Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
File:                     gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json)
Hash identifier:          NPyqHKq/Lhwy/DNVtiZyddg8F/kaHlMguG3ma18M8qU=
Subject key identifier:   A9:16:D0:14:53:A5:DF:AE:BF:5C:5A:7E:80:3D:36:4B:BC:75:0F:C4
Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
Certificate issuer:       /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Certificate serial:       019649A156754DD3C27007A5A4CA1FC61C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
Manifest number:          0C09
Signing time:             Fri 18 Apr 2025 16:00:32 +0000
Manifest this update:     Fri 18 Apr 2025 16:00:32 +0000
Manifest next update:     Sat 19 Apr 2025 16:00:32 +0000
Files and hashes:         1: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: qFLXAsdfEPaUJ6nwaGYbcl6bJwSt/F3cw+HclT4i5EI=)
                          2: kT72_rs6FeeCr3dDSGrEzG7Qc-Y.roa (hash: aU4YilQ/j5WNVY1Q5u9ZzL1FCZbvOH4ANv0D/Jw9+To=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a1:56:75:4d:d3:c2:70:07:a5:a4:ca:1f:c6:1c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
        Validity
            Not Before: Apr 18 16:00:32 2025 GMT
            Not After : Apr 19 16:00:32 2025 GMT
        Subject: CN=a916d01453a5dfaebf5c5a7e803d364bbc750fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:bc:c3:28:82:76:eb:a8:f0:09:49:51:ac:
                    13:ea:ba:86:2a:81:a3:a8:d3:4a:e8:60:57:0f:b9:
                    2c:15:eb:bd:2e:0f:15:d2:b3:0f:c6:0c:32:16:62:
                    1d:5d:7a:45:6f:2e:c7:ce:a1:d9:1f:37:60:4c:2a:
                    66:77:6c:15:d8:60:38:c8:84:34:aa:8f:8f:7d:d1:
                    f2:e8:c2:d2:76:c1:8f:1c:3d:08:73:65:5c:ba:ac:
                    1c:db:21:77:ad:dd:c0:cf:18:d6:cf:32:a3:bf:46:
                    56:9f:d0:6e:3f:b8:70:a9:0f:e7:b2:f5:3e:16:f2:
                    5e:ac:d8:aa:18:c0:a0:32:59:40:e9:8e:9f:cf:43:
                    6c:79:5e:da:bd:bb:95:76:f2:e3:fd:5d:80:80:2a:
                    34:94:b0:fe:c5:d3:de:de:70:2e:a9:5d:88:96:4c:
                    0d:99:2c:ec:e4:39:62:e2:f7:88:76:41:60:b0:48:
                    db:35:43:e1:90:b9:6e:ac:55:87:90:1f:cc:c9:2a:
                    2a:c6:89:30:03:21:be:14:f8:11:e8:6c:99:2b:6d:
                    3b:67:67:a1:9c:7d:ae:91:a5:f2:53:26:af:ad:ab:
                    6c:d1:c1:dd:50:99:98:f2:20:30:23:70:25:20:d4:
                    1a:df:ae:e3:b6:f4:e7:c8:f5:e3:c7:9f:33:70:fe:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:16:D0:14:53:A5:DF:AE:BF:5C:5A:7E:80:3D:36:4B:BC:75:0F:C4
            X509v3 Authority Key Identifier:
                keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3b:7f:4a:bd:3f:71:c6:4c:7d:35:0b:80:b8:78:1a:8f:d9:
         78:70:2a:88:83:1f:7a:f1:2b:ba:f9:c2:83:5b:b3:e1:d6:06:
         f2:d7:c0:31:a7:ee:c8:64:26:3e:1c:50:df:be:c5:ab:cf:b4:
         d5:62:37:a6:b5:62:98:2d:90:ce:10:08:9e:04:a3:4b:c9:0f:
         b7:6a:b9:90:03:46:db:39:30:f4:7f:dc:2e:ac:ae:64:b5:45:
         9c:19:00:6d:7b:f6:36:3a:74:ef:b2:dc:48:6a:ab:d6:68:90:
         61:78:09:62:f3:84:1f:80:0e:1d:2e:fa:90:bc:bf:eb:44:54:
         71:71:06:50:6a:1e:d5:84:27:2f:ac:93:8d:38:14:65:6e:7f:
         5d:17:3e:8f:10:3f:3c:c3:48:98:ed:20:63:d5:2e:3c:82:54:
         2f:b9:04:3b:aa:17:5f:49:c6:00:6a:a7:c3:b7:5e:94:0e:2e:
         79:27:28:95:9d:9b:26:c1:22:d7:61:b8:1c:2c:1b:e9:58:c7:
         03:a4:a6:88:77:ff:e3:d2:3b:40:f8:c9:8a:4a:37:dc:f5:64:
         40:ab:e5:49:a0:3a:b4:a5:4d:63:2f:f4:b4:24:35:2e:0a:01:
         e6:d8:20:f6:7a:f8:c3:36:e7:93:f7:a5:1a:f4:10:e4:44:bc:
         59:c7:39:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:00:40 2025 by rpki-client