a4:05:e9:f4:fe:6a:20:45:3c:8e:e5:b2:ed:98:55:0b:b4:23:
         f3:fc:0d:cb:87:d1:08:25:ea:ad:aa:d2:b6:de:0d:a2:7b:c6:
         c7:9c:5c:f2:0c:d6:01:93:f4:66:45:d7:44:9c:23:8f:81:29:
         f4:f9:a0:87:eb:a1:52:e2:aa:82:1b:26:ed:e5:56:1d:73:ac:
         03:d8:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:42:47 2025 by rpki-client