Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File:                     GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier:          g8zEi0QukRbTFo7xTyA7DULNIl6kQ3v7muRIrkZJ9Js=
Subject key identifier:   57:54:97:07:D2:D6:D4:5A:30:13:2F:32:87:19:31:77:05:7F:51:A9
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer:       /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial:       0198D583422E9E3661685B42D85780749BEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number:          0724
Signing time:             Sat 23 Aug 2025 06:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:05 +0000
Files and hashes:         1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: l8EmGbfsYGbU/n6nZGJaSN3NFcqjb6e+wqZB7PEraMA=)
                          2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:42:2e:9e:36:61:68:5b:42:d8:57:80:74:9b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
        Validity
            Not Before: Aug 23 06:00:05 2025 GMT
            Not After : Aug 24 06:00:05 2025 GMT
        Subject: CN=57549707d2d6d45a30132f3287193177057f51a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:d3:a4:00:cb:75:36:83:db:a1:6e:66:b9:
                    ad:78:b9:77:f2:ec:81:c3:27:31:3c:1e:32:01:5c:
                    f5:f3:34:a3:49:43:d8:ae:28:7f:cc:8b:ed:3a:b3:
                    e6:ea:52:bb:f8:59:e1:94:16:0b:1c:6f:bc:ce:79:
                    fb:c0:75:d4:59:d4:33:86:4a:69:a6:8b:a0:17:f7:
                    28:ae:fb:77:b8:8b:44:81:ab:39:82:51:45:2e:7d:
                    e6:7d:18:75:f2:72:ae:f6:cc:84:39:17:07:a5:4c:
                    03:83:cb:7f:4d:b8:ed:46:af:de:79:e4:e6:12:57:
                    d7:81:b7:ff:cb:bc:8d:66:1d:4b:ec:be:77:17:7d:
                    57:ee:2c:0e:3c:aa:6d:9b:03:d3:be:6f:67:b3:80:
                    ff:0b:8e:07:8e:6b:98:dc:77:a4:44:f3:17:58:91:
                    96:b8:dd:08:c1:52:2a:67:25:cb:b1:22:a9:07:6f:
                    06:16:ab:21:66:34:0f:1d:a3:8b:c6:b7:35:a0:52:
                    5d:42:e1:2d:b1:0f:b5:cc:9c:76:c9:a6:09:6f:f2:
                    f3:af:d7:98:7e:31:10:a6:e8:ba:62:6e:24:48:cc:
                    e4:8c:49:ed:35:8d:b7:ec:e6:ac:ab:c3:ff:d0:e9:
                    af:24:97:40:91:0d:78:00:ee:a4:36:43:20:49:df:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:54:97:07:D2:D6:D4:5A:30:13:2F:32:87:19:31:77:05:7F:51:A9
            X509v3 Authority Key Identifier:
                keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:65:c7:35:e9:84:7c:18:9a:53:e2:54:06:b6:7c:80:0b:12:
         7b:7c:a7:f7:ae:bc:7c:8e:8e:66:13:07:ed:34:1e:e0:85:d8:
         10:b0:c7:d4:da:da:d2:ca:13:11:5c:6c:76:d9:e8:53:74:f4:
         b2:a4:02:11:79:cd:9c:35:d3:37:2e:0b:0b:de:b5:f5:07:26:
         92:dd:6f:0e:71:51:41:27:8b:ce:07:09:b4:d9:ca:48:85:84:
         98:f2:51:f0:1f:ab:a9:76:88:81:b2:32:9d:bc:67:17:39:2c:
         fb:65:6f:6a:12:53:4e:d3:39:65:72:b8:24:49:6e:d5:04:f2:
         1e:8a:5c:59:8c:b2:ae:32:28:e4:54:d8:a8:15:61:d2:5d:43:
         ce:f1:92:07:65:82:6d:da:1b:0c:92:9e:51:d9:9e:88:3e:c8:
         cb:3f:6d:8a:75:1c:7b:93:32:e5:8a:cd:ae:e4:5e:c5:08:68:
         be:1d:d5:50:c1:ba:c3:7e:d5:85:a2:2a:e8:d5:eb:40:59:f5:
         bb:45:33:ee:5f:64:0d:2f:00:d4:99:5b:4d:72:d8:9f:7f:bf:
         34:e3:2d:77:da:34:d9:3d:4b:b9:76:1c:03:d3:b3:b8:ce:e4:
         38:70:05:f7:99:64:3b:79:6c:ba:68:e7:78:3e:80:79:69:0c:
         2f:af:e3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:48 2025 by rpki-client