Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File:                     gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier:          //YHitpu97gXKds/GeVQL07J80K65TYJLO6exB0ydco=
Subject key identifier:   A7:43:04:DF:E0:DB:0F:DA:47:80:D0:36:16:C7:2C:5A:92:FB:C4:04
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer:       /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial:       0197463054D2916649A15F0E70394AC8E047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number:          1579
Signing time:             Fri 06 Jun 2025 17:01:01 +0000
Manifest this update:     Fri 06 Jun 2025 17:01:01 +0000
Manifest next update:     Sat 07 Jun 2025 17:01:01 +0000
Files and hashes:         1: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: T0dCAa3GXRqdTFRAyOgHZTwVlMnlt3vkVefM5kg64hM=)
                          2: rqs2jYsXIEmeZSer38OOcJGK7EU.roa (hash: m+TNUwZvlDUtkC5/TwdymkZwjEw131NWG7VhMWfXmRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:54:d2:91:66:49:a1:5f:0e:70:39:4a:c8:e0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
        Validity
            Not Before: Jun  6 17:01:01 2025 GMT
            Not After : Jun  7 17:01:01 2025 GMT
        Subject: CN=a74304dfe0db0fda4780d03616c72c5a92fbc404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:55:93:b6:88:b0:84:7d:ed:14:8b:68:06:62:
                    bb:b9:69:63:85:28:8e:35:78:57:2c:54:c7:9d:fe:
                    76:48:8b:9c:79:1b:07:6d:ba:55:76:d2:fc:0f:45:
                    e6:68:de:dd:43:c9:a3:a8:28:6d:9f:e5:15:92:3c:
                    a6:4d:bc:00:90:c0:b9:ff:f4:b4:29:06:87:f1:e9:
                    46:74:8b:a2:a7:3a:e1:4d:4a:24:87:bd:c0:48:82:
                    c3:21:30:cf:89:74:af:2e:b8:c3:1a:10:7f:7e:be:
                    03:44:00:61:81:80:2a:c5:dd:be:9b:71:49:9a:12:
                    e6:b4:a0:05:41:af:c0:2c:25:42:2c:bf:29:83:46:
                    0e:a8:64:38:e9:1d:f2:cb:94:07:59:a3:88:a6:24:
                    e4:90:4f:4f:e6:f6:5e:94:79:bf:f7:91:e1:93:d8:
                    07:ba:fa:2d:cb:19:96:1a:26:4c:cb:22:c6:95:b8:
                    fd:f7:59:40:73:d2:d0:2d:85:ef:5a:7a:8f:d4:06:
                    b5:3e:9d:8e:f7:d8:8b:ec:91:f4:4f:29:37:23:6f:
                    b9:07:ff:4f:f9:cf:bf:78:2a:04:dc:e6:c5:0f:69:
                    74:63:79:cf:11:f7:ad:a1:18:d2:8d:56:ae:c2:ff:
                    5d:8d:08:dc:eb:a9:ae:be:55:17:51:e3:2b:27:12:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:43:04:DF:E0:DB:0F:DA:47:80:D0:36:16:C7:2C:5A:92:FB:C4:04
            X509v3 Authority Key Identifier:
                keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:30:68:c5:88:46:cd:8a:23:73:2f:41:0a:dd:81:51:eb:d6:
         b5:5b:0d:a1:23:79:b5:71:c9:ad:cb:77:a7:61:24:64:f8:c5:
         49:35:fd:46:37:c6:0e:69:cf:6b:f2:3f:5b:80:79:e2:d0:55:
         24:b8:1a:e0:7b:6d:c4:90:01:89:b3:11:56:f8:e4:56:8e:fa:
         e4:6d:6d:13:b7:76:8f:e7:b4:06:95:63:ca:e9:83:2d:c0:d3:
         68:c5:24:1b:55:6e:ea:1a:fb:67:a2:18:25:15:7e:7b:a4:57:
         be:8a:60:7e:cf:70:ab:eb:95:98:eb:d8:30:7e:fe:de:05:c2:
         31:f8:4a:94:2c:33:34:45:f1:67:7f:24:03:7f:fa:8f:7c:c7:
         18:d3:19:87:7b:cf:9f:fd:03:bb:4f:8c:ec:c5:85:35:d0:63:
         bd:35:98:f8:77:95:63:29:33:0b:e8:38:90:2f:ab:5d:49:85:
         8c:18:db:6c:82:a9:57:a6:fd:ef:d0:c0:10:15:f1:4e:dc:31:
         5a:d8:0e:ab:65:0b:9c:e2:dd:17:cd:45:bc:08:e8:64:e4:fb:
         1e:18:5c:a2:3b:ff:1a:71:36:1f:77:6d:e3:08:29:29:e2:9c:
         bc:bf:36:8b:e8:32:af:77:ac:18:e2:ca:b6:5a:56:57:7c:06:
         dc:c7:ec:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:30:06 2025 by rpki-client