Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
File:                     G9LUY64VNG1e3Xk3uL-o4JsUN20.mft (raw, json)
Hash identifier:          /E1Xx1ukEB+wpcdlhTbNCKVAhvFHdzC2FebjKXqxlM8=
Subject key identifier:   A8:86:8D:3A:02:CC:DA:A5:A8:37:40:79:0A:B5:C8:67:8E:63:3D:5D
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Certificate issuer:       /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial:       0196A2E4B021295BF4F1C211DF9EEC557411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
Manifest number:          1005
Signing time:             Tue 06 May 2025 00:00:18 +0000
Manifest this update:     Tue 06 May 2025 00:00:18 +0000
Manifest next update:     Wed 07 May 2025 00:00:18 +0000
Files and hashes:         1: 61pqBezJLAJE5VLA7yrYYgA1x4Q.roa (hash: wkbkRNJ1tewUM/PlCjzz6x80lWa3MJj4NI3f+PnCsBo=)
                          2: EpJyeK5l3AFsANhOcZBiUOqM9nk.roa (hash: jEvX43x9SqA5MKvP91NPr1LUmWhpxkfIrUnmrmVabWE=)
                          3: G9LUY64VNG1e3Xk3uL-o4JsUN20.crl (hash: 7bYP8CuTyNViBqUr1fAyRpfp5ObeFGebjQ79tuw22dA=)
                          4: XyfRuc4kupwWuvivIxyG_eB9gmg.roa (hash: KYzWwUCDT/C8f7tzUEGe7k72yVFrK9hL5A1TsIJ1sdw=)
                          5: jLqRq9df1G6zlawXTbhxNybx_aU.roa (hash: U7jgU6c2HeS0w5bhwmU3yd/cT+TakYFUUagP3qrZf9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:e4:b0:21:29:5b:f4:f1:c2:11:df:9e:ec:55:74:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
        Validity
            Not Before: May  6 00:00:18 2025 GMT
            Not After : May  7 00:00:18 2025 GMT
        Subject: CN=a8868d3a02ccdaa5a83740790ab5c8678e633d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:33:8b:0d:d5:25:70:ad:d5:7d:4e:e8:92:94:
                    a2:48:b1:c6:99:3f:73:7a:55:d2:fe:a2:6b:ca:60:
                    78:e0:b2:f9:d7:d5:0c:41:a4:90:21:ca:b1:d8:bf:
                    65:83:72:ed:4f:5b:03:ab:38:78:2b:cd:c7:91:e8:
                    78:54:31:3f:23:b2:d3:60:a7:23:a6:4a:fc:75:00:
                    1f:da:09:ef:c1:55:42:04:6b:a4:f8:32:37:61:36:
                    ca:0b:33:af:c4:84:11:80:be:cd:fb:99:f5:3b:2f:
                    47:a7:21:d1:72:ce:a5:cc:a3:07:44:d1:3f:57:c9:
                    16:5c:70:b0:a3:45:f1:ee:47:68:04:f1:6d:aa:d3:
                    9e:73:0c:25:39:ae:2b:a5:f5:5c:4f:02:14:38:2e:
                    1d:dd:42:6f:95:76:a5:8d:f7:9f:7c:7d:63:20:e8:
                    a0:20:8c:b6:2f:b3:db:d8:43:d6:1d:e8:85:e9:10:
                    f3:06:49:8d:df:38:11:1e:92:ae:22:b2:7e:3b:de:
                    8b:0c:3c:52:26:82:f8:42:d5:4c:35:54:57:13:35:
                    4a:ef:5d:45:19:55:23:e2:79:ac:69:70:6f:97:19:
                    fb:b3:ff:eb:b9:51:f5:19:5b:55:34:9a:aa:03:5c:
                    f0:25:57:83:a7:86:e6:1b:39:6f:9a:cd:fc:35:ed:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:86:8D:3A:02:CC:DA:A5:A8:37:40:79:0A:B5:C8:67:8E:63:3D:5D
            X509v3 Authority Key Identifier:
                keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:35:a1:a0:0a:7d:d0:c9:e6:69:50:21:fc:5a:15:98:d1:ae:
         93:41:ec:41:56:25:5d:1d:a4:92:ac:7b:be:ad:dc:8e:80:52:
         69:5c:80:37:b8:84:14:34:be:b3:da:4a:60:60:6e:42:cf:1a:
         1d:a4:86:48:b3:99:c6:9a:30:3e:24:1b:4c:e1:d5:56:1e:6e:
         12:29:34:1e:69:83:22:81:fa:04:08:d6:c0:2b:c8:83:dc:c3:
         a9:85:3b:85:b4:6f:26:13:46:83:b1:97:42:c9:82:0c:5a:5e:
         06:e5:23:1a:26:d2:65:b6:56:85:1f:98:f1:b3:c5:86:5c:f3:
         15:71:55:31:cd:e2:ab:59:f9:ee:64:98:61:a0:4a:bd:8b:f3:
         ed:1e:a0:27:e4:6f:09:66:e9:99:49:c8:aa:a0:5f:a3:ff:75:
         72:12:6f:14:e9:5c:30:da:4a:24:72:a9:02:49:85:bb:ae:dc:
         c3:07:a5:22:65:17:df:73:4d:65:f5:aa:b8:1c:e4:0d:db:0b:
         62:21:e1:12:23:ff:c8:ce:02:a5:af:f6:7e:63:7d:77:f7:ac:
         4f:eb:0c:33:ae:fe:24:f7:e2:2e:82:08:b8:b0:8e:2b:83:fa:
         9e:16:28:0b:9e:27:8d:54:8f:9a:e4:b3:e4:26:f8:12:75:c6:
         fb:be:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:40:47 2025 by rpki-client