Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File:                     G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier:          Mg1GYTR+i76dR2KeNQ0YNEZ61PVkwc2Z/8+oI0WyW4E=
Subject key identifier:   C0:B4:94:13:05:2F:1F:0A:46:8C:55:5A:E1:8F:31:DC:EC:D8:EA:B4
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer:       /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial:       01964BFD512221763AA5F9573E985CDDA079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number:          0978
Signing time:             Sat 19 Apr 2025 03:00:14 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:14 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:14 +0000
Files and hashes:         1: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: xSJpJWKKGxGyRYEql8qS/BDXOkSEUhFTBX42Z8ySl9U=)
                          2: ogliIW3uJqaM5LS-fzkMZKt_cLk.roa (hash: LLZA+4CzPtqrtq7hIsuRZwdNW4zECVbIb6kWURR2Rw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:51:22:21:76:3a:a5:f9:57:3e:98:5c:dd:a0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
        Validity
            Not Before: Apr 19 03:00:14 2025 GMT
            Not After : Apr 20 03:00:14 2025 GMT
        Subject: CN=c0b49413052f1f0a468c555ae18f31dcecd8eab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:93:15:07:f9:4c:ec:f7:5a:75:db:50:a8:
                    79:ca:a1:89:ab:32:73:1f:a5:fb:2a:d0:a6:a6:5e:
                    f3:a7:4d:a3:9f:31:00:5e:b0:4e:14:75:10:bc:a0:
                    ad:d3:cd:f5:ac:62:59:9b:43:3f:e2:83:f9:1e:23:
                    6e:44:9d:76:93:b8:41:1c:7d:8b:82:5d:36:5e:ba:
                    58:ca:05:f8:84:a5:ef:0e:e7:9e:0d:36:e6:7c:c4:
                    91:08:a3:21:88:6a:f9:9b:e2:47:e8:2e:7a:b7:2b:
                    97:eb:b2:ba:19:58:7e:44:da:73:02:c9:26:00:48:
                    d3:86:20:7b:cb:d7:18:b8:86:15:42:86:1e:96:d9:
                    e1:bc:1f:fb:09:2f:04:87:77:b4:f7:68:f5:27:4c:
                    37:9b:b7:9d:a9:6c:19:f3:de:21:ed:f2:5c:92:ee:
                    3e:c3:0d:68:96:b2:48:e7:d2:b1:31:4d:bd:48:8d:
                    bc:97:a2:7b:24:1f:f6:6f:d7:29:38:48:b5:50:fd:
                    46:c8:f6:5d:55:56:20:2b:b3:91:e2:75:76:2e:0c:
                    46:2a:1b:34:f5:d6:92:03:58:03:d2:95:ea:b3:8e:
                    14:a8:ac:d2:f4:22:c5:4d:64:90:43:15:f2:cb:ae:
                    80:8c:4f:92:e2:0c:10:52:91:0c:3e:30:73:8c:8e:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B4:94:13:05:2F:1F:0A:46:8C:55:5A:E1:8F:31:DC:EC:D8:EA:B4
            X509v3 Authority Key Identifier:
                keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:43:44:03:4c:31:bc:fb:f1:c2:d2:c6:f7:f6:59:c1:e3:bd:
         ac:3f:dd:c4:ea:47:64:ed:dd:96:1e:6a:51:0f:c9:54:9e:5d:
         e3:4d:cd:c2:eb:70:d8:cd:4b:ea:92:c0:92:3e:49:d3:35:6f:
         43:a8:02:de:2b:13:67:08:45:d9:1c:84:e6:13:c9:f2:bc:f3:
         a7:34:ec:cc:56:cc:a7:55:bb:b3:84:13:a2:55:1e:8d:d3:a2:
         b0:f3:61:54:8b:e0:62:17:08:76:0e:06:01:b5:ab:9c:82:55:
         03:d1:4b:fa:77:19:14:8e:8d:b1:b4:dd:2d:38:b3:f4:fd:e4:
         4f:dd:94:6f:80:ef:f2:1e:82:b2:ba:92:49:70:53:e6:dc:bf:
         64:fb:8b:0c:21:e2:34:05:0b:ac:f8:7d:b2:b5:4d:6a:ae:db:
         62:1e:d2:56:7c:e2:7d:07:f8:4e:a8:71:20:56:c6:63:73:0c:
         e3:ec:2b:0b:30:af:8a:ca:22:58:13:79:bb:0f:df:b4:65:6f:
         c4:92:31:3d:f8:38:a4:2b:3d:b8:f0:9b:cf:d2:e5:b0:23:53:
         8e:8c:e0:78:75:27:d6:72:40:9e:70:03:67:26:e7:51:8e:17:
         00:e1:e8:f9:71:db:bc:c3:e8:59:79:b2:7a:b0:3d:be:2b:58:
         8c:32:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:33:41 2025 by rpki-client