Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File:                     ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier:          wThKzCCBvDMjmXFk36D8zlHDxCdHHWaQw5LYGWXvFCg=
Subject key identifier:   60:85:BC:1B:5D:4B:12:F9:2E:AA:07:49:2B:E8:B6:00:E3:44:1C:F2
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer:       /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial:       01974A7A817A5A0D0EBA58F8E8EB899D1812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number:          0D15
Signing time:             Sat 07 Jun 2025 13:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:31 +0000
Files and hashes:         1: 0nNYMJ2yluQoQ02pe7IRw8NkdfA.roa (hash: GkG/6rDrk9vq7Jp2NvQPyT4My5GzjO9oZQi+bOX75cE=)
                          2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: ExSk9yErGzeUQcp6CloDPsVPxS7bB0kQUC1/TTSwgsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:81:7a:5a:0d:0e:ba:58:f8:e8:eb:89:9d:18:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
        Validity
            Not Before: Jun  7 13:00:31 2025 GMT
            Not After : Jun  8 13:00:31 2025 GMT
        Subject: CN=6085bc1b5d4b12f92eaa07492be8b600e3441cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:b3:27:e4:15:b0:2d:5e:c7:49:e1:45:83:
                    40:7b:22:c9:b1:6b:b9:6d:ff:2c:a0:32:82:f5:3d:
                    58:53:5b:ed:60:09:d3:44:1f:99:4b:7d:6b:84:d3:
                    2b:01:d7:eb:9f:c5:9d:b3:0d:92:1b:14:b2:8e:93:
                    ea:06:f3:b6:23:1f:7e:fb:c2:7b:18:bf:9a:9b:97:
                    48:19:63:58:fb:b1:9b:ba:f5:94:aa:ed:f6:42:8c:
                    28:7b:d7:58:7e:35:92:28:79:ac:bf:7f:53:49:a8:
                    1e:fa:0c:f1:e1:67:06:1b:dd:c3:13:83:d2:01:92:
                    32:ae:52:8c:41:60:e4:c8:ba:f8:a7:c3:7d:f7:24:
                    b1:61:69:84:51:d8:a0:ac:27:d9:0c:89:58:7a:0b:
                    3a:00:a6:a4:3b:43:75:7a:6b:e3:66:12:ee:0d:25:
                    21:26:d4:de:33:db:11:5e:41:eb:13:c2:94:5e:b4:
                    87:5b:0b:8a:78:38:c7:1a:16:94:73:1c:e5:7b:7c:
                    d3:6e:42:87:cd:f5:06:72:9e:ca:ce:9b:47:ff:c4:
                    a1:24:ee:44:a4:ad:65:91:99:2f:76:06:b5:f2:15:
                    41:22:c1:46:b8:bc:ba:12:56:24:7f:7a:a7:ea:ad:
                    3e:98:38:34:ac:48:15:9d:e8:fd:fc:b5:2a:d5:1b:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:85:BC:1B:5D:4B:12:F9:2E:AA:07:49:2B:E8:B6:00:E3:44:1C:F2
            X509v3 Authority Key Identifier:
                keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:06:49:cc:1a:8e:74:8b:b8:c1:d7:d5:ef:6d:cd:5a:9b:
         f1:b1:48:57:00:1b:75:6e:b4:f1:f2:47:b1:0f:fb:86:62:a2:
         1e:34:94:a2:62:d4:3e:4d:e8:81:5b:1f:b0:04:42:18:de:3b:
         0e:ab:08:78:1e:f0:fc:fc:6e:dd:dc:52:b5:df:e5:f5:e0:2b:
         5c:1f:1f:ab:77:d8:7a:64:21:36:25:a8:ed:db:3a:39:79:73:
         33:e6:80:e0:b2:15:ca:b3:d2:be:bb:d9:f1:47:f6:08:a0:2d:
         ff:27:3f:7b:f3:95:e0:ec:78:bf:0e:88:b3:bd:e4:ce:0d:fd:
         0a:94:10:a2:09:94:3d:47:aa:73:da:f8:e5:04:6e:2e:74:e8:
         f1:5c:02:c7:0d:22:f4:3d:38:46:7b:5d:34:d0:64:58:4b:9f:
         23:d1:d3:2a:fb:a7:ff:0b:44:ff:02:a3:9a:1c:06:fd:a3:af:
         6a:69:cb:29:77:34:de:3d:35:6d:d4:43:d7:0e:1d:d8:c8:ee:
         b2:b7:16:f0:f1:cd:5a:85:e7:1d:b8:49:d8:90:b2:48:43:88:
         6c:fa:d3:9e:e4:9a:66:01:f5:f6:8c:7b:e2:ef:c6:c0:d5:34:
         f0:f4:0b:01:34:60:2a:f8:7e:20:b5:f1:f8:67:d3:a8:54:68:
         0e:2d:bb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:30 2025 by rpki-client