Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File:                     gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier:          OHfcn+iQU/S6UpQwNG6zHR01a+0ecJsflbQ4F5BnGYA=
Subject key identifier:   8D:55:48:F1:FD:7A:0E:D6:D3:A0:D2:A2:DB:D3:C8:70:23:78:6C:A9
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer:       /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial:       0197B96B234EED21DBAD3CB772D8B617D6F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 02:01:35 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:35 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:35 +0000
Files and hashes:         1: EgJWkP_ATvd-WaK0hqp6IaIW95g.roa (hash: Qp/vVw2n2OIqo8aQ+vDa79aTq8YN8BxSb8x/nDkT+pg=)
                          2: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: w6KIexhYCaEjf0y79zrsAY8Y5xTUdAQN5NeSn2UZf90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:23:4e:ed:21:db:ad:3c:b7:72:d8:b6:17:d6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
        Validity
            Not Before: Jun 29 02:01:35 2025 GMT
            Not After : Jun 30 02:01:35 2025 GMT
        Subject: CN=8d5548f1fd7a0ed6d3a0d2a2dbd3c87023786ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:aa:d0:30:2a:36:9d:7a:38:0a:88:29:e3:5c:
                    0d:ea:88:e3:7b:a5:53:23:ef:a3:3d:47:f5:90:c4:
                    48:1a:c1:08:bc:dd:b1:34:75:5b:84:34:3c:50:ec:
                    b5:af:fb:31:a6:f8:d9:4e:e7:98:ac:d2:1a:e3:cf:
                    0d:5b:f9:8d:c0:72:a2:af:fe:20:56:69:a3:76:6c:
                    31:f7:26:29:3d:83:40:4c:b7:4e:69:f9:c7:9a:62:
                    84:eb:e8:94:f7:33:bc:a1:9d:da:67:e6:69:fe:2c:
                    62:59:cd:55:ee:fe:85:2c:b0:0c:7c:2e:a1:7f:c9:
                    6c:79:62:40:a3:f8:25:14:36:4f:48:c5:f5:3d:67:
                    ed:8e:1a:aa:56:fe:5e:90:1d:92:46:d8:da:9c:88:
                    f0:0f:a1:ee:0c:bf:5f:5b:e1:d5:17:c6:1b:1e:5a:
                    d1:9d:ec:68:8c:43:7e:38:2a:f6:00:ae:a2:7a:23:
                    62:b4:a3:53:47:61:04:49:34:6c:06:4c:5d:25:04:
                    d7:ab:c1:46:e6:7b:62:50:85:f1:dc:f3:7a:a6:74:
                    78:e8:6e:7f:08:a2:5b:a2:5d:7a:90:a9:84:b0:29:
                    91:8d:53:92:86:cd:87:d7:4a:3b:9c:67:cb:50:58:
                    cd:41:85:48:fe:7c:16:74:b5:e0:91:21:0b:b6:cd:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:55:48:F1:FD:7A:0E:D6:D3:A0:D2:A2:DB:D3:C8:70:23:78:6C:A9
            X509v3 Authority Key Identifier:
                keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:78:ff:09:80:4a:0e:d1:4b:f5:ce:0e:cd:b1:90:92:d6:fc:
         f4:0a:fd:06:20:ad:c2:11:67:35:e9:13:a4:22:ed:57:77:39:
         d4:8c:4d:a3:eb:74:ab:ea:27:5d:46:78:c5:fa:65:1d:a5:bb:
         19:48:09:69:ba:b0:54:4c:5f:15:5c:70:86:50:53:9e:c1:90:
         d0:18:85:3e:52:5c:b1:8b:2d:00:59:c2:a8:61:30:e7:eb:75:
         b1:89:cb:a2:21:b8:9c:35:04:3f:0b:07:6f:97:3d:bc:2a:14:
         55:bb:31:d5:a5:57:4a:e6:d7:0d:14:88:61:99:10:b2:8b:f2:
         f4:20:03:75:30:e6:e8:44:79:d8:0b:47:ba:f1:66:99:1b:5b:
         64:24:72:3f:c2:a8:fd:a3:a6:66:ba:c1:99:12:4f:de:e2:32:
         e7:48:25:c0:4b:5f:9c:2c:ca:d5:23:b2:cc:38:05:cc:b0:43:
         60:90:42:9d:4e:c7:80:5e:85:6a:20:c7:de:d0:83:54:3e:d1:
         57:86:74:9e:d6:a3:68:ed:bf:5b:1d:81:7e:b8:58:53:9f:3c:
         97:bd:52:28:4e:95:5c:4e:4e:b4:5e:ea:7d:97:ab:54:fe:bc:
         a3:e0:13:82:91:10:40:36:2d:7c:38:a5:dc:d0:80:e5:f4:96:
         ad:df:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:01:11 2025 by rpki-client