Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File:                     gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier:          sMXdCQbfc2hju8IRnOW4NGy3mmcpR7VS2y5MTt5q1x4=
Subject key identifier:   CD:F9:65:00:D8:75:58:76:A9:60:FC:E0:F1:5D:E6:64:23:71:BD:2A
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer:       /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial:       01976E190A60B6A50E1B1858FF2D7D28E67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number:          0E90
Signing time:             Sat 14 Jun 2025 11:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:24 +0000
Files and hashes:         1: 2iJw4EQoXKQlcgvYyAFZ8L2PyY4.roa (hash: iiK5pamhZGxd1XFCTcN85Gnci+JOI25h5MBN1jWndgw=)
                          2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: 7rbrGeYfIW2z9FUal01RMn9U9cRBHYTK/WUdLgSv9Ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:0a:60:b6:a5:0e:1b:18:58:ff:2d:7d:28:e6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8166038385b343d55e76b728efe23c0731787668
        Validity
            Not Before: Jun 14 11:00:24 2025 GMT
            Not After : Jun 15 11:00:24 2025 GMT
        Subject: CN=cdf96500d8755876a960fce0f15de6642371bd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:65:c9:ec:81:b1:24:e0:81:51:44:66:07:
                    24:92:04:05:22:17:7c:56:30:a8:da:9f:15:8c:bd:
                    b3:fe:4d:21:da:cd:e5:48:e1:e3:70:73:7f:9f:48:
                    0d:f6:f8:42:de:a7:ed:f3:9d:7c:01:bc:26:6b:95:
                    ef:71:4b:d8:6d:34:d7:5b:7d:e7:06:6a:a8:82:a1:
                    6e:0e:4b:ca:8a:c2:e6:71:21:c0:ba:50:a4:fd:65:
                    bb:10:8a:b3:9c:3f:58:a9:e1:86:b1:73:51:88:1e:
                    ad:53:46:bb:6c:6c:66:30:e4:68:2e:38:da:8b:3e:
                    dd:9c:2a:c7:75:94:7b:16:8a:4d:49:8a:88:80:14:
                    16:d4:3d:06:ca:bf:ab:06:97:3f:b5:ff:a8:20:b0:
                    51:1d:41:b6:26:ec:01:ab:3a:08:5c:e7:98:7b:ed:
                    f5:52:ea:d6:4e:32:53:86:9b:69:30:45:e7:70:d3:
                    03:f3:a2:68:66:13:05:ef:7c:14:a8:ce:c0:02:1d:
                    77:ec:40:89:18:2b:c4:8b:17:d5:fd:54:71:87:a0:
                    b2:b8:f1:cd:15:c8:44:f2:72:b7:b3:b6:50:58:c4:
                    09:ab:e7:69:a2:3d:31:c6:63:65:7e:1f:e6:7e:4f:
                    c2:70:41:72:85:bd:e0:07:6a:ac:37:b4:5b:62:8a:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F9:65:00:D8:75:58:76:A9:60:FC:E0:F1:5D:E6:64:23:71:BD:2A
            X509v3 Authority Key Identifier:
                keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1c:9b:72:c6:05:e0:99:69:9a:7d:5f:34:e2:db:ca:f6:7b:
         b7:6d:94:92:07:1d:b5:1a:1e:b8:08:ce:0e:8f:95:08:97:bb:
         e6:ca:3a:91:16:78:cf:74:10:b4:e9:61:12:85:9c:2e:03:fd:
         e0:cd:f8:0a:2b:e8:8d:95:7a:42:74:c4:de:56:59:fc:e8:ed:
         6c:b4:a3:6f:18:f4:37:dc:7e:03:10:99:5a:0f:8f:b8:87:5a:
         c1:48:3f:6a:5d:a8:7d:8c:20:99:32:f8:1a:91:ae:96:e4:4f:
         85:cd:24:67:d2:9f:c2:42:6c:d5:cc:08:1b:77:45:c2:55:0b:
         af:18:06:74:84:34:b8:d0:f4:23:2e:47:06:3a:f2:29:12:75:
         1e:8b:e2:f3:0e:33:08:32:b6:90:50:a1:e5:ea:73:6b:c5:7d:
         8d:92:dd:cc:fb:f4:90:f1:cc:5e:13:66:d4:dc:37:9e:c1:06:
         c8:02:60:2d:c5:e7:51:1f:28:44:c3:70:fa:ba:65:4e:7f:a6:
         d8:c4:b9:62:e7:f9:87:ae:c0:6c:34:40:55:ba:f0:89:21:e6:
         e6:b8:06:e4:a7:49:68:6f:62:94:19:4e:97:9a:83:49:e1:06:
         b1:ea:ed:22:f5:9d:5f:ba:f4:e5:28:8f:05:fb:4d:b7:fd:0f:
         92:d5:3b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:15:49 2025 by rpki-client