Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File:                     GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier:          j9wdQ4pKO60XJ1TEsHo7LPVAjytzUkINcn45Ttsuy/M=
Subject key identifier:   7C:A0:02:5D:CE:41:12:1F:42:72:7E:A3:7D:F1:84:52:EC:65:49:3B
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer:       /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial:       0196BE2582BADFA8B0FD522384C1D2AE264F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number:          5C
Signing time:             Sun 11 May 2025 07:00:51 +0000
Manifest this update:     Sun 11 May 2025 07:00:51 +0000
Manifest next update:     Mon 12 May 2025 07:00:51 +0000
Files and hashes:         1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: LBhBMmnTr8XCV7jareP/OP+DcAeHbTtfJX157MuvOOE=)
                          2: rGfdr756R5fC-L5KExb4TDe2AiU.roa (hash: 0pA9T2WOS5lidpDpCE8oBEOCaFYY8cP9PqllXsuIgTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:82:ba:df:a8:b0:fd:52:23:84:c1:d2:ae:26:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
        Validity
            Not Before: May 11 07:00:51 2025 GMT
            Not After : May 12 07:00:51 2025 GMT
        Subject: CN=7ca0025dce41121f42727ea37df18452ec65493b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:66:33:cd:53:55:b5:30:af:4e:30:5d:aa:f0:
                    ac:d1:6f:d7:22:f9:01:0d:1c:99:08:c5:16:05:f3:
                    c7:a3:93:c0:11:20:b9:e4:8f:29:37:85:51:c3:93:
                    91:35:35:1b:d2:15:87:11:03:c5:fa:2f:b7:a0:39:
                    4c:0c:a7:83:7f:58:a8:4c:c1:cf:dd:bf:ba:17:77:
                    11:ce:8c:58:97:f5:2f:25:53:9b:69:51:57:a7:64:
                    64:44:92:a6:ed:33:87:da:65:59:83:51:48:c4:6c:
                    0f:eb:3b:84:13:ef:45:bb:b9:ad:02:83:dc:7e:cf:
                    65:8b:f1:23:8a:1a:fc:de:e6:f7:29:ba:49:9e:5e:
                    7a:39:d8:ec:e7:fd:98:a8:ef:1f:ec:e9:af:5f:54:
                    38:96:bb:38:19:f4:b8:68:bc:f7:3c:6f:a0:88:16:
                    b0:ec:ed:ae:69:cd:58:09:bc:57:6d:13:75:19:14:
                    23:2a:31:bb:75:1f:1a:4c:8d:c2:06:e3:60:5d:5c:
                    e3:cd:bd:24:2d:57:d3:1d:69:0f:73:e1:af:32:ed:
                    d4:7a:54:e2:86:7f:b4:22:35:b6:e0:c2:eb:a2:96:
                    21:1a:49:cf:84:f6:b5:ec:c8:af:7b:e4:76:19:6e:
                    8d:71:b7:be:91:e5:19:78:7d:f3:65:84:e2:7f:77:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A0:02:5D:CE:41:12:1F:42:72:7E:A3:7D:F1:84:52:EC:65:49:3B
            X509v3 Authority Key Identifier:
                keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:93:d0:cf:6d:6a:ae:f3:50:61:54:e8:70:dc:49:5d:c8:
         2a:fb:de:57:4b:a5:5c:cf:ab:d5:87:c2:c7:70:ce:3a:0b:ed:
         47:0e:d3:ee:64:f0:34:8b:f9:25:20:22:cc:ac:98:bc:85:ec:
         8b:b9:45:0d:1b:29:ec:a9:45:73:d3:0b:91:c9:e1:41:5c:00:
         0b:e6:dc:4e:23:eb:7e:41:15:a9:96:e1:96:77:03:1c:5f:2b:
         c2:29:38:56:cd:9c:02:68:50:75:83:6c:00:b1:8e:ff:60:b4:
         b7:5e:cf:af:c0:64:d0:98:45:6b:c8:74:99:ff:9a:74:90:b3:
         70:0a:cc:ab:61:cc:a8:cf:cb:e9:b9:a3:63:51:82:13:fe:04:
         0b:cb:31:12:18:27:20:1b:ef:26:6c:28:49:8c:0e:e7:71:18:
         70:92:a2:94:bc:d9:43:2f:6e:09:18:12:ed:61:02:92:a0:3f:
         e4:4b:4a:2f:57:03:f5:55:c4:8c:34:62:55:93:86:54:f9:97:
         e5:e0:8c:25:3a:80:00:0f:fb:3a:85:9a:e2:51:5d:ea:9a:7b:
         b5:3a:ed:d1:1d:32:2c:80:e5:52:2d:f8:52:11:fd:7f:e4:85:
         22:de:19:67:1e:42:3b:db:d1:6d:6c:ef:6e:cc:19:20:0a:8b:
         37:fa:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:38:40 2025 by rpki-client