Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
File:                     gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json)
Hash identifier:          Woqxc9L0x7agsq+JndQUSUVMuzQwiESurljEz7TkjH8=
Subject key identifier:   7B:09:55:DA:DC:31:5A:D3:9A:51:27:87:2A:A9:0D:39:E2:ED:8A:B3
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Certificate issuer:       /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial:       019641E8206A41CCFD27E2C7B3DAA49185F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
Manifest number:          0CB0
Signing time:             Thu 17 Apr 2025 04:00:53 +0000
Manifest this update:     Thu 17 Apr 2025 04:00:53 +0000
Manifest next update:     Fri 18 Apr 2025 04:00:53 +0000
Files and hashes:         1: L47fpbavJjM8YwHHhvMkJOYd5vE.roa (hash: IzwhrGUTddMft7RJzZ/2mXaFd/PY/Xp0a/SU/LUo1YY=)
                          2: dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa (hash: PjGfWgf8wj53bPtlEQkRSwYcsy5G/eLRYAuG9DVnO5o=)
                          3: dP1XMz72bEIizOJx_8e3gubbo08.roa (hash: 34zsks6roiR3rEQ6SRISFcNl3J9bQeeIWhcKnK78jO8=)
                          4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: clmz7AiczhSYoCDyOxURrrcuO5xsk76ev8A3hm0jWAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:e8:20:6a:41:cc:fd:27:e2:c7:b3:da:a4:91:85:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
        Validity
            Not Before: Apr 17 04:00:53 2025 GMT
            Not After : Apr 18 04:00:53 2025 GMT
        Subject: CN=7b0955dadc315ad39a5127872aa90d39e2ed8ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:e6:be:08:96:9f:e7:f6:20:04:b7:de:d8:
                    6d:5a:a2:21:ee:a9:df:ca:28:bc:97:69:d1:79:74:
                    2a:fc:b6:32:d1:27:5a:0e:ca:49:44:c0:49:74:e3:
                    40:6a:63:c4:b8:96:fb:26:cd:35:63:1e:14:da:6c:
                    3a:db:f6:b1:19:55:b9:31:67:78:07:46:54:31:df:
                    87:60:1b:46:84:77:ae:75:cb:ca:9f:9e:5f:c6:70:
                    d3:b5:96:27:a4:eb:da:f8:99:80:b2:d9:90:23:04:
                    22:49:15:38:ca:ad:4c:ae:d1:f7:ab:12:3e:68:47:
                    10:51:a5:2f:a7:24:df:ff:ca:d4:cf:89:57:f8:44:
                    11:53:98:f3:88:2a:f8:94:5b:81:96:09:0b:ab:71:
                    d0:ed:be:79:50:16:ec:65:12:b5:64:dc:51:3c:e1:
                    71:01:38:b8:c8:8e:be:67:1e:f6:9b:3a:c3:31:f1:
                    e1:1b:d3:2d:35:2e:74:b6:9d:82:1d:5a:db:7b:af:
                    5f:8c:db:50:ad:a5:06:b1:f7:af:b6:83:ab:e5:55:
                    64:90:bb:2f:1e:e4:5e:0e:e2:d8:68:a5:34:1a:12:
                    b8:8b:33:45:44:7e:e3:d7:08:86:a8:3e:63:08:b6:
                    bd:02:18:54:d0:54:ab:eb:11:98:63:f4:83:fa:44:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:09:55:DA:DC:31:5A:D3:9A:51:27:87:2A:A9:0D:39:E2:ED:8A:B3
            X509v3 Authority Key Identifier:
                keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d5:7e:97:7c:84:4a:81:3e:3e:db:61:8c:87:50:a9:c9:49:
         d7:96:2a:16:09:82:95:76:44:43:81:64:52:c8:f5:0b:aa:c9:
         fb:5b:bc:b2:58:fe:3d:70:ff:3d:9d:dc:2f:e8:cb:04:74:01:
         f7:b2:dc:8d:bf:98:ff:e4:ea:a4:51:60:87:ab:81:07:a3:3a:
         75:56:0f:9f:97:e5:c1:9e:80:61:57:67:d6:96:60:87:44:10:
         af:ad:3b:56:0b:04:df:64:ee:e4:a6:fb:52:54:1c:aa:28:75:
         4a:b7:99:c5:98:99:2e:0a:74:14:c5:61:f5:45:e6:37:e0:5d:
         c9:32:ca:19:ef:63:e1:3f:d1:4a:ac:fa:27:cd:2a:98:65:67:
         b7:37:ba:84:38:35:fc:f8:1a:d5:01:cf:89:69:cc:4b:12:7c:
         10:06:b2:55:8c:33:18:ca:1e:92:7b:ca:1f:eb:27:09:9f:00:
         0c:9f:6a:a2:37:0c:fc:9b:f1:b3:a1:74:dc:f0:16:f3:99:49:
         d0:52:0f:5a:ce:c6:72:43:65:84:d6:b0:7c:26:63:db:bc:36:
         74:f0:51:b8:e0:37:42:7c:cf:57:02:97:2f:99:81:20:53:52:
         96:b3:35:1b:b0:b4:18:97:03:53:bf:a7:fe:be:b5:df:ee:f2:
         89:1d:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:59:34 2025 by rpki-client