Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File:                     GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier:          B3x425fOpa/CcJji50425vOJq3t+aA1siFeB4eHDBV4=
Subject key identifier:   FE:49:D3:D8:FC:53:D9:F0:70:8A:22:5C:39:74:3E:3C:E3:4D:67:BD
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer:       /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial:       0196C45E244B6002319899DA4B773FA3A7E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number:          10AE
Signing time:             Mon 12 May 2025 12:00:25 +0000
Manifest this update:     Mon 12 May 2025 12:00:25 +0000
Manifest next update:     Tue 13 May 2025 12:00:25 +0000
Files and hashes:         1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: wBpGBVH3lDbhShK1g0zrqyo8j7gcirC53ZvLynmmWuQ=)
                          2: uIeYeZznF-O1grN0M5g3SmcN33U.roa (hash: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:5e:24:4b:60:02:31:98:99:da:4b:77:3f:a3:a7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
        Validity
            Not Before: May 12 12:00:25 2025 GMT
            Not After : May 13 12:00:25 2025 GMT
        Subject: CN=fe49d3d8fc53d9f0708a225c39743e3ce34d67bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:f9:6a:ec:91:f2:92:46:4d:bb:ae:de:fe:
                    83:75:69:ab:de:db:95:40:20:68:0c:4d:00:23:a5:
                    46:7e:b6:fe:d1:8b:e4:9d:1e:92:42:62:8f:ac:a3:
                    19:32:29:03:02:d1:05:cf:77:8b:d1:2f:4e:40:28:
                    ef:83:dd:ec:05:97:43:7a:4e:8c:6e:a6:3a:5a:6f:
                    1d:3a:ef:39:00:9e:32:13:23:d6:41:6c:93:f0:4e:
                    12:d5:e2:67:93:5a:7f:bb:ef:1a:4a:2e:52:a3:13:
                    70:b8:7c:02:1f:e3:ea:ac:61:05:38:46:95:1d:db:
                    2c:b2:c7:0b:b1:e2:83:d2:da:4d:88:42:16:73:d2:
                    c6:f9:f0:50:7b:7a:22:ec:b2:63:04:a2:7b:4c:f7:
                    ea:5e:02:15:36:da:81:84:ac:c0:bf:23:22:a7:15:
                    07:52:2c:d5:af:9d:4a:d2:de:9d:bf:f4:a4:5d:8d:
                    81:04:72:68:e9:91:0d:02:4f:61:cb:9b:94:05:de:
                    53:a2:46:51:55:86:40:ff:e1:86:44:ab:f1:01:b9:
                    a4:e3:13:1a:bf:50:ae:5f:1a:54:b5:f1:01:63:07:
                    20:8a:70:21:b3:af:1c:97:7a:88:ad:4c:46:f9:15:
                    79:9a:8f:69:f7:f4:0e:84:af:3d:0d:94:d9:cc:d2:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:49:D3:D8:FC:53:D9:F0:70:8A:22:5C:39:74:3E:3C:E3:4D:67:BD
            X509v3 Authority Key Identifier:
                keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ab:5e:1d:6f:8d:8d:34:ab:73:f4:fa:bd:83:3d:9f:da:67:
         7c:c4:0c:46:aa:43:02:c8:11:08:b9:14:cf:c0:27:d0:68:1d:
         f7:75:39:fa:64:a6:23:5c:7e:d4:49:6d:ad:d6:ff:04:39:90:
         0c:89:cd:4b:d0:ee:17:c0:f8:dd:e6:14:26:88:38:39:47:d2:
         00:85:20:d3:57:fc:fa:96:53:89:6a:13:18:9f:54:73:fa:48:
         d0:61:27:18:cb:c5:e5:41:27:77:3d:6a:b5:4f:54:21:32:fb:
         2c:9e:b2:6b:dd:d8:87:0c:31:71:33:c7:5b:9f:29:d2:b7:b8:
         1e:d0:a6:10:c6:be:98:e7:c2:3c:d6:c0:0d:35:ff:e7:a6:72:
         3f:b2:87:58:8e:e7:5e:89:f6:a7:9a:cb:66:2e:6c:14:95:17:
         84:9a:ce:3b:1c:d9:8f:91:9c:91:09:df:3f:3e:73:70:92:eb:
         22:fc:97:eb:a8:ac:6b:48:e8:a4:3b:56:72:34:c6:76:ae:a6:
         c5:65:a6:c5:bc:db:2c:f4:24:a7:fd:f8:da:b6:d4:54:c0:d3:
         f8:5b:ab:7e:2d:75:9d:08:c0:8f:7f:c1:6c:d3:83:aa:5f:8d:
         d7:10:d7:73:b2:af:64:09:ac:50:b8:0d:f8:e4:f7:21:ae:f1:
         56:e6:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:59:33 2025 by rpki-client