Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File:                     GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier:          QrAijfJRvWW8ZTkzeyB/xZS8bsesq2yaWZW/dNvcZBA=
Subject key identifier:   F4:6F:34:25:7B:70:7A:65:1D:62:20:B7:40:4F:EA:8A:41:77:28:BF
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer:       /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial:       0196C34B938E50AE2A80BFFAADC4FA7CB924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number:          1356
Signing time:             Mon 12 May 2025 07:00:32 +0000
Manifest this update:     Mon 12 May 2025 07:00:32 +0000
Manifest next update:     Tue 13 May 2025 07:00:32 +0000
Files and hashes:         1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: YE9pUtjSx8Tu7YiJJzgkqXERt+nDpmhzAxhBUUZ93LM=)
                          2: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (hash: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4b:93:8e:50:ae:2a:80:bf:fa:ad:c4:fa:7c:b9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
        Validity
            Not Before: May 12 07:00:32 2025 GMT
            Not After : May 13 07:00:32 2025 GMT
        Subject: CN=f46f34257b707a651d6220b7404fea8a417728bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:95:48:f8:da:4e:80:ba:fa:1d:44:22:b9:
                    8f:98:d9:a5:96:4b:52:32:95:01:c7:34:a3:ab:24:
                    d1:4c:db:9b:3f:63:19:aa:49:66:84:56:98:84:4d:
                    b6:4c:87:09:85:1f:ca:87:d6:d3:00:97:29:b9:a1:
                    f2:c9:5c:50:0b:df:7f:f8:97:bc:40:50:78:c4:87:
                    99:cf:58:1c:ca:4d:89:63:7b:22:47:44:1a:bf:01:
                    97:54:1c:65:47:b4:09:ac:cd:70:cf:2f:c4:61:ec:
                    61:16:b0:5b:68:b3:40:6a:4d:cf:77:f0:35:d0:46:
                    ec:42:ae:96:d5:e9:d8:91:ba:82:dc:39:c3:41:19:
                    f1:e9:bc:2a:61:57:97:64:26:60:ab:a2:ad:82:74:
                    76:72:e3:ce:30:80:f5:b6:02:00:48:de:b2:b2:52:
                    2a:ce:c5:ba:b9:36:cc:49:03:6c:05:35:fb:5e:cf:
                    d7:de:63:ce:0e:14:5b:b9:2c:79:b0:09:ee:d7:c7:
                    11:d3:c3:4f:7c:f5:d1:98:f9:80:9e:22:e9:19:fa:
                    f8:d2:16:2a:d1:18:d3:92:0b:f7:46:7e:ce:3b:15:
                    e1:80:a3:9b:46:66:a9:16:26:72:49:7a:6d:80:d8:
                    6e:08:18:e3:90:40:6a:8b:76:8f:6f:7a:d6:26:24:
                    3b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6F:34:25:7B:70:7A:65:1D:62:20:B7:40:4F:EA:8A:41:77:28:BF
            X509v3 Authority Key Identifier:
                keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f4:11:86:e9:b3:f2:61:ee:0e:55:56:0d:0c:9e:d1:f7:9c:
         7a:c0:dd:6d:73:0f:00:f0:52:ac:36:b7:34:1f:11:3c:70:5c:
         be:c8:c1:c0:e9:27:a1:1f:44:13:20:81:e7:22:60:69:15:59:
         50:1c:16:3a:32:e8:84:5e:eb:09:94:b6:5e:aa:c9:e7:fb:e8:
         0f:c4:77:ab:c9:1e:86:77:00:62:57:b1:f0:35:4c:61:83:4e:
         83:90:10:32:d3:f4:11:59:7f:f6:e1:a6:77:45:4a:ab:5b:29:
         c3:6d:89:36:5d:49:ba:9b:de:b6:d6:59:6d:1d:3f:c5:05:78:
         36:02:e7:93:cc:29:99:9a:61:d5:dd:67:eb:d7:db:80:88:3c:
         12:eb:a2:09:ad:6d:4c:82:ac:8d:8a:9b:50:af:5f:fa:4d:57:
         6f:74:d7:09:20:61:0b:9b:9e:17:83:43:ea:63:04:4b:b0:c7:
         49:1b:30:35:54:70:ec:7b:e5:de:69:f2:26:76:1b:3a:39:ed:
         79:01:4b:bc:4f:3a:2c:74:69:e0:92:e8:5c:45:d7:84:c1:5d:
         cd:c6:42:15:0b:d0:fe:b0:8e:0b:ef:31:a3:bc:55:ad:45:97:
         04:1b:ce:ae:ba:c9:6f:b1:db:35:75:cd:e9:1f:e8:68:bc:52:
         ea:c8:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:37:50 2025 by rpki-client