Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
File:                     GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json)
Hash identifier:          QcfWg60SogjbtD3KCeRCq6Lf8LKaGA89IVoWJYz8pUo=
Subject key identifier:   E8:1C:8C:D2:22:03:E7:08:67:6D:85:0B:05:57:5C:B8:23:EB:75:6F
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Certificate issuer:       /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial:       0197B6327A742718C1412B215094796CC231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 11:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:50 +0000
Files and hashes:         1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: kFO0Pejf2NyED8Gj1rCz0USZZnPcspwTb2qnUMvKOR0=)
                          2: PgHBT14XbyMI_bDsD-5F89TwxvI.roa (hash: yY+dt31JYDSsLmacNs98NxKQjn/3/Xoq5ab4x7nUyV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:7a:74:27:18:c1:41:2b:21:50:94:79:6c:c2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
        Validity
            Not Before: Jun 28 11:00:50 2025 GMT
            Not After : Jun 29 11:00:50 2025 GMT
        Subject: CN=e81c8cd22203e708676d850b05575cb823eb756f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4b:c5:06:f4:d4:13:11:b3:a0:79:64:15:a2:
                    5b:9c:6a:bd:2b:97:a4:a2:e9:ad:72:ce:12:6f:91:
                    aa:68:05:66:2a:f2:bc:09:1d:46:13:86:ac:d7:61:
                    19:e5:45:fc:49:4f:84:34:8a:eb:a8:e0:ef:b1:9c:
                    46:45:ff:26:c4:5e:5b:c8:8f:5c:0e:8c:d2:35:5a:
                    02:ed:88:38:c4:ff:1d:ab:4c:93:cb:30:97:09:9d:
                    dd:c4:34:65:35:24:85:c4:6a:b3:73:4a:6a:1e:41:
                    b9:b2:e0:05:c5:35:8d:ba:cc:2c:d9:38:2a:92:bc:
                    4f:0b:4d:c8:25:74:7e:92:ef:9d:42:17:d7:3e:b3:
                    1a:a3:5b:a5:65:11:b3:8b:54:be:60:3d:26:66:c5:
                    02:49:2b:dd:99:35:f1:f2:ca:fa:d1:fd:28:02:1a:
                    ee:cc:89:da:bd:6b:47:7e:a0:50:52:a2:bc:a2:b2:
                    3a:4a:2e:e5:eb:a3:60:a1:26:7e:a3:a1:c8:89:57:
                    0e:0d:d5:79:74:36:60:d1:0b:c5:b4:c2:b6:2e:f8:
                    cf:03:58:0c:78:c3:03:fd:af:64:32:05:72:2a:b3:
                    92:8a:75:fe:fb:52:8b:e3:2f:c6:12:ae:6b:8b:d6:
                    12:9b:27:92:f1:56:c9:f1:c7:a7:0a:d8:12:c6:10:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1C:8C:D2:22:03:E7:08:67:6D:85:0B:05:57:5C:B8:23:EB:75:6F
            X509v3 Authority Key Identifier:
                keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c1:86:18:4f:aa:c8:2c:cd:98:5d:b1:3b:fb:e5:9e:cc:c3:
         58:5c:0c:a9:3b:9b:a9:69:5d:08:28:ab:81:c9:b3:bd:6d:c0:
         a2:67:79:e2:af:5f:de:be:ff:a9:7d:59:1a:67:54:03:c0:83:
         9f:44:e5:35:8f:5e:9f:64:fd:f1:c6:fe:d4:80:88:ef:d4:00:
         0e:1f:7e:33:41:25:a7:39:94:56:71:f8:87:f1:00:1c:82:90:
         54:20:84:98:e2:f9:16:f0:b1:54:d3:cb:59:e7:f0:55:b2:c4:
         02:61:29:b0:f5:91:f7:46:cb:51:be:c2:a1:98:c1:aa:ba:0f:
         2d:b6:0c:2b:ef:ea:47:b0:75:f1:bb:5f:e5:3f:a7:27:bb:0a:
         53:aa:fa:b6:b1:0c:f1:27:f9:ed:61:72:dc:1b:14:b7:14:38:
         ad:2f:57:5f:5b:0f:e5:bb:ac:90:b9:9e:2e:2b:21:8f:64:1a:
         2a:94:42:46:8c:79:0a:41:9b:e2:6e:b5:e6:07:69:9c:c9:d8:
         8a:82:2e:3e:aa:f9:0c:ba:e2:ee:ad:cf:bd:4f:0a:42:7c:43:
         95:52:cb:a4:ac:a6:ec:6c:17:77:a6:8f:95:f1:48:cf:b7:a6:
         fc:ca:91:81:ab:60:d5:03:c0:f8:5a:6e:53:fc:1e:07:48:0e:
         19:ab:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:21 2025 by rpki-client