Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File:                     G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier:          ZLsAkf2CerNFQnONPmarV6LQ0uGqGFUUu44habcRWE4=
Subject key identifier:   AD:A9:5A:22:E3:1F:8D:B5:BE:DC:B3:9C:68:E3:30:7A:77:D5:0A:EA
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer:       /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial:       0196AEE939B6492522693F4456BC1D49FD55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number:          025C
Signing time:             Thu 08 May 2025 08:00:42 +0000
Manifest this update:     Thu 08 May 2025 08:00:42 +0000
Manifest next update:     Fri 09 May 2025 08:00:42 +0000
Files and hashes:         1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: YqXMKjuAB0c3DKwsSOu1I0YaEzWLGP7yCnJsxFx8gjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:e9:39:b6:49:25:22:69:3f:44:56:bc:1d:49:fd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
        Validity
            Not Before: May  8 08:00:42 2025 GMT
            Not After : May  9 08:00:42 2025 GMT
        Subject: CN=ada95a22e31f8db5bedcb39c68e3307a77d50aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:9c:4c:4f:be:e4:f1:07:c2:db:eb:cf:aa:
                    a7:f6:af:8b:08:1c:1d:6a:0b:83:d6:ff:de:7f:3b:
                    b9:59:cd:39:63:ce:0f:66:46:27:b6:12:d4:0c:e8:
                    b9:f0:b2:e1:7f:14:db:c6:3d:4b:95:c1:62:e7:89:
                    fd:7e:60:e4:a7:50:d5:51:e6:66:28:fd:c7:41:7c:
                    93:76:49:80:51:dd:c1:e9:22:9c:eb:51:96:47:8a:
                    97:22:c2:57:81:68:f2:5c:cf:b3:91:ab:57:83:9e:
                    ec:c7:f7:68:be:fc:8f:b6:7f:06:93:53:e6:35:1e:
                    41:31:4c:6b:62:9d:e1:b7:c4:93:fa:f1:c5:36:99:
                    ca:29:4f:e2:30:1e:df:2c:a3:52:38:2e:cf:96:af:
                    4b:75:ff:ad:f9:9f:cc:6f:c5:a0:14:a6:8a:54:f6:
                    3a:ef:27:66:40:cd:55:46:22:7b:a0:90:38:e3:96:
                    97:48:3d:c9:53:b4:9f:60:75:b9:5f:d5:ee:e4:79:
                    ac:94:fb:08:c0:0f:ae:0b:36:7a:87:17:6e:dd:29:
                    6d:27:3b:07:15:91:27:d9:b4:20:25:66:24:9e:bf:
                    51:0c:22:85:37:30:0d:54:33:37:13:57:93:f1:6b:
                    bd:8f:66:14:a1:d4:9e:36:31:5c:fd:1e:a4:62:87:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:5A:22:E3:1F:8D:B5:BE:DC:B3:9C:68:E3:30:7A:77:D5:0A:EA
            X509v3 Authority Key Identifier:
                keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:a6:c8:e0:06:4d:66:32:3f:dc:e5:f6:92:56:92:8d:b3:
         5a:37:96:85:f6:4e:49:f4:a2:22:08:cc:c5:fb:f3:c1:91:11:
         90:6b:ee:64:69:5f:05:1a:49:c0:78:df:b2:e9:7d:1f:52:41:
         c4:11:d3:18:39:90:20:5f:85:29:6a:1c:c7:ed:1d:3a:5c:cd:
         ed:cc:ee:22:da:87:e3:a6:5a:83:2d:f1:b8:1d:84:47:cc:b4:
         a8:86:0a:f8:19:a3:5b:29:0d:2d:a2:e4:ad:ba:75:f5:44:95:
         82:7e:fd:29:78:20:38:0e:70:5b:3b:e2:c2:8c:5c:97:b8:a8:
         ee:84:06:03:d0:43:53:08:e6:7d:fa:46:15:0d:bc:96:f6:e9:
         e9:e4:e6:fe:03:5b:10:4c:cb:ae:86:c3:cd:59:dc:df:96:e2:
         57:25:36:44:8c:30:14:c6:4e:9b:f1:f8:cf:f9:34:0e:eb:32:
         ae:38:cd:7b:e2:97:76:43:5e:89:ec:27:fd:65:03:9f:6c:c6:
         ca:49:53:4b:6b:07:9f:d1:23:70:44:64:b0:73:be:a2:69:5c:
         10:92:1f:c4:1d:25:4b:59:9d:65:b1:13:01:5b:02:c4:f9:e9:
         05:13:a1:ad:b7:0a:7b:e6:ec:1f:57:8d:a3:82:5a:60:b9:40:
         a5:1b:9b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:22:45 2025 by rpki-client