Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
File:                     Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json)
Hash identifier:          eNvRNIC7E+3ciQSdKUS6Ioj7d6dwlpqVB+dpI4Dp+x0=
Subject key identifier:   C8:57:87:88:7E:51:82:F5:CF:D8:A1:4E:5F:AD:7D:9E:65:48:20:4A
Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
Certificate issuer:       /CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Certificate serial:       0197B88F631D48EA5C8208497D802FAF24FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
Manifest number:          1208
Signing time:             Sat 28 Jun 2025 22:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:34 +0000
Files and hashes:         1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: 6K9eW8TTno80+VI8MbO57++oziKsJcx2Mj4Kb83+Eck=)
                          2: UujBfWNQbvUkl0lkMK4V-9QiUlw.roa (hash: FohKwxny7khcmiCsTnlSJI6D8Cw6gmfD+vVquMBYGNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:63:1d:48:ea:5c:82:08:49:7d:80:2f:af:24:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2
        Validity
            Not Before: Jun 28 22:01:34 2025 GMT
            Not After : Jun 29 22:01:34 2025 GMT
        Subject: CN=c85787887e5182f5cfd8a14e5fad7d9e6548204a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:2e:c4:a7:63:0a:9c:f5:e7:2b:87:30:5a:
                    4c:e9:21:12:c4:c9:da:33:2a:05:a3:2a:2e:b9:ed:
                    1c:dc:73:b0:ab:d5:e5:c4:3e:55:68:cd:83:b1:3c:
                    96:32:fe:ef:b3:67:39:32:42:b4:34:2f:8a:01:ae:
                    f8:99:9d:84:92:4d:3b:8d:91:bf:fd:f4:e2:48:42:
                    c1:a3:a0:00:7b:67:2a:0c:7a:3b:9a:96:7f:1f:f4:
                    a8:36:29:ed:12:30:bc:97:4e:04:3a:b3:a1:22:65:
                    11:3e:cd:5a:98:a2:54:fa:8c:c7:9d:3d:f7:d3:de:
                    80:0a:d7:53:23:6a:6b:e8:72:43:98:ad:7f:43:4e:
                    ad:c5:af:71:dc:13:e6:1b:95:e7:08:5f:ec:61:a8:
                    89:61:15:0e:de:95:cd:41:1f:93:fe:ac:ce:66:49:
                    18:52:aa:77:c8:59:20:24:be:6c:e5:5f:bd:8b:b2:
                    ef:e6:99:a7:52:10:d3:63:9e:19:99:0c:d5:c0:33:
                    14:37:8c:fa:e4:39:3b:3d:1b:31:ef:9a:2a:cc:b3:
                    52:5d:67:a6:ac:83:82:af:e7:87:b6:c9:86:d3:22:
                    fb:9a:95:d1:05:f0:79:43:a7:7e:ce:ca:aa:b8:85:
                    a7:cc:e7:0c:a5:13:71:1d:9c:ce:a7:39:be:6a:78:
                    a8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:57:87:88:7E:51:82:F5:CF:D8:A1:4E:5F:AD:7D:9E:65:48:20:4A
            X509v3 Authority Key Identifier:
                keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7b:46:bc:a0:78:98:6c:e1:85:4e:2b:46:c2:fa:bc:84:cc:
         ad:55:7e:c0:84:b2:57:c6:93:95:60:72:32:51:74:6d:46:64:
         e4:2c:40:91:ef:c0:32:66:e0:2e:1e:4b:86:dd:07:d2:17:df:
         15:57:61:7d:0d:36:a4:71:21:73:7d:1d:05:f4:4d:bc:4e:3f:
         cb:de:89:1e:21:b6:0c:df:64:19:f5:1e:b8:08:c6:cc:ee:b5:
         1e:f9:76:5a:6c:59:f1:85:db:25:5a:5b:67:98:39:1f:c2:17:
         cd:93:dc:dc:a7:68:60:58:07:e1:84:96:34:21:f3:d2:d4:ef:
         d9:7c:f3:46:9b:3d:df:2e:6c:67:b0:39:23:76:13:5b:f0:8e:
         7b:d5:1a:1b:fd:38:a5:55:76:4a:3b:4d:17:17:63:7a:be:c1:
         57:3b:15:09:8f:c9:01:56:62:5c:a0:eb:51:9d:d1:a3:35:b9:
         43:c1:97:23:98:5e:60:8d:f3:59:c6:94:67:ca:e2:70:1d:c2:
         7a:e7:6f:67:1e:4f:f7:d7:2e:d0:ec:fd:b3:05:d8:0e:43:da:
         76:c8:8f:1d:13:ac:f1:b6:c0:98:3a:d1:68:8a:da:3f:07:78:
         30:9f:4a:bc:17:fe:dc:4c:66:64:09:76:03:a9:f3:e7:ea:a5:
         34:1d:d5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:05 2025 by rpki-client