Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File:                     GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier:          F4lhPi7Sb01vcIt8fTfMpQfosnCRPybW0gx+cO+x52o=
Subject key identifier:   A6:7E:3B:EF:23:E6:6E:CA:D8:A9:12:AD:75:30:05:ED:64:13:98:AF
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer:       /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial:       0196BB241A946585E5D2A8DCB79590011DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number:          010A
Signing time:             Sat 10 May 2025 17:00:27 +0000
Manifest this update:     Sat 10 May 2025 17:00:27 +0000
Manifest next update:     Sun 11 May 2025 17:00:27 +0000
Files and hashes:         1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: ARgXZ/DK3zc7cTA+JVTLsSHVgdZ65D7R9Wpz2Or5QMs=)
                          2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:24:1a:94:65:85:e5:d2:a8:dc:b7:95:90:01:1d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
        Validity
            Not Before: May 10 17:00:27 2025 GMT
            Not After : May 11 17:00:27 2025 GMT
        Subject: CN=a67e3bef23e66ecad8a912ad753005ed641398af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:3b:9f:85:30:de:1d:af:e2:46:05:8a:cb:
                    20:7e:f6:11:14:74:20:32:8f:0d:a4:b1:0c:62:cc:
                    f6:fd:79:c7:59:ba:22:18:4c:97:3f:d2:7e:50:a5:
                    be:62:65:5a:83:ec:9a:89:5a:3c:b2:47:50:02:e6:
                    35:29:1c:39:45:bf:60:b0:38:15:20:81:52:a6:23:
                    2d:ad:d9:3d:e2:74:f5:c4:58:66:04:84:12:d0:4a:
                    d1:e9:fe:03:5e:d2:f8:98:a8:10:fa:f9:4a:70:e5:
                    4e:77:61:ef:f9:1c:a9:d3:1f:43:b9:ca:3e:9b:cb:
                    41:f5:2a:49:4d:34:50:64:91:61:36:3b:81:d9:0e:
                    1e:32:11:4f:97:e9:e5:0d:cd:e3:ae:04:2d:99:da:
                    10:d8:34:f8:55:1c:43:77:5e:5d:46:5c:ec:93:7b:
                    3c:45:fa:e0:dd:9a:f8:44:69:b5:ea:bd:ba:15:0a:
                    7a:41:04:b5:1e:48:ff:dd:11:f0:0d:3e:b1:dd:07:
                    78:df:4a:58:58:03:d1:61:45:49:05:01:3b:cd:6a:
                    bc:9b:56:40:0c:6e:94:23:49:56:cd:75:46:11:dd:
                    6e:2e:99:1a:cc:96:34:9e:ca:75:e9:92:3e:03:b3:
                    a9:be:a1:db:86:52:36:48:60:7b:7d:dd:c6:52:c3:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7E:3B:EF:23:E6:6E:CA:D8:A9:12:AD:75:30:05:ED:64:13:98:AF
            X509v3 Authority Key Identifier:
                keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e2:9b:e5:e2:23:a3:9e:57:d3:93:3c:95:3e:d2:21:f1:a3:
         d6:41:51:e7:e7:88:d8:ae:0b:ae:57:f7:70:0a:ba:f1:3d:ae:
         3b:8f:d2:b9:29:72:22:df:74:5a:84:43:37:57:7b:9c:ab:2e:
         13:1f:a5:d9:67:04:05:f6:af:8f:ca:1e:e7:e2:a6:83:18:fa:
         43:60:0e:68:b3:2c:62:2a:7d:ef:25:bb:1a:9d:db:29:6c:05:
         82:17:ce:f2:98:93:07:d0:b0:d1:a5:18:4b:82:b0:1b:ea:af:
         e9:47:c9:2c:69:62:e1:38:b4:0d:3b:68:56:80:1c:9f:fc:af:
         d7:4e:63:47:53:3c:8c:4e:79:31:f0:24:c7:e9:e6:57:45:88:
         29:ee:52:cd:71:fe:36:c0:0c:0d:16:a8:2c:01:49:82:be:7c:
         e8:be:39:23:a7:4a:83:53:e6:12:eb:35:28:5a:ee:a9:88:ab:
         0a:ef:78:b7:11:46:80:f0:99:82:f6:02:22:58:c9:9b:fa:71:
         11:41:d6:3b:aa:92:a5:49:62:4e:25:90:c6:67:63:c1:c8:76:
         5f:c2:a5:b2:99:b8:2f:6d:34:67:c3:50:c1:1f:86:c2:62:ce:
         70:d2:d1:33:22:6a:5c:a5:2b:46:83:a4:2f:3c:f3:a0:82:69:
         64:b9:23:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:43:24 2025 by rpki-client