Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File:                     gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier:          sCSJzuXGotEKYtEK9nOSEYNfQLahBptAFpzLrUECKGk=
Subject key identifier:   6C:0F:DB:ED:B2:ED:DB:8E:7B:33:7D:B7:3A:7A:6F:6D:22:92:8B:4D
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer:       /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial:       019651FFC77D53BBDEB4515EA24DF6F7AA31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number:          08AC
Signing time:             Sun 20 Apr 2025 07:00:39 +0000
Manifest this update:     Sun 20 Apr 2025 07:00:39 +0000
Manifest next update:     Mon 21 Apr 2025 07:00:39 +0000
Files and hashes:         1: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: Y5grKzUdC4LwLR/z1ypqAeKNxhD5PwAShqGVZ05uH6Q=)
                          2: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (hash: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:ff:c7:7d:53:bb:de:b4:51:5e:a2:4d:f6:f7:aa:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
        Validity
            Not Before: Apr 20 07:00:39 2025 GMT
            Not After : Apr 21 07:00:39 2025 GMT
        Subject: CN=6c0fdbedb2eddb8e7b337db73a7a6f6d22928b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:57:4f:56:e2:df:56:63:cf:bf:ac:23:6b:
                    0c:00:95:bc:4e:5f:f5:eb:31:56:8f:17:9f:cc:67:
                    d0:ea:87:d4:0c:4d:ba:7e:28:c9:3b:6d:17:65:c7:
                    25:f8:9a:cc:96:48:e7:14:37:0a:16:6c:46:46:5a:
                    77:37:6c:85:19:56:fe:8e:a3:41:48:2d:e0:a6:00:
                    e2:95:cd:26:9f:6b:99:73:bd:6b:e1:d8:8f:41:64:
                    e7:16:a1:95:e2:a4:42:06:77:8a:34:20:f4:23:5b:
                    86:2e:cd:d3:9b:5c:16:9d:b5:2d:55:4e:25:73:91:
                    fc:7a:9d:75:f8:ca:3a:e1:15:92:0b:39:51:dd:ef:
                    bb:a7:ec:e9:1d:76:52:13:87:2c:f1:f1:12:de:5b:
                    16:58:1a:73:dc:21:cb:2f:e5:b4:4a:25:2e:7c:70:
                    4b:12:7c:2a:80:11:8c:7d:19:7e:c6:5c:f1:9f:40:
                    5f:44:29:d6:fd:a8:fd:33:fb:21:3c:45:c1:6f:f0:
                    b4:b2:fa:f1:c8:f0:db:56:bd:95:a8:aa:1f:d0:b6:
                    a3:21:99:7d:bd:d1:ee:87:e0:9d:17:19:e4:1c:cc:
                    01:e4:5f:6c:0a:9a:3a:ed:7a:80:b0:ff:80:93:1d:
                    e5:f6:72:30:91:21:4c:c7:49:13:17:87:4b:c0:5a:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0F:DB:ED:B2:ED:DB:8E:7B:33:7D:B7:3A:7A:6F:6D:22:92:8B:4D
            X509v3 Authority Key Identifier:
                keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d9:1a:14:d1:95:10:62:84:27:52:25:66:d1:b9:a6:04:52:
         1e:37:68:03:01:cf:97:45:55:17:4e:cf:36:cf:9e:c6:c9:02:
         dd:7a:cf:c7:7f:34:21:f4:e5:87:87:c4:0d:38:dc:d3:59:b0:
         d3:42:50:1b:95:93:a7:d7:4d:22:54:15:9b:d0:76:3a:dd:b5:
         24:25:ff:aa:ee:26:4f:48:8d:db:b3:08:75:94:6c:ec:26:e1:
         88:5a:55:39:68:97:f3:bf:e7:c8:77:01:58:57:20:b4:86:a0:
         9a:1e:fd:6c:9f:eb:37:8d:30:a1:f3:91:ab:77:42:6f:55:e3:
         c9:0e:e9:b1:60:98:1c:59:3c:05:c3:a3:a8:aa:e8:14:3d:57:
         ae:47:56:5c:f1:a9:e0:33:9a:5f:9d:7e:e3:e7:9a:38:a2:fc:
         6f:6b:9c:3f:80:3e:a6:11:ea:6e:51:e0:40:eb:4e:0f:ca:14:
         6d:41:85:2d:df:6b:c6:bc:c8:79:c0:25:bf:f1:85:26:d3:48:
         8f:59:a2:85:bf:98:3a:ec:09:0c:a2:52:fd:ff:2a:6f:bd:e5:
         87:dc:f3:3e:0d:f9:8e:47:d9:8a:ec:c5:8b:40:42:3b:a3:8f:
         11:23:22:fe:1e:1d:32:05:03:ed:76:37:31:6d:29:df:d1:ef:
         d3:b1:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:41:56 2025 by rpki-client