Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File:                     GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier:          F7fblQs783sEgK948BHUjafwlZOVSvohVNPoIw1ml8E=
Subject key identifier:   B3:FC:BF:36:44:11:AE:C8:50:9A:60:64:C8:33:A3:22:12:37:F8:92
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer:       /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial:       01974AB1AC0A105FBA7A4B6DE00DBE5CB65B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number:          13AA
Signing time:             Sat 07 Jun 2025 14:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:47 +0000
Files and hashes:         1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: MlxU0ySySFw7SZ+t9AmQwwjwwi/e77pYJpeP0aRjyrA=)
                          2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:ac:0a:10:5f:ba:7a:4b:6d:e0:0d:be:5c:b6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
        Validity
            Not Before: Jun  7 14:00:47 2025 GMT
            Not After : Jun  8 14:00:47 2025 GMT
        Subject: CN=b3fcbf364411aec8509a6064c833a3221237f892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:50:d2:7a:5f:64:86:f6:9b:41:7b:69:36:
                    5e:62:f5:bb:85:f5:ee:4c:23:5b:6f:bf:5e:70:af:
                    59:32:1b:ec:e1:da:f7:0c:b4:f7:45:8b:0f:be:74:
                    9c:90:5a:af:b1:00:69:f1:62:58:04:cf:49:5f:b1:
                    1a:9f:34:ae:7c:33:1c:0e:62:86:c3:e0:c7:c0:a8:
                    e0:d1:07:77:16:95:af:3d:04:3e:47:eb:83:a3:d5:
                    12:a2:38:46:48:7f:22:fc:62:4d:23:52:95:e9:c3:
                    ab:9b:7c:a0:37:01:89:f8:7c:2d:11:0b:4c:79:ad:
                    73:94:c6:ad:fb:1e:cf:37:88:26:55:cf:00:36:e4:
                    fe:22:1e:e4:70:63:3e:80:9d:e9:64:8c:be:f5:a9:
                    92:65:c5:3a:af:90:55:57:bb:ce:88:79:21:21:24:
                    cb:e1:d4:69:9c:9b:0c:f6:5e:9e:95:18:1d:f7:11:
                    71:66:07:b8:f6:6d:cb:61:0d:65:67:2a:77:a8:9c:
                    e4:fe:9b:5a:52:01:f9:04:03:85:d9:41:5a:19:7b:
                    14:fa:0a:13:b1:7f:eb:5d:8e:e1:43:31:9a:4d:21:
                    35:4f:1f:e7:ec:a7:ed:d6:b1:f1:69:a6:9e:69:d7:
                    81:9f:e6:15:04:ee:ac:90:8f:ad:11:b8:37:a0:ec:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FC:BF:36:44:11:AE:C8:50:9A:60:64:C8:33:A3:22:12:37:F8:92
            X509v3 Authority Key Identifier:
                keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a7:fb:62:f3:cb:53:0a:3a:a4:10:ea:bc:9b:73:63:74:49:
         50:00:4f:44:5d:28:be:9c:0f:9e:68:83:48:ef:04:c6:2d:13:
         f9:3a:4c:c2:59:5b:0a:94:24:ab:1f:42:a3:b9:0d:a4:46:20:
         90:50:4a:59:aa:e1:43:41:0f:bd:58:27:e6:0c:33:62:08:98:
         a3:47:d5:95:3a:38:af:4c:f6:89:31:14:94:34:af:7e:a7:10:
         16:2f:b8:ae:2b:56:72:b4:53:30:5f:56:aa:7a:a2:5c:4d:94:
         47:7a:2c:d2:a9:5d:97:19:24:49:60:c6:ed:95:55:3e:10:81:
         68:96:e2:a2:42:0a:59:d1:c7:1b:f6:2e:24:cb:c1:38:d8:44:
         52:4a:fd:6e:b5:3e:2e:8a:a3:f0:82:fc:14:40:14:e9:ea:c4:
         3c:50:5b:f1:0d:8c:d3:80:ab:01:51:74:e2:fa:67:5c:b5:2a:
         50:79:5e:1e:ba:ac:6b:a5:ea:27:f7:ce:05:0d:2b:e7:2f:97:
         fa:7f:c4:a1:19:58:df:94:ea:62:34:ed:bf:8e:3e:b2:d9:af:
         5c:29:eb:78:9b:8a:9a:e0:f6:71:33:ee:37:1a:b4:4f:c3:d6:
         27:22:aa:4f:b6:41:11:6a:c1:83:05:d0:2f:7d:b5:b8:cf:81:
         97:b8:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:42:25 2025 by rpki-client