Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File:                     gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier:          CBEMA3Ks7lNlO53xukGL8L5wPx4o0UrOvNwZGmvdMxk=
Subject key identifier:   CF:48:A3:45:DB:7E:84:6E:FB:A8:0C:45:31:C6:1D:5C:41:CC:D2:55
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer:       /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial:       01974C31F5E4060525DC66FC62147B5E9AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number:          0F78
Signing time:             Sat 07 Jun 2025 21:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:32 +0000
Files and hashes:         1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: SjiydG2npZv6Mk/ATxkRT12Ah/T/3hUqVMs8vmDzHaQ=)
                          2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:f5:e4:06:05:25:dc:66:fc:62:14:7b:5e:9a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
        Validity
            Not Before: Jun  7 21:00:32 2025 GMT
            Not After : Jun  8 21:00:32 2025 GMT
        Subject: CN=cf48a345db7e846efba80c4531c61d5c41ccd255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:80:47:54:9c:7d:8f:2d:37:f8:e1:d4:72:aa:
                    f8:da:09:3c:7e:6a:e2:8a:c8:19:30:a6:21:0f:67:
                    52:50:06:03:0a:c5:71:2f:89:2f:68:da:20:f6:91:
                    6a:35:6f:e6:34:62:61:44:27:81:13:8a:4f:e4:f4:
                    76:37:25:0a:bb:b3:42:c4:00:64:fc:a6:c5:48:2d:
                    ab:37:08:a1:95:21:59:e4:d9:c7:18:a7:8f:49:77:
                    62:5d:53:88:84:1e:f2:da:fa:8f:94:53:c8:b9:29:
                    ad:84:b6:1d:5d:60:22:8f:bb:5a:03:b9:41:75:52:
                    fc:02:0b:c3:bf:9e:93:de:92:cd:ff:0d:5b:8d:22:
                    69:3c:5e:2d:60:b6:74:9d:4a:a4:c2:17:20:58:78:
                    c1:ec:ba:55:e9:08:c4:db:a5:3d:e9:81:74:86:f6:
                    1e:97:8c:b1:93:03:96:6b:60:22:0e:56:72:a7:e2:
                    1c:73:3b:ca:9a:89:e0:7f:26:28:53:fd:45:ed:79:
                    da:11:21:5d:18:62:7d:2f:df:1b:32:31:3c:5a:56:
                    8d:03:f7:53:97:af:49:90:c7:7e:f7:59:e7:34:b0:
                    40:b5:f7:0a:d3:59:d4:fa:f0:35:e7:40:4c:d9:ac:
                    0e:6b:e2:81:c5:1b:ba:50:c0:d9:41:59:39:5e:35:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:48:A3:45:DB:7E:84:6E:FB:A8:0C:45:31:C6:1D:5C:41:CC:D2:55
            X509v3 Authority Key Identifier:
                keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:de:ca:f6:aa:97:05:ff:41:96:78:c0:9b:50:37:f6:f0:b4:
         41:8e:f4:6e:f5:1e:67:d1:60:0c:cc:52:ab:4c:7e:2c:77:7b:
         40:14:0a:23:7c:95:cd:cf:5d:d5:c6:d5:de:ec:1c:5f:4e:08:
         95:1b:39:39:db:fb:4a:57:63:8a:f2:41:64:ec:09:07:ff:70:
         eb:a2:4d:0b:b8:e1:50:97:af:66:e4:72:3b:c7:d5:39:af:dc:
         28:2d:ad:98:3a:81:89:e9:d5:02:3e:90:16:f8:58:53:33:11:
         99:a4:74:8d:c9:ce:42:53:2c:22:4a:35:d5:01:85:5b:38:60:
         c9:b7:fe:e6:24:90:a3:18:a6:25:ff:be:0a:ac:68:3a:0b:57:
         a7:9b:c4:42:6e:89:01:16:ae:31:e0:ae:34:a4:04:fb:80:59:
         55:12:de:64:60:3d:30:f1:e7:f1:c7:be:76:4a:56:71:39:33:
         af:3a:e7:df:d3:e7:8b:9a:3c:b5:07:7e:58:6c:3c:55:b0:89:
         bb:e1:7e:29:4a:aa:e9:53:b5:de:c7:6c:47:da:1b:69:c4:53:
         34:ee:24:7a:24:8b:71:02:2b:21:6d:34:56:57:93:03:06:c8:
         26:6a:7b:80:ad:b2:83:70:57:a6:cf:6e:51:ec:7b:0c:d1:6e:
         02:3c:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:24:07 2025 by rpki-client