Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File:                     gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier:          G2hWwWgpHf1cu2Rhu2RGjzd79a7sSADnXuJHfYn0ZbA=
Subject key identifier:   A3:01:C9:1E:38:DC:C5:9E:40:6C:CD:45:EC:B2:DF:0B:28:DC:18:20
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer:       /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial:       0197B70E7FA6DC02A8F4122CA75D4FB64995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 15:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:09 +0000
Files and hashes:         1: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (hash: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=)
                          2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: EYH3Lr9CNJx2jCPf7uaT2iqN7yfIoU3BCTbD2jGHh1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:7f:a6:dc:02:a8:f4:12:2c:a7:5d:4f:b6:49:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
        Validity
            Not Before: Jun 28 15:01:09 2025 GMT
            Not After : Jun 29 15:01:09 2025 GMT
        Subject: CN=a301c91e38dcc59e406ccd45ecb2df0b28dc1820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d4:d9:63:2c:bd:e2:0f:d2:61:cb:6d:f2:5a:
                    c2:e5:83:7b:51:0d:a2:ac:d0:f4:4a:5b:60:7c:88:
                    00:a5:da:ba:cf:ab:bf:53:22:76:4e:93:b5:17:04:
                    62:65:03:51:36:e6:f5:8b:e8:48:71:2a:2d:f3:ae:
                    65:d2:c0:c4:07:e6:7a:19:7f:ee:fe:f3:ba:7d:b7:
                    ca:4f:21:6e:e9:59:f5:7a:fa:68:5c:ea:0a:c2:c0:
                    b0:d5:34:f7:d4:1a:74:ce:56:7b:f9:10:15:7f:f8:
                    0d:e1:32:4f:af:c8:e8:64:56:d7:e0:ea:b7:1f:ef:
                    e8:5d:68:d9:09:61:b4:41:33:a2:b3:b0:3a:40:3d:
                    5b:94:d0:07:0e:59:64:71:1c:4e:be:98:11:17:30:
                    df:3c:f9:88:8e:35:34:8f:87:1c:13:7a:1a:45:64:
                    ed:d0:3e:c7:69:64:d8:04:88:73:49:a7:8b:48:80:
                    60:80:f5:d5:59:89:e0:8c:34:50:29:f7:f1:2a:27:
                    4b:de:6a:18:04:00:73:50:cc:7f:ce:f0:8b:70:47:
                    69:02:1e:b2:ee:49:20:4d:4f:12:94:dd:4f:d0:da:
                    c6:53:90:f5:d5:38:22:4a:7c:ad:66:93:ab:79:3b:
                    76:89:f5:b1:3e:c5:af:7b:47:34:55:76:83:6e:d3:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:01:C9:1E:38:DC:C5:9E:40:6C:CD:45:EC:B2:DF:0B:28:DC:18:20
            X509v3 Authority Key Identifier:
                keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bb:f8:0d:16:4c:54:98:82:fb:0f:b5:ce:dc:84:7f:fe:a4:
         4b:84:b0:9b:35:97:2a:0b:95:82:4b:66:5c:b9:4d:d0:fc:4f:
         5d:69:57:ba:26:06:ff:56:cb:fb:ca:99:18:e7:f8:8a:53:e8:
         f2:6b:46:d3:fa:25:24:de:95:13:1a:53:0b:4c:20:50:8c:3a:
         2c:3f:b0:20:ec:e3:46:93:41:d1:68:98:f5:02:0e:04:82:a4:
         04:8b:53:69:51:88:02:f0:5a:2c:a3:02:d5:a2:48:a3:44:d3:
         a9:78:fd:3c:3b:01:8d:06:e5:0b:c6:39:44:60:63:9f:c5:4e:
         be:0e:1a:5e:5f:1f:ff:45:5c:82:21:bd:aa:8c:4c:a1:4d:68:
         7c:61:88:86:98:1c:34:d4:7f:39:66:7a:18:a9:16:4b:02:ad:
         be:56:ac:d1:a0:33:54:02:6c:98:05:4f:72:c9:ec:6c:40:ed:
         4e:48:7f:6c:5d:31:50:71:dc:16:8c:f9:98:df:19:5d:8e:90:
         82:9a:08:40:e0:e9:39:f4:b9:69:34:be:63:f6:bc:11:f6:c7:
         87:43:73:bb:f3:a2:2d:da:e0:aa:0b:2d:17:e8:49:83:80:31:
         d2:b2:5c:e3:78:e4:53:2f:d3:8f:c1:d4:42:a0:9f:b6:46:93:
         da:de:8d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:54:18 2025 by rpki-client