Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
File:                     G6jqOiKIpq-PZKg4MALHQIVXmgc.mft (raw, json)
Hash identifier:          +n23Wfs8ITS5H5ITgFKkgTe9vm3YVVtudTWDqvtmugo=
Subject key identifier:   83:E7:9E:98:68:77:15:C7:5D:D0:52:B6:70:5E:93:DE:22:1C:A9:50
Authority key identifier: 1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
Certificate issuer:       /CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Certificate serial:       0196C45E3652CD4F08D5322D543B95279989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
Manifest number:          13D2
Signing time:             Mon 12 May 2025 12:00:30 +0000
Manifest this update:     Mon 12 May 2025 12:00:30 +0000
Manifest next update:     Tue 13 May 2025 12:00:30 +0000
Files and hashes:         1: G6jqOiKIpq-PZKg4MALHQIVXmgc.crl (hash: Mq2znIFiX0DoTNx5X2SIMytOCdiDuCz70GcPqOlKzEk=)
                          2: awSvsuAzEkNxIrYxJqTZDb_nVnE.roa (hash: 3jZ+yIojuG+AZ6SFsISQRAEfZSYSxHFN/YCIQpbx+o8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:5e:36:52:cd:4f:08:d5:32:2d:54:3b:95:27:99:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
        Validity
            Not Before: May 12 12:00:30 2025 GMT
            Not After : May 13 12:00:30 2025 GMT
        Subject: CN=83e79e98687715c75dd052b6705e93de221ca950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3c:f2:33:76:85:65:10:83:71:47:44:ef:87:
                    1b:3d:cf:bd:21:60:65:66:1f:23:b7:f9:b3:39:79:
                    c1:82:4f:a7:93:ef:dc:11:69:30:46:a3:ec:4f:b5:
                    87:40:0d:98:2d:2a:00:46:d8:24:52:cb:a7:1c:1b:
                    96:87:a1:22:78:45:c5:51:98:37:5e:b9:f2:13:09:
                    11:57:3c:1d:61:73:98:2b:9e:52:83:82:11:f2:a0:
                    ac:de:5b:e2:f6:62:df:92:c6:40:66:ad:07:58:8c:
                    92:c0:37:ab:7d:5d:c4:e9:d5:46:36:c0:b4:07:fc:
                    c6:ba:84:86:29:da:17:b9:f6:49:d2:30:9f:b9:e0:
                    ea:5b:d7:e7:d3:b9:a5:64:4b:a1:7d:29:61:44:96:
                    41:d4:0e:62:4e:3a:66:5a:67:3a:6a:e1:60:06:ed:
                    ec:24:fd:d6:0f:4a:95:35:8a:58:07:d9:3f:42:4d:
                    b2:57:59:72:79:a1:1e:0e:b1:a9:1d:7e:4f:6a:ca:
                    ec:25:6f:ef:7e:b9:f2:de:77:d2:6f:a4:f2:db:31:
                    15:41:0b:0e:6a:83:a0:e6:3c:68:8c:f0:7f:e3:d8:
                    1d:9a:6b:de:f7:2a:84:99:45:dd:ca:da:20:7e:99:
                    b2:4c:d1:f6:0d:02:55:58:f6:16:98:fb:d5:81:4b:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E7:9E:98:68:77:15:C7:5D:D0:52:B6:70:5E:93:DE:22:1C:A9:50
            X509v3 Authority Key Identifier:
                keyid:1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:bc:0a:7d:06:cb:f3:40:14:3e:40:dc:25:ef:79:21:f4:
         41:83:a2:70:28:0d:8d:fa:6b:65:9f:c5:fc:8e:c0:80:b4:53:
         c4:89:ce:d8:33:d7:c6:8c:f7:2c:19:10:87:0d:e5:f6:4b:65:
         72:2c:98:e3:48:43:26:b7:3a:b1:78:8f:56:20:e6:08:33:7b:
         3d:dc:39:3d:54:6e:a6:40:4c:80:be:38:3c:e8:f2:1a:33:43:
         4e:9c:40:b7:6b:50:c6:7c:ad:9b:c4:71:7f:64:d6:01:b8:e0:
         13:aa:ec:27:fb:7a:bc:75:7c:12:3e:26:30:be:c5:b9:6c:d4:
         33:ff:49:cd:01:eb:6b:0c:d9:26:f8:df:71:55:b8:5d:d4:b3:
         38:d4:7b:80:e7:03:fd:b6:c1:6f:3b:36:14:1f:f2:e8:db:ec:
         91:da:b5:fa:4e:16:93:00:c5:5b:d3:c6:6e:b4:02:7e:e7:ab:
         91:04:ee:31:b2:f6:6f:f2:f8:f4:f3:fc:d2:2d:9c:cf:28:df:
         c5:a6:08:b0:36:7b:2f:99:53:14:a5:55:e4:9e:3e:7f:bb:63:
         da:72:11:31:e8:a2:12:8f:02:60:39:7a:2b:d8:2a:f1:da:08:
         28:4d:28:d2:dd:f5:b2:01:92:96:16:b5:b2:8e:a3:ed:d9:a2:
         e3:43:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:10:02 2025 by rpki-client