Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
File:                     GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json)
Hash identifier:          rpw8lczepAOuBHun7wf5SNHzyCaEOEMlwSVlOks/U1U=
Subject key identifier:   1A:C2:71:20:4A:65:14:9C:8A:88:E7:FD:71:12:DA:06:3B:9C:6F:0D
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Certificate issuer:       /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial:       0197B7B315BAE9EDE9ADE01EE14B8A98FF6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
Manifest number:          1547
Signing time:             Sat 28 Jun 2025 18:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:56 +0000
Files and hashes:         1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: ocU6hCwn5vpAeVGzbQfrc8+WR6RHXw47CUFVdMm8dx4=)
                          2: td5of2c-zNIx95LtRN04mtFJYAg.roa (hash: rMhWdT4I0hK2RGp5gGoiamCjAXi8+XSWiM4KXZ7JjMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:15:ba:e9:ed:e9:ad:e0:1e:e1:4b:8a:98:ff:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
        Validity
            Not Before: Jun 28 18:00:56 2025 GMT
            Not After : Jun 29 18:00:56 2025 GMT
        Subject: CN=1ac271204a65149c8a88e7fd7112da063b9c6f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:37:e2:f3:6b:ff:c2:e4:54:ad:c0:68:bb:
                    47:18:a5:df:30:8f:73:ce:25:68:0d:85:2d:3b:60:
                    36:62:bd:7d:5d:4e:03:77:a6:8e:bd:33:a8:73:80:
                    67:30:6a:08:01:ad:dd:d5:01:a0:db:56:26:ed:26:
                    f1:11:87:e5:0c:10:51:f8:45:32:a7:f5:d6:e4:5b:
                    d3:9d:3b:2a:41:2b:6f:41:1f:c9:ff:25:ae:39:e0:
                    d7:42:96:67:5d:df:76:ed:9d:2a:08:24:3a:15:8b:
                    6c:a6:80:55:e2:74:e0:06:27:54:2a:ae:24:80:66:
                    c8:9a:76:d3:b3:0c:14:a8:77:e7:c7:e6:eb:9d:75:
                    77:ee:bb:6e:59:a8:05:d8:7b:0f:68:35:ab:d5:7d:
                    85:ec:4c:cc:c0:99:f7:16:aa:94:66:f4:0e:23:ed:
                    f3:56:95:83:1e:8f:c3:88:98:9b:28:6d:54:41:44:
                    11:45:05:15:16:94:f4:3a:31:43:e8:60:1e:38:34:
                    1d:49:88:07:b9:34:8f:8d:a6:34:f0:c2:5c:26:f1:
                    77:fe:c3:16:81:62:d0:9a:9f:74:2b:eb:22:08:73:
                    a5:f9:8e:0f:b6:69:c1:c7:0e:7c:39:cb:39:fa:f9:
                    fd:5a:61:23:3c:1e:a0:42:53:70:3a:9c:a5:ee:e6:
                    89:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C2:71:20:4A:65:14:9C:8A:88:E7:FD:71:12:DA:06:3B:9C:6F:0D
            X509v3 Authority Key Identifier:
                keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:93:d8:9f:a4:2a:eb:09:48:bb:2f:32:1c:42:97:bf:d6:09:
         ca:21:34:e8:af:9c:e1:75:d1:15:6c:2d:dc:ec:03:16:a5:c6:
         b9:92:80:01:3b:d4:59:e2:b2:d5:b8:64:e8:98:81:62:ca:0d:
         b0:87:ec:28:dc:b6:36:2c:fa:ec:78:d9:13:e9:ab:66:f2:ca:
         58:93:9d:f6:07:4b:f6:c2:f8:c1:38:0e:cc:0c:1e:8b:c2:47:
         c3:d0:5d:33:48:bd:b6:a9:9d:38:11:4e:f5:3f:3e:32:e0:60:
         b0:3e:2b:78:3a:74:9f:2d:8f:4b:2f:12:03:58:9b:0b:29:85:
         93:9f:48:b7:eb:92:ce:78:61:73:33:11:dc:e5:25:16:6e:b9:
         41:ee:27:2a:bf:eb:0a:38:a2:3e:ec:fe:4d:13:14:19:a8:de:
         b4:b4:de:6c:5d:f7:f5:73:48:cc:d0:91:4e:c9:e9:57:db:74:
         9d:3a:33:f0:f6:0e:6c:24:75:d8:fb:55:d6:a1:7a:23:b6:7b:
         2c:3e:34:82:2e:fb:eb:d8:7b:2f:ba:e6:4b:0a:73:2c:bc:61:
         47:b9:7b:80:c8:a2:ab:22:7e:ba:98:54:2a:ca:1a:86:30:90:
         5d:aa:e3:c8:79:d9:5a:d5:03:e8:d4:c1:a7:82:1c:6e:77:ea:
         19:9a:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:57 2025 by rpki-client