Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          yal/VzhcY5w2kpQAtufA+LnJzY7VE+zGRWr7ySzqPCI=
Subject key identifier:   38:81:F5:D8:EB:84:56:37:EB:C2:8B:FC:78:A8:97:07:83:9E:5C:50
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       0197B6A0BD1B6D0228A1CE73145DC0B7F1C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          06FB
Signing time:             Sat 28 Jun 2025 13:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:16 +0000
Files and hashes:         1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=)
                          2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: pDZD+AYykF7jMNbQ+5ubteoOdFzXEcTNTg9OOpKeY0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:bd:1b:6d:02:28:a1:ce:73:14:5d:c0:b7:f1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Jun 28 13:01:16 2025 GMT
            Not After : Jun 29 13:01:16 2025 GMT
        Subject: CN=3881f5d8eb845637ebc28bfc78a89707839e5c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:92:f5:eb:7a:53:39:28:c8:9c:43:6e:d5:
                    ad:4e:e4:7a:95:a6:9b:df:e3:70:b4:b4:eb:d2:63:
                    ec:5a:89:a1:a6:b0:12:16:e2:60:d7:e3:27:91:9f:
                    4e:d5:54:7a:dd:43:38:22:dd:5d:8e:9f:55:de:01:
                    9d:1a:7c:84:64:fe:d6:f0:48:1a:4b:b0:09:0d:7e:
                    22:f1:d5:7b:1c:3d:cb:08:5f:3c:0a:f0:2e:d1:65:
                    74:ea:54:62:57:35:8e:ef:68:35:f4:3b:12:cb:33:
                    b4:4e:06:19:a0:ec:b6:db:5b:07:5c:6c:4e:6a:eb:
                    1f:f4:08:d6:d0:55:8e:f3:ef:f8:29:7e:6d:26:c4:
                    d5:3c:ae:07:8d:7e:e7:ae:f8:f2:c9:8b:99:b4:a6:
                    45:50:07:08:a8:cb:3e:14:c1:a8:aa:1c:f6:0e:81:
                    30:11:5b:21:fe:2e:a0:88:b7:e2:e9:51:ff:0c:23:
                    e8:76:8b:43:b6:d3:a9:67:70:19:76:12:87:85:75:
                    ff:31:9e:1d:7d:a1:db:43:0e:05:68:d0:53:66:6b:
                    f1:05:d2:8e:1b:a8:da:30:80:0a:b5:09:8a:ed:8b:
                    d6:89:a8:8b:3c:38:91:d2:df:c6:98:c8:e9:24:b1:
                    81:39:18:3f:18:08:16:91:00:1d:36:6a:7c:a9:84:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:81:F5:D8:EB:84:56:37:EB:C2:8B:FC:78:A8:97:07:83:9E:5C:50
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c5:95:ef:aa:cd:40:93:bc:99:d4:c9:ab:df:28:05:dc:73:
         b5:c7:67:78:11:79:c4:15:26:5a:c7:69:af:36:a0:d5:b6:b8:
         ce:82:2f:e3:cc:ae:bd:16:3d:7b:53:a1:cc:15:bb:21:7d:62:
         b7:57:1c:49:d1:de:10:db:11:20:37:9d:2e:0e:70:40:26:65:
         ed:4f:00:63:c5:01:bb:41:a4:5e:fa:bb:e6:da:10:67:4d:12:
         e3:67:09:33:25:fd:08:04:c0:e7:2f:f7:e2:2d:9f:45:c2:ef:
         d6:9f:0f:fc:4f:38:f8:3f:4c:8d:fe:98:0c:bd:35:42:5e:a3:
         21:e7:63:44:a9:eb:c9:ac:a2:f7:22:32:c1:53:72:cf:0a:95:
         d5:91:d6:34:e4:3f:89:87:f8:34:4d:48:8a:0d:cf:31:35:11:
         28:e0:ba:45:1c:fc:a0:4e:5b:f9:a1:4a:cf:ba:a5:c4:e2:04:
         95:09:0b:82:07:87:ff:33:b2:d2:ff:3b:36:26:d0:95:cd:f0:
         bf:e7:fb:0d:5d:87:52:5c:a5:ef:88:2a:26:bb:e1:7c:cf:79:
         9f:1a:7e:90:c8:f7:d9:71:3f:cf:eb:04:1a:10:1c:92:99:34:
         89:31:50:9d:4e:fe:0c:08:f4:93:d7:2b:8d:b0:df:5b:ba:bc:
         62:1e:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:34 2025 by rpki-client