Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File:                     gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier:          h/wME7z73yLHWl4gWcIN5WIjHVIPqRd0oJjL67iU/Og=
Subject key identifier:   A4:BC:F2:34:BD:C0:61:BC:98:21:A4:24:05:AC:B1:DF:76:22:04:0D
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer:       /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial:       0196D6D21B02966DD356EBFBAF224125CD50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number:          018C
Signing time:             Fri 16 May 2025 02:00:15 +0000
Manifest this update:     Fri 16 May 2025 02:00:15 +0000
Manifest next update:     Sat 17 May 2025 02:00:15 +0000
Files and hashes:         1: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: q+8TVMKWVs1gFc6yOuI56Xr5OqAgGWNX7UWFg6y4/5E=)
                          2: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (hash: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 02:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d6:d2:1b:02:96:6d:d3:56:eb:fb:af:22:41:25:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
        Validity
            Not Before: May 16 02:00:15 2025 GMT
            Not After : May 17 02:00:15 2025 GMT
        Subject: CN=a4bcf234bdc061bc9821a42405acb1df7622040d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:0f:a5:8b:75:9b:e8:ad:00:e8:9b:eb:af:
                    d6:3b:18:ac:b3:70:c4:ac:55:4f:d9:19:18:a9:b3:
                    1c:14:c9:a4:21:20:d6:8e:24:ec:e1:f0:ca:49:04:
                    eb:ef:52:e8:fa:c4:b7:0e:b6:49:b3:bf:b6:67:53:
                    4a:db:94:63:61:c2:68:16:d1:fb:bf:60:ff:50:45:
                    ad:e4:c6:b9:a3:8a:67:63:66:33:e9:d5:27:d7:de:
                    9b:b7:b2:f2:16:70:bd:8d:6e:b9:53:2f:17:ad:a6:
                    96:7f:60:b9:83:10:ac:cc:fd:1f:20:ee:fc:09:5b:
                    bd:b0:c1:60:3f:5d:39:5f:45:4e:17:e3:fd:c7:d7:
                    c0:21:e9:a2:f8:36:e0:2e:92:76:b2:d7:77:ef:5e:
                    56:b4:61:2f:b5:d1:05:a8:50:b9:71:a4:fd:47:6e:
                    c2:16:a0:86:f8:95:69:31:a6:37:d8:a8:a2:0a:0e:
                    09:16:62:8f:d1:e4:c2:eb:89:f4:71:7a:01:1e:7c:
                    33:d3:a2:a2:e0:94:e2:e3:6b:1f:49:4a:0e:e6:e4:
                    3a:d7:26:08:8c:e3:e3:a0:61:f2:d7:fa:4f:f5:c6:
                    17:13:8c:6b:f2:7d:0d:1d:a2:66:b2:3b:68:2f:bf:
                    59:12:e7:30:0d:5e:d1:33:f9:bf:93:89:6d:56:92:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BC:F2:34:BD:C0:61:BC:98:21:A4:24:05:AC:B1:DF:76:22:04:0D
            X509v3 Authority Key Identifier:
                keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:47:22:e3:b8:7b:7c:51:97:81:dc:22:50:d5:5c:c0:62:49:
         bf:72:b8:77:b6:43:4c:6c:92:62:51:1b:71:05:a9:ff:71:76:
         7f:f5:fb:cd:47:d4:76:4d:81:c5:15:77:68:01:19:cf:50:d0:
         e9:82:cc:2b:bd:53:a7:f6:f5:a0:20:30:b6:ca:4c:8e:51:ae:
         1d:32:6f:eb:0e:a9:8e:8a:1e:e8:1c:02:0e:6e:ff:fa:38:df:
         d5:40:49:cc:af:96:16:29:86:73:08:ae:67:ef:8d:6b:c0:9f:
         f0:51:7d:a7:67:59:fe:99:cf:7d:90:d3:98:b6:51:91:34:d9:
         e7:40:e5:62:bd:44:32:be:a6:a4:f3:90:ca:b7:36:5f:eb:8a:
         1f:19:42:02:d8:5a:05:04:46:2a:01:71:02:d4:e7:51:80:18:
         1f:93:e5:d1:9f:2e:4f:bb:82:a1:60:0b:bb:db:5d:23:b9:e0:
         75:37:99:58:2f:cb:d1:1a:c6:f5:9f:ec:5c:79:5e:ab:3e:ff:
         02:16:97:6f:24:3d:29:e9:5f:94:32:31:7c:fe:ef:3c:e4:e7:
         9e:a3:74:e6:b0:d1:e6:2d:ac:94:e3:1c:e5:48:a2:04:12:ad:
         8c:46:d3:82:08:0b:6d:1e:b0:ee:d6:37:25:e0:38:97:9b:15:
         82:d4:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:15:45 2025 by rpki-client