Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          Wd2MWaLClIIoVZdv2aE3E21oSV6gkggHdEqVeBU+kb4=
Subject key identifier:   B3:82:71:F9:F7:11:D9:12:76:48:B2:14:7F:4E:F2:C3:0C:C2:63:70
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       0197B820C520786D1D3342F33CE66F948A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          0A5D
Signing time:             Sat 28 Jun 2025 20:00:44 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:44 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:44 +0000
Files and hashes:         1: 2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa (hash: F4E+yi6wuov8nVtjH23YAurT+H1Svha6Z7BC42V28wo=)
                          2: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (hash: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=)
                          3: M2T_h-HT-LjV3MxmhC3AaCL7DR0.roa (hash: JUe0w/L/a5YNGKCvQ5Od3tGqP8OCxA0GZG5F9koR5ws=)
                          4: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: NdnvI7e69FSBThLhtYfvsEZ/sx7eCW5oz+ZgYNrayG0=)
                          5: hfZ9JmRYsdrX_WsZKnGJG03yjoY.roa (hash: KsXjtR8VJ0gF1kTfS5RfLRCRZJ2gEjdzhxwY2pQ41Hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:c5:20:78:6d:1d:33:42:f3:3c:e6:6f:94:8a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Jun 28 20:00:44 2025 GMT
            Not After : Jun 29 20:00:44 2025 GMT
        Subject: CN=b38271f9f711d9127648b2147f4ef2c30cc26370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:d9:1c:c6:4f:bb:12:c4:0c:ce:be:18:08:
                    0c:c7:2f:32:43:46:4d:ef:0c:b6:07:87:50:a3:10:
                    8b:44:6e:d4:56:a2:f3:70:19:e4:80:9f:ec:dc:16:
                    c5:3f:09:7b:00:e7:93:7d:13:a7:7a:11:66:5c:0b:
                    33:b1:2e:25:e4:ad:f1:2e:c7:4e:cf:ca:db:9f:46:
                    71:dd:9d:03:2a:57:54:fb:b5:d4:aa:0a:41:0c:04:
                    d7:70:26:06:d4:94:8a:87:ae:a1:bb:ab:cd:9c:5c:
                    a6:ea:ea:9d:61:fd:ef:0c:04:5b:f0:ae:cf:48:12:
                    7a:21:77:cb:0c:79:51:e5:24:ba:f9:32:50:04:be:
                    4b:c3:61:3d:e6:de:b5:74:1c:03:69:ca:70:5a:9a:
                    3b:6b:f6:cc:35:11:41:bc:b2:7a:ef:c6:4f:53:92:
                    4c:6e:e7:78:05:fc:47:0e:37:d5:a0:d5:75:9a:fc:
                    49:2d:d0:72:c7:18:05:64:c9:bb:6e:95:99:e8:6f:
                    4f:7f:27:e7:51:31:69:3e:d6:c2:2d:b3:9c:91:93:
                    b3:a3:b1:ec:c0:cf:dc:b2:b3:17:56:2a:3a:cd:01:
                    59:25:26:4c:61:8e:15:c3:82:fa:9a:e0:e5:b9:e5:
                    24:a0:14:db:6c:a8:95:b0:f8:e2:f0:b4:26:82:83:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:82:71:F9:F7:11:D9:12:76:48:B2:14:7F:4E:F2:C3:0C:C2:63:70
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6c:e6:55:5c:5f:ba:f6:ad:6c:6c:c3:c9:e2:88:e4:6a:0b:
         2d:b7:00:76:df:81:db:b6:8b:c0:a2:30:89:35:e1:c7:49:1e:
         36:70:60:a4:b5:58:8d:f5:cc:0e:e5:32:df:e3:e5:7f:31:81:
         a7:6d:80:cd:a4:25:48:94:2c:55:8a:6d:7c:bd:d3:60:95:ac:
         e9:e8:54:d3:20:c2:8a:78:39:c4:01:c5:41:5f:35:a9:07:a2:
         f6:b3:e9:2c:aa:79:2c:c0:b9:88:c0:02:af:cd:d5:e3:62:fb:
         18:7a:91:44:f2:4d:47:3a:93:2f:f1:3f:13:28:1a:bd:bc:f5:
         90:ff:66:58:68:b4:f1:1f:39:0d:f9:1a:e2:b0:56:20:19:d6:
         96:df:f1:ad:09:29:d0:d8:79:1c:5a:b5:6c:6d:98:00:db:bb:
         0c:ba:01:23:19:cc:af:de:4d:69:95:3d:6b:94:04:a1:04:50:
         ea:e1:e6:25:3c:0a:aa:f8:75:75:98:83:0b:77:c1:1e:ed:99:
         67:eb:04:ed:d5:86:d2:1f:2d:7c:06:46:80:40:5c:0c:a3:0a:
         b4:4d:32:07:4a:5c:20:c1:45:99:11:75:a5:96:3a:3f:e1:cb:
         64:90:c1:33:e0:84:9a:f8:c1:b0:32:c9:08:d6:89:e1:e3:d7:
         0d:10:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:46 2025 by rpki-client