Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
File:                     G5gog-Hfv0Yz4IwLWMheif_DIQE.mft (raw, json)
Hash identifier:          uZkM/EVJuwuUIK2EPI4zmoiu4y0t8B9Nzg0yejdQQIY=
Subject key identifier:   09:09:1B:87:A9:7F:A5:8C:11:3B:A7:62:32:16:8A:7A:98:58:82:1E
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Certificate issuer:       /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial:       0197B6A17F7E429769C2073DDA5570489411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
Manifest number:          0B08
Signing time:             Sat 28 Jun 2025 13:02:06 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:06 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:06 +0000
Files and hashes:         1: 9tT1Sn3Qux2-pUIWCQe_vjURo9M.roa (hash: FairLybhS08hCgrNLc9cEd4IlKo+5RTneSM8eV+/6qk=)
                          2: BmpGigL7yj_vU4YrBcCEXhWHHbI.roa (hash: Ppbu0DUb3G/J7ntuuCJmNlJLWLrlVFHUquuws77rxcY=)
                          3: G5gog-Hfv0Yz4IwLWMheif_DIQE.crl (hash: c+cDIQ4fMRlbEyb3MlVJkkyJSnx3i6BBjipXNXTSSso=)
                          4: KxqqgwhHr1JBau2ZnEJ99DBtg4A.roa (hash: QCOcE3LD/xRpaRa6zgmKhfyxrFbaW8v4jp9GZFELj38=)
                          5: UjncDvFxOlRCkAGtD0tzYyO0vwY.roa (hash: HR/S3qDlN6tb+Q3T8TNZutyXf0XfoqKmAw4PR5qJTgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:7f:7e:42:97:69:c2:07:3d:da:55:70:48:94:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
        Validity
            Not Before: Jun 28 13:02:06 2025 GMT
            Not After : Jun 29 13:02:06 2025 GMT
        Subject: CN=09091b87a97fa58c113ba76232168a7a9858821e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:df:2b:e3:36:20:a9:d4:11:7c:61:df:96:
                    62:99:93:08:0e:76:d7:7d:c9:92:24:27:5a:f2:60:
                    b7:a2:04:14:c4:ac:0d:11:d2:78:2c:c4:58:ee:88:
                    63:bc:57:f1:23:9b:a3:ac:7f:9a:ec:de:a6:ef:81:
                    a3:39:a1:2b:da:54:d2:d5:6a:20:2e:ff:33:f6:8b:
                    10:28:23:d5:30:16:04:8a:6c:3c:f6:c8:6a:a5:9e:
                    57:e5:6a:a3:c1:b9:c4:b3:dc:ac:af:92:ac:dd:2e:
                    33:a4:56:c1:89:59:c0:8a:15:8b:e8:dd:56:ac:79:
                    2b:63:ca:b3:3d:b5:79:d0:b8:7b:72:96:79:81:35:
                    ec:a0:11:ec:05:31:83:f6:77:53:61:a3:39:e1:1d:
                    cb:a9:74:fa:c5:76:f3:24:5c:67:00:58:a9:d4:51:
                    96:7a:25:38:44:44:e5:64:ba:ab:42:1d:8d:d1:73:
                    a2:7c:e7:b7:cf:07:94:c8:2a:ed:ad:73:8f:c5:90:
                    50:42:4d:49:7c:e2:a2:e2:d1:89:59:c6:ee:2a:8e:
                    37:2e:3b:0c:db:48:e3:30:1a:3c:bf:e3:96:83:8a:
                    c2:d3:34:67:ab:4d:9c:66:c8:69:7a:83:9a:ec:19:
                    44:d8:58:3a:09:af:3d:f2:7f:a5:8b:c3:ee:f8:4a:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:09:1B:87:A9:7F:A5:8C:11:3B:A7:62:32:16:8A:7A:98:58:82:1E
            X509v3 Authority Key Identifier:
                keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:51:51:46:90:6a:8f:85:e9:9f:4f:74:0e:b6:da:de:8f:42:
         e9:c7:28:78:e6:d9:fb:d9:01:4c:ac:44:25:7a:c3:95:ee:57:
         d4:81:7f:4d:c2:4f:d9:21:22:cb:3d:26:65:4b:95:82:24:c4:
         05:4b:73:c6:60:d2:fd:48:c5:0d:2c:31:58:35:3b:b3:ee:da:
         93:54:1c:95:ae:1b:21:8c:8c:e7:9d:6f:83:9c:b0:66:81:3f:
         bf:2c:f9:07:f0:bc:9c:45:db:45:14:ec:10:79:2b:0a:b8:92:
         f9:12:b5:56:2a:71:f8:e4:47:a7:ba:98:e9:92:4e:a3:3b:3c:
         ce:f8:bc:22:6c:47:3d:b2:7f:ed:d3:b1:b9:1d:7c:c5:6f:61:
         2c:71:34:eb:45:87:24:d6:26:f2:3f:a7:fb:11:9d:9a:5c:85:
         c8:7c:fd:e7:37:72:71:7f:83:9e:64:3e:2d:78:02:12:5d:a5:
         c9:b6:18:9b:00:7c:11:ee:11:63:65:74:60:6a:d4:56:be:d8:
         c4:1f:f3:81:51:65:16:99:ac:e4:13:bd:4c:23:ce:ac:dd:54:
         7f:ea:f2:26:6c:77:9d:e7:fa:4f:af:76:e8:3b:6b:80:e6:02:
         5b:d9:2b:7a:62:34:cb:03:c7:7c:37:6f:0f:5a:30:db:cf:0b:
         f7:9d:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:02 2025 by rpki-client