Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File:                     GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier:          O5RR2UTMnvLNyvgiqx3iBf1QjNkOhSdnm7wo/WuOLVg=
Subject key identifier:   69:CE:6F:FC:39:90:17:9C:6E:89:E7:AD:56:CE:04:DF:37:98:A3:A8
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer:       /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial:       019649A23FC0D23A2AE7C37409631C900902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number:          148A
Signing time:             Fri 18 Apr 2025 16:01:31 +0000
Manifest this update:     Fri 18 Apr 2025 16:01:31 +0000
Manifest next update:     Sat 19 Apr 2025 16:01:31 +0000
Files and hashes:         1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: S5lL5oKtdy0vW2SkYYdrXj9brHOv/ZfKh5UX66lj1mc=)
                          2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a2:3f:c0:d2:3a:2a:e7:c3:74:09:63:1c:90:09:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
        Validity
            Not Before: Apr 18 16:01:31 2025 GMT
            Not After : Apr 19 16:01:31 2025 GMT
        Subject: CN=69ce6ffc3990179c6e89e7ad56ce04df3798a3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:06:2d:a7:1f:40:ff:02:75:91:a9:2b:7a:
                    ab:dd:5a:7a:9d:b6:a9:24:4a:c1:34:55:31:21:72:
                    ef:af:2f:a7:f4:07:76:b4:ec:cf:31:81:45:52:20:
                    fa:d2:10:93:cd:c1:12:df:9c:ae:0a:2c:20:90:ba:
                    36:c2:77:da:ad:04:68:6f:04:d7:f3:9c:53:17:0e:
                    a7:28:a2:e7:e4:0c:ea:ba:35:e9:a5:a3:74:48:30:
                    30:86:40:fa:36:e8:0e:96:a0:c0:54:38:18:9d:00:
                    97:ef:8a:4c:24:19:93:3f:ed:0a:b8:47:f3:61:1c:
                    de:0a:1f:24:67:46:a4:15:2c:53:58:1c:c1:14:88:
                    76:00:7a:86:72:15:78:a7:31:e5:c0:9c:a7:df:df:
                    5c:e7:d2:b9:29:b0:df:3b:e8:9a:07:bb:c7:d6:d0:
                    27:52:16:cd:ab:fb:59:6f:2b:0c:90:c8:4c:47:99:
                    d1:61:c7:4a:d2:8c:af:bc:6b:6c:23:16:41:dc:a7:
                    f0:31:17:b8:0d:95:00:fd:ce:6a:8e:7d:f0:61:4a:
                    27:d5:1c:68:d6:86:77:6b:04:5d:67:30:ac:9a:df:
                    7e:23:8f:9a:27:cc:8e:9d:13:8c:9d:62:43:24:b6:
                    ae:79:b3:ce:39:9b:0f:c2:41:e2:9f:eb:49:01:cb:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CE:6F:FC:39:90:17:9C:6E:89:E7:AD:56:CE:04:DF:37:98:A3:A8
            X509v3 Authority Key Identifier:
                keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:06:ad:9c:69:56:0f:31:e4:d6:69:bc:8c:79:fc:4b:0f:ce:
         25:7a:a2:47:38:85:07:b6:01:ed:62:96:3c:73:76:58:3d:12:
         26:92:62:61:b9:0c:2a:51:26:48:4b:2f:29:76:6b:f8:a1:ae:
         14:9b:eb:9c:89:97:0e:9c:06:68:4b:66:df:54:ac:f8:a8:12:
         a7:08:d0:2f:83:9c:56:29:23:d0:9c:48:d3:6f:e9:32:fb:23:
         aa:82:d2:67:26:6e:f2:ce:39:3e:b4:4e:ed:a2:85:24:60:b0:
         46:5c:f5:74:ea:6b:49:c7:45:f2:2b:e6:7e:21:2d:6d:b3:bf:
         cc:f2:f4:b9:fd:ee:c4:7e:6b:1a:23:01:4b:92:26:d1:44:ab:
         0b:7f:82:d8:b5:a1:f3:fd:db:d3:24:cb:f1:c7:e4:7b:52:c5:
         52:bf:03:82:ac:65:e5:ce:18:8d:08:d3:17:1a:83:23:9e:f7:
         2d:ca:f6:dd:ce:59:4d:e7:3e:d2:81:63:62:1b:a4:32:2b:d7:
         42:15:ab:d0:07:2a:fa:12:85:c9:63:25:91:ab:b4:7c:f4:b3:
         c9:e5:99:9d:a9:2b:8b:5d:b2:68:39:70:c8:af:2f:69:2e:3e:
         0e:f3:0e:3a:bb:46:5d:f3:08:f5:a2:21:43:f6:7e:fe:38:9b:
         5b:97:e5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:42 2025 by rpki-client