Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File:                     gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier:          OL83sjLHKlL/EBnit16l2ywen3x2IqwuYDABbWJ1ugo=
Subject key identifier:   B7:EA:87:A8:3F:F8:C1:DD:AD:88:1B:18:6B:1A:0B:E4:FC:8F:66:C1
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer:       /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial:       019764DF6554324185C0FE399FC6BCC99C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number:          158C
Signing time:             Thu 12 Jun 2025 16:00:51 +0000
Manifest this update:     Thu 12 Jun 2025 16:00:51 +0000
Manifest next update:     Fri 13 Jun 2025 16:00:51 +0000
Files and hashes:         1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: hOoP4WNcvQAq5AB91CtWvsqDSBHb/TqixdywibLS6j0=)
                          2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:df:65:54:32:41:85:c0:fe:39:9f:c6:bc:c9:9c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
        Validity
            Not Before: Jun 12 16:00:51 2025 GMT
            Not After : Jun 13 16:00:51 2025 GMT
        Subject: CN=b7ea87a83ff8c1ddad881b186b1a0be4fc8f66c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:42:95:0d:6e:23:b3:51:44:8c:3f:00:f4:fb:
                    53:98:b6:80:52:35:f9:9d:fd:0c:a7:b1:27:e3:bb:
                    a5:66:50:91:17:fe:05:fd:2e:74:7a:b7:7c:46:58:
                    0d:f9:10:cc:46:ca:20:81:01:8e:7d:cd:49:63:bb:
                    b6:c7:e8:79:c5:6d:84:31:17:dd:d0:06:59:c5:3a:
                    7d:cd:aa:81:9c:19:91:eb:c7:1e:c8:42:3e:ff:72:
                    73:14:f0:ab:79:b3:58:cb:d2:67:83:19:86:af:19:
                    7c:80:68:6b:00:fb:91:d8:28:18:a3:61:10:ac:43:
                    1a:c8:6f:72:3d:7b:fb:c3:cf:15:95:2e:64:9f:94:
                    70:01:fa:8c:5a:7e:74:5d:8b:aa:c9:c9:e5:c0:b8:
                    6b:b3:8b:2f:db:02:74:65:13:70:f6:ac:0c:df:6b:
                    dd:ed:57:9f:f8:ef:46:19:40:a6:8f:8f:74:de:3f:
                    5f:21:ef:7d:61:74:17:59:49:8e:ac:39:08:b1:14:
                    9b:97:c1:b4:4d:c3:6a:38:9e:50:c9:41:07:a3:c0:
                    32:54:8c:b2:c2:e5:14:9f:5c:b6:96:c0:5c:7c:1b:
                    f7:23:b3:71:11:ef:9b:0d:e6:48:e0:a8:4b:e1:5f:
                    02:18:6b:11:c8:1a:59:3a:b9:0b:cf:f4:61:35:3f:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EA:87:A8:3F:F8:C1:DD:AD:88:1B:18:6B:1A:0B:E4:FC:8F:66:C1
            X509v3 Authority Key Identifier:
                keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:02:07:44:ec:56:99:27:04:7d:b8:7e:5e:74:fd:5b:f9:9d:
         bb:4a:bd:53:8f:f6:64:94:51:cd:d7:b1:51:20:cf:95:dc:23:
         4a:1b:8b:54:a6:5f:12:64:92:85:d4:f2:73:3a:cf:fc:b7:10:
         45:5a:97:48:fe:42:a8:bb:11:81:69:d2:d3:a1:80:9e:f7:87:
         8c:0d:1c:05:d2:b6:3e:eb:ce:cd:41:42:0e:6e:46:26:32:c7:
         9f:74:5b:13:03:5b:70:3a:09:4b:c8:b0:52:3d:8b:8a:c6:af:
         a9:01:4c:eb:7d:aa:f7:43:e4:c5:83:76:a3:54:9b:eb:e0:bd:
         f3:f7:b6:1e:3e:d1:95:da:67:e3:ff:98:86:63:8e:5d:72:a3:
         85:39:c6:59:63:f8:f0:82:ee:4a:4c:d7:17:c5:6b:47:75:dc:
         2a:cd:08:4f:a8:e1:01:d8:87:da:10:3f:e1:ec:da:e7:70:28:
         02:52:9d:56:fc:d4:70:7b:30:e2:68:04:bb:40:ec:13:33:fc:
         ab:31:53:d9:5b:c3:ab:4b:e7:0d:cc:6f:ed:64:4b:53:52:ce:
         58:da:ec:48:b4:55:0a:f5:ca:15:15:6b:ef:85:e6:e2:9c:85:
         39:39:bd:b0:fd:1d:74:57:82:48:7a:44:95:59:c3:a9:49:de:
         6c:d7:bb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:38:29 2025 by rpki-client