Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File:                     GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier:          wf+ExRD2hohWLUhlnahtGy/sSHDiiqw8jnJyZZDG3A4=
Subject key identifier:   AD:FA:97:72:E9:03:A8:49:0B:20:DA:56:95:70:CD:EE:81:63:84:9A
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer:       /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial:       01969E2C55488C5A279C1E021B06A46D6ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number:          08A8
Signing time:             Mon 05 May 2025 02:00:27 +0000
Manifest this update:     Mon 05 May 2025 02:00:27 +0000
Manifest next update:     Tue 06 May 2025 02:00:27 +0000
Files and hashes:         1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: Hj7sDbvutm3hYg13l/lNT/VzMSfM/tXrmYpCy5SYcY0=)
                          2: ZnGF6W1D3X-NrkNFr6eImmQhdy8.roa (hash: Bt9KY5B97syBzqVEmQ0mMOoNBbtJyQudj313FGbVLOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:55:48:8c:5a:27:9c:1e:02:1b:06:a4:6d:6e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
        Validity
            Not Before: May  5 02:00:27 2025 GMT
            Not After : May  6 02:00:27 2025 GMT
        Subject: CN=adfa9772e903a8490b20da569570cdee8163849a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:4a:7a:07:1d:3a:25:6c:20:18:25:4c:83:
                    f1:c6:21:fe:db:07:0f:44:ea:78:a9:01:90:08:c9:
                    44:e5:1f:30:af:90:9a:d6:3b:06:06:6d:7b:d7:88:
                    bb:dd:14:0a:93:b6:7a:56:e6:65:7c:f3:8f:dc:cc:
                    77:28:92:bb:61:e3:96:37:44:43:9a:30:a9:f1:d4:
                    ef:6b:1b:41:ac:34:79:33:f4:f3:25:05:81:0c:b5:
                    6a:10:bf:e2:a3:c3:35:04:c1:c5:52:24:e8:f5:15:
                    68:53:43:22:2f:08:49:e1:12:d6:30:5a:58:e9:40:
                    88:1c:4f:55:47:7c:0b:bd:00:30:7c:ad:d1:7e:ad:
                    22:44:f6:e2:32:7e:9d:86:14:57:42:7d:c8:f7:7f:
                    63:bc:e9:83:4d:43:0c:c2:de:79:06:be:08:33:e2:
                    77:e5:36:e6:0e:50:55:9d:ab:26:18:3c:fa:48:80:
                    18:ad:5f:ac:ea:e9:d8:59:c8:91:ee:df:53:12:a7:
                    ee:5c:9a:b6:67:25:68:85:28:76:7e:d2:81:44:5f:
                    58:51:8a:f7:e1:58:d5:0e:61:28:18:9c:16:62:f4:
                    df:62:ca:e1:a0:00:1c:28:d0:45:6a:ef:c0:81:9f:
                    2c:94:f4:61:95:70:c4:55:a4:d1:d8:83:2d:29:c5:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FA:97:72:E9:03:A8:49:0B:20:DA:56:95:70:CD:EE:81:63:84:9A
            X509v3 Authority Key Identifier:
                keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a9:83:8c:96:43:33:02:17:11:d5:f0:a1:a0:89:16:fa:12:
         32:c9:30:c7:d7:11:ad:8e:8a:8a:b0:ef:01:c7:0b:64:d3:56:
         41:95:7c:ea:6b:0a:c5:51:82:64:ff:51:c8:89:c1:35:06:17:
         84:86:8c:c5:dc:a2:cf:93:8a:32:0c:b7:31:63:39:a9:9a:c4:
         2b:63:1d:d4:de:a5:37:50:08:e1:58:bb:24:03:95:69:37:65:
         07:93:45:76:f3:d0:92:57:59:b1:76:d7:42:b5:78:f8:46:d3:
         b1:6f:2a:fb:96:a6:11:f7:7d:5e:e1:f9:21:09:83:28:c0:f4:
         ef:a3:82:17:bc:b1:48:e2:dd:0c:73:fc:b1:6e:8a:da:b6:cd:
         20:d0:91:1f:1f:72:0c:37:fe:12:d3:46:60:f9:26:5e:83:25:
         fa:14:87:df:d5:7a:31:47:f8:4e:c1:cc:2c:e8:f1:94:42:7c:
         81:ab:c8:d8:3f:bc:72:62:25:0b:b6:0a:71:ba:23:92:a0:c0:
         ed:58:af:5b:c1:b6:bf:2c:0d:79:bd:ec:c0:20:c8:46:8d:cc:
         0a:40:70:7b:66:48:9e:e7:c6:88:63:e7:f2:df:95:1c:bc:d2:
         4d:3f:50:1d:02:a3:23:a9:8c:b4:5e:7d:f0:68:73:61:49:57:
         9a:3f:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:53:30 2025 by rpki-client