Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
File:                     GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json)
Hash identifier:          UNmsr5rCMuQcvXyy/fLL+REKNaPDQR39mqHMkriAK9A=
Subject key identifier:   59:AC:16:3B:5B:E9:CF:B8:17:EE:FB:C9:AA:EF:F8:74:58:C1:9E:66
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Certificate issuer:       /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial:       0196BCA4E13D94F3D569D85B9198A42BB2CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
Manifest number:          0BF7
Signing time:             Sun 11 May 2025 00:00:44 +0000
Manifest this update:     Sun 11 May 2025 00:00:44 +0000
Manifest next update:     Mon 12 May 2025 00:00:44 +0000
Files and hashes:         1: 7fCLxFxs3uirSoBmBAB2IiaPCDE.roa (hash: coxqqIVz+Sd0ZSUD8QWyHK8rOUGIW44eWb9ORBY27qw=)
                          2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: niy1BnJlHJRQHiXTdLYw/nOYWRFjMZoeObUYvGu9zaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:a4:e1:3d:94:f3:d5:69:d8:5b:91:98:a4:2b:b2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
        Validity
            Not Before: May 11 00:00:44 2025 GMT
            Not After : May 12 00:00:44 2025 GMT
        Subject: CN=59ac163b5be9cfb817eefbc9aaeff87458c19e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:74:00:8c:6d:72:1d:6a:6d:c7:35:99:d7:
                    ab:1c:e6:d9:df:81:4a:fc:58:62:77:89:60:30:c2:
                    64:32:86:cd:ba:c6:16:2a:13:d8:43:e7:e4:6f:55:
                    1a:ad:20:54:5f:c0:69:91:11:76:8d:e1:62:23:94:
                    8d:55:30:4e:2d:2f:9e:bc:7f:bc:a6:a1:5f:3f:ce:
                    b0:8b:ce:b2:88:52:64:2a:d3:ed:93:71:fe:0a:b0:
                    84:18:8e:44:21:d7:f5:83:da:b6:fe:b5:fc:64:da:
                    97:dc:de:21:ff:13:1c:71:88:25:c7:d1:c6:48:b0:
                    35:75:aa:8d:e8:ff:04:0c:2b:2a:e1:73:3b:6e:1c:
                    ec:f7:fc:79:bb:be:ae:51:7d:29:94:fa:01:49:5a:
                    be:2c:18:24:55:70:27:d0:f2:f6:c2:41:1e:8c:96:
                    c1:79:9a:11:62:c6:3a:32:a3:bd:bd:ca:2b:38:ed:
                    3c:04:c2:84:f9:12:ed:3f:5b:34:54:6a:6f:bf:c4:
                    f7:5d:35:04:f2:9b:fb:c4:3f:c0:18:29:08:80:e7:
                    11:23:38:57:99:9d:84:12:73:88:14:75:c6:e4:86:
                    24:4b:30:4a:0e:ed:06:bb:e3:31:70:4e:32:94:c3:
                    fc:1c:08:25:04:11:8e:7b:4d:eb:bc:d0:91:f1:ee:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AC:16:3B:5B:E9:CF:B8:17:EE:FB:C9:AA:EF:F8:74:58:C1:9E:66
            X509v3 Authority Key Identifier:
                keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:eb:60:d0:a9:47:69:c3:b5:bf:7a:01:91:ed:37:92:6b:c6:
         0b:2f:07:e8:ad:65:f0:ab:ff:34:82:a9:3b:fb:f5:9e:bb:6a:
         c2:3f:62:3f:07:5a:db:05:aa:91:8b:42:f3:71:23:98:11:79:
         5a:40:b3:d4:e4:59:ef:f0:2a:f2:2d:9d:7d:32:47:f9:ef:8f:
         ae:1f:f3:0a:67:c9:19:4f:70:bd:7b:6a:4e:b4:5b:01:08:2b:
         99:41:eb:11:2f:fa:94:75:7f:f2:dc:a5:ac:7a:48:00:18:b3:
         ab:3d:a7:0d:70:f9:6d:13:c4:6c:6a:30:bb:6d:ee:84:e8:d9:
         d5:d7:9f:ce:da:b3:9a:9a:f0:80:95:00:f8:de:cb:9a:d7:ef:
         47:14:36:46:d3:44:8e:c7:70:c9:2e:be:ac:11:97:1b:07:e2:
         28:c9:73:55:3f:ea:6d:39:31:52:33:62:98:2d:16:24:d0:02:
         8d:2c:58:26:8d:38:1b:fc:1b:46:c1:4c:1b:eb:b3:14:0e:3a:
         df:25:fd:8c:5a:5c:92:63:ff:2a:11:0b:90:dc:04:e3:d3:96:
         07:b1:bf:c1:96:83:83:5e:56:29:42:1b:f3:49:b0:c2:ec:a6:
         fe:83:c6:2d:57:eb:b4:bc:36:d4:e0:bb:b3:85:c5:8b:9b:87:
         79:72:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:00:36 2025 by rpki-client