Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          3TnIyKx2MXCBKqPIu3Jyles5AQV5Z0wMrria38Zd1hw=
Subject key identifier:   3B:97:60:01:20:B1:86:15:A2:C6:86:59:ED:30:FF:EC:8C:E0:55:13
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       01974779EC1B6A28285278ECE94CEECC0FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          1581
Signing time:             Fri 06 Jun 2025 23:01:01 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:01 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:01 +0000
Files and hashes:         1: 1iYEgcqm-mVKBLd2WjzT59pt1Xw.roa (hash: ewHcbw+PNeGShWbnRhXrGjXtzrFjBvJAIqeP6DT6ZjQ=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: p0kf2bq/q+OO8b1rmzOf9JSWXQWq45CzmEBhPGHxMlg=)
                          3: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (hash: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=)
                          4: lCgKihl6lv9I1HmInNqD60nii-E.roa (hash: +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=)
                          5: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (hash: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:ec:1b:6a:28:28:52:78:ec:e9:4c:ee:cc:0f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Jun  6 23:01:01 2025 GMT
            Not After : Jun  7 23:01:01 2025 GMT
        Subject: CN=3b97600120b18615a2c68659ed30ffec8ce05513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:d2:24:fd:5d:67:5b:43:4f:48:c0:d5:b3:
                    67:b8:51:ad:2a:5a:5f:96:b1:c9:03:78:43:f9:a2:
                    20:c6:52:cc:74:3e:13:59:9e:9e:c9:09:ef:af:6b:
                    e3:cf:50:e0:34:ce:dc:31:e7:a6:d1:3f:b3:96:08:
                    a6:2d:2f:37:b1:4a:b5:60:53:91:3a:ed:71:c2:99:
                    45:b2:09:8a:4a:ba:a5:eb:2f:80:65:25:6a:f9:07:
                    e9:79:ee:c2:a6:c3:e9:26:93:f9:53:fb:d6:31:df:
                    7b:71:71:0f:33:76:e4:fb:6f:89:cb:61:91:61:24:
                    57:94:9a:51:6e:0d:39:59:bb:ec:54:99:86:26:9e:
                    1a:af:be:75:9e:aa:ff:b7:99:52:d5:88:5f:0b:b5:
                    62:a4:9d:e1:38:1d:ea:77:0b:1c:8d:2b:6a:20:68:
                    d2:be:d8:5c:8a:f8:8d:58:06:65:1e:00:36:8f:a2:
                    21:de:51:d3:db:ea:17:c2:4e:15:6f:49:e7:49:34:
                    a8:91:e3:a3:a9:aa:63:af:4e:3d:6a:b9:cb:eb:11:
                    c2:d5:78:dd:46:98:d2:42:d2:9b:e7:19:53:d2:c3:
                    09:5c:02:94:60:2f:e0:23:3a:c0:c9:44:55:e0:47:
                    67:99:0a:7a:38:18:d4:f0:e7:b5:84:3b:78:a4:d4:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:97:60:01:20:B1:86:15:A2:C6:86:59:ED:30:FF:EC:8C:E0:55:13
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:63:8f:ca:7f:55:00:4e:98:ac:40:a8:79:15:aa:d4:b6:bd:
         fe:3e:5c:2a:59:78:80:c5:ab:82:6a:05:6b:79:78:33:e0:fd:
         1e:f8:ce:97:13:b2:46:18:f8:27:09:39:ff:dc:01:59:3f:4e:
         82:fe:6d:b0:82:ff:6e:7d:76:fb:0f:0f:d7:0e:9b:4e:72:7f:
         9e:3f:2e:ef:41:35:4c:47:ae:b8:23:de:85:46:dd:33:47:4b:
         c1:95:30:ec:0d:b0:76:e9:85:53:24:79:b2:cd:96:55:a1:c2:
         66:7a:5a:d6:a8:82:fa:45:1f:68:34:d9:29:ec:06:ba:f5:f9:
         68:17:b0:d3:fc:68:bc:a1:f8:9d:6c:23:5b:aa:fb:71:ec:18:
         83:14:69:83:ae:8d:33:71:5f:ef:d7:b4:75:12:06:e2:db:af:
         ee:87:66:7f:bd:52:0e:bc:58:aa:0a:4f:88:a1:40:d9:b8:b6:
         68:17:ab:7b:2a:30:ae:6e:43:f1:fa:c2:26:a5:1e:e9:31:88:
         8b:6e:c7:0b:d6:e4:70:6c:5c:a0:c7:a2:f9:15:7f:7d:7f:b3:
         79:48:6a:5e:96:56:84:af:70:cb:0f:cb:ec:c1:0e:46:4e:78:
         b7:53:e9:73:8f:d0:87:a5:34:3c:71:0e:d9:c9:06:4e:9f:f2:
         f8:f1:28:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:10 2025 by rpki-client