Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
File:                     GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json)
Hash identifier:          pQBX3VbdcT8FSyvpTWdN66nJtqE6W2JhBvVHqnNQF1U=
Subject key identifier:   5D:83:FF:34:D3:A0:43:F9:AD:44:D0:53:32:8A:CD:A7:B0:66:A5:06
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Certificate issuer:       /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial:       0196BC6E0FD5AA3BC4582744FD51FFA5137C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
Manifest number:          0254
Signing time:             Sat 10 May 2025 23:00:51 +0000
Manifest this update:     Sat 10 May 2025 23:00:51 +0000
Manifest next update:     Sun 11 May 2025 23:00:51 +0000
Files and hashes:         1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: HEXv1BP/mfuPS+Ij3mh2liRo6Jzf4X77hUu8McNwLD0=)
                          2: rm-ctcMQkJoTJnbIDJV3c0v42nw.roa (hash: 0ZXTmxuKHi0QHBCAQY3aiWs6mf8IDw4nbeNjb8cUWcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6e:0f:d5:aa:3b:c4:58:27:44:fd:51:ff:a5:13:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
        Validity
            Not Before: May 10 23:00:51 2025 GMT
            Not After : May 11 23:00:51 2025 GMT
        Subject: CN=5d83ff34d3a043f9ad44d053328acda7b066a506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:85:18:58:bc:62:13:1c:6e:5a:12:b1:e9:
                    0a:86:d2:07:b7:0a:31:10:8b:aa:0a:bb:8b:23:8e:
                    87:23:7b:ab:e0:a8:92:97:fa:a2:85:b0:b6:0e:7a:
                    ea:5f:35:49:9d:af:f6:fa:fd:3e:12:2f:b5:f9:ae:
                    82:64:93:a6:a7:65:57:cc:d3:91:64:81:93:bf:ba:
                    91:d1:a2:92:c3:bb:8d:d6:48:5a:04:b6:35:80:0e:
                    b2:09:12:7e:c1:89:0a:df:a1:46:91:d4:5d:de:4d:
                    ed:15:7d:db:47:c1:32:f4:5e:da:dc:d1:57:2c:cd:
                    c7:de:82:54:b5:24:de:08:0c:57:65:b5:8a:b2:a1:
                    03:a6:e3:b5:ac:7b:af:ae:10:a0:84:b7:5b:69:7a:
                    ba:b0:13:0c:25:71:81:6c:bd:a6:38:a8:5e:da:53:
                    a7:86:3e:12:f5:16:9c:56:eb:ce:39:51:ec:8b:00:
                    9a:3e:e6:5c:56:35:a0:40:d2:bf:3e:d9:0b:94:ac:
                    4b:0e:77:48:8c:40:3c:25:70:33:d8:30:d3:61:91:
                    00:45:72:38:8f:a8:6c:74:c0:73:69:f1:35:2e:40:
                    79:3a:9f:70:fc:e0:6a:bb:7d:1f:9f:8c:b1:90:d4:
                    6a:ab:7c:a1:92:9b:79:60:d9:b2:7a:db:77:30:91:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:83:FF:34:D3:A0:43:F9:AD:44:D0:53:32:8A:CD:A7:B0:66:A5:06
            X509v3 Authority Key Identifier:
                keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1a:71:1e:c9:ac:f4:bf:07:b5:d1:8f:69:f0:05:d4:ac:16:
         2a:5c:3d:bb:7b:5c:57:4d:4b:c4:62:3a:aa:fc:6b:f8:a1:b1:
         b8:cf:a3:f2:e0:df:dc:5c:f5:ec:54:d8:c0:93:c9:04:15:5d:
         da:38:70:72:84:35:f3:6c:b9:00:5b:83:f9:5f:b0:f8:2e:96:
         f6:56:df:70:14:de:9b:07:c8:eb:0f:90:c2:91:66:c1:e7:19:
         2d:7b:27:08:48:75:84:53:da:70:da:68:5d:6a:5a:a5:ed:8f:
         0d:b7:ba:2b:f6:27:55:ae:6a:15:f5:3a:ab:a5:fd:b2:1a:67:
         55:f9:29:53:39:40:a5:96:45:1c:0f:ee:a3:bd:0b:06:49:11:
         d9:e0:10:4b:be:60:af:99:f0:38:ad:5c:6c:b0:30:7e:4c:2f:
         91:5e:fc:8c:39:16:0c:45:ac:93:b3:c7:14:4a:8e:94:31:7c:
         9d:63:58:2b:45:ec:74:83:93:de:36:da:18:70:79:63:8a:fa:
         0a:a8:46:4f:7f:dd:67:3d:80:6b:c5:41:f7:e2:0e:75:c6:55:
         c3:fb:4e:3e:db:d2:11:1a:79:21:27:66:2e:cd:5a:d1:fd:d3:
         ae:6c:93:66:a2:6c:20:0d:ed:43:7b:f3:07:9f:db:21:ee:5a:
         3f:54:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:37:31 2025 by rpki-client