Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File:                     GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier:          xPF+icMjeWD9JhT3Mji7lSfUmkZQ+mGdezfwE2Rrllc=
Subject key identifier:   B0:D6:CC:FA:9D:CE:19:77:77:E1:05:39:A4:A2:E7:BC:76:C5:C4:4C
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer:       /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial:       0196AB0BFF9970DB40BC86B342EDA9BD624B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number:          102C
Signing time:             Wed 07 May 2025 14:00:12 +0000
Manifest this update:     Wed 07 May 2025 14:00:12 +0000
Manifest next update:     Thu 08 May 2025 14:00:12 +0000
Files and hashes:         1: 9anLZpxCdtczPvdlYCXgAxbRs8M.roa (hash: CyG4Wg4fSftiyOPdmKS2+akGyemcGA5SuHd1aeIvuWs=)
                          2: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: sntPyk8gFNPwqGhQwLOEInIzSvsBRZS5VzCBlUkTqLY=)
                          3: wgLpdQzEQiut3zZPkrk2it4-KJM.roa (hash: rQ6r9VvnZsN117x/0JkyHFIrRA5vncbf9BthsT1+A7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:0b:ff:99:70:db:40:bc:86:b3:42:ed:a9:bd:62:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
        Validity
            Not Before: May  7 14:00:12 2025 GMT
            Not After : May  8 14:00:12 2025 GMT
        Subject: CN=b0d6ccfa9dce197777e10539a4a2e7bc76c5c44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:f1:e8:da:88:02:87:de:d2:7e:03:9b:c8:
                    cb:79:11:68:cd:42:f2:fe:28:80:70:60:99:4a:e7:
                    ce:d0:a1:96:56:a0:c6:2b:e0:0b:97:ba:84:a9:d4:
                    d9:23:04:7e:ea:92:37:55:41:e7:f5:99:ae:fa:a7:
                    61:71:18:8a:b2:33:7f:6a:95:58:a2:18:06:15:3f:
                    cf:6a:68:45:d7:0f:15:bb:44:55:d0:05:fb:78:97:
                    fd:e3:22:f4:3d:8f:6e:fc:c4:20:0b:19:96:93:9f:
                    63:ba:42:11:32:91:f1:f0:58:fb:3c:f0:94:91:c6:
                    5e:be:0d:e7:9e:60:95:af:02:aa:29:71:04:c3:e8:
                    c5:8a:6d:14:22:3c:e4:1f:35:27:67:68:db:46:f6:
                    1f:ee:9c:17:21:50:4a:85:e2:c7:de:31:b8:dc:da:
                    1b:72:9f:ba:7a:22:80:7a:fe:89:aa:25:e4:11:6a:
                    38:33:3a:16:67:66:61:d2:d7:0a:31:a0:29:b9:81:
                    1b:ea:d8:5f:26:8e:84:a5:3f:8e:a7:36:54:2a:df:
                    73:41:ea:ab:f8:6e:bf:75:95:77:c7:fe:fd:ea:14:
                    e8:3b:1b:d1:5d:82:8a:35:80:3e:d1:73:f3:99:84:
                    d0:07:5f:4d:45:c5:12:16:90:1e:f0:5d:0e:de:86:
                    54:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D6:CC:FA:9D:CE:19:77:77:E1:05:39:A4:A2:E7:BC:76:C5:C4:4C
            X509v3 Authority Key Identifier:
                keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:51:2d:da:af:c4:56:06:b3:5f:6f:e1:f8:da:e8:41:1a:
         b3:fc:8e:c1:d4:47:de:89:ea:9b:89:39:ff:6d:1d:2d:28:b3:
         9a:e9:2f:40:58:cb:6c:dc:ee:ad:a3:c1:d2:c6:1f:6f:75:45:
         1a:c8:f2:4b:33:3a:15:ed:10:23:e9:90:26:f7:9a:de:52:33:
         3c:8f:5b:45:74:13:ea:fe:31:90:d3:0d:ef:03:08:6a:7a:51:
         d9:b9:ef:fb:9a:dd:9f:9b:c0:2c:e2:f6:64:f6:dd:23:c4:6d:
         70:5f:7d:9c:13:56:32:d9:7b:3d:05:61:be:a9:f6:ce:dd:fd:
         0d:59:6c:cb:40:06:9e:60:04:c7:5b:16:ef:ab:52:10:74:2b:
         91:67:b1:4b:a6:41:e5:15:76:61:9d:9a:e6:7d:72:a0:1b:fa:
         ba:e7:3d:7c:08:91:a7:4f:b6:f0:3a:58:32:38:48:0d:5c:b8:
         f6:44:82:04:41:d7:af:4b:82:c0:75:e1:f5:d9:d2:de:17:97:
         16:a4:44:32:35:43:86:d1:a1:39:03:8c:10:4a:34:d2:d5:d8:
         93:9c:b5:65:8e:27:b8:e7:5c:18:07:55:93:b1:34:d5:70:d8:
         7f:83:e2:ab:ca:18:91:5b:fa:2c:4b:68:1f:f9:7f:ae:3a:91:
         91:9f:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:31:26 2025 by rpki-client