Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File:                     Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier:          AmmbmiZcGsdy6t1cH9PXB6MTMedn8Ws/+ERUQthznbY=
Subject key identifier:   46:43:7A:78:46:BA:29:76:B0:0D:67:57:4C:93:82:01:77:B2:47:4E
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer:       /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial:       0196C53ABDB9062C6409A7F28AE148BC5E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number:          1545
Signing time:             Mon 12 May 2025 16:01:23 +0000
Manifest this update:     Mon 12 May 2025 16:01:23 +0000
Manifest next update:     Tue 13 May 2025 16:01:23 +0000
Files and hashes:         1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: NwAnal4ltuNMSehsclQqt7bvX8QACfy1ZhVMxl//uUw=)
                          2: s5NfBBJCWwkg56h64SxZMZxnlwg.roa (hash: FJxF1xFcRFmlC4MqQuyUXAAPNu/l5AbVFkQWsYjIQ3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:bd:b9:06:2c:64:09:a7:f2:8a:e1:48:bc:5e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
        Validity
            Not Before: May 12 16:01:23 2025 GMT
            Not After : May 13 16:01:23 2025 GMT
        Subject: CN=46437a7846ba2976b00d67574c93820177b2474e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:0a:75:51:9e:fe:04:fb:5a:33:26:eb:4e:
                    c3:6f:c1:b0:87:f4:6d:0d:a5:38:65:1b:25:45:a5:
                    30:15:40:79:b5:89:a3:c5:55:01:db:3d:6a:cd:d4:
                    54:ed:32:46:e3:b3:53:b7:72:4c:2b:70:8b:6e:44:
                    77:e6:85:1d:c3:3f:16:7c:2d:8a:cb:15:ec:5a:bc:
                    7f:24:c6:10:27:e0:ad:e8:4a:16:a5:a7:cc:11:23:
                    ba:73:e2:38:18:29:19:58:a4:2c:2e:81:34:ff:61:
                    dd:b3:75:74:8f:e6:29:57:b0:a2:22:1d:e6:c5:c1:
                    09:a2:ce:42:e8:50:64:3b:15:f9:e7:40:03:28:7f:
                    67:6b:76:6f:d2:b6:71:f5:9d:b4:a1:89:44:2e:0b:
                    ca:dc:43:99:81:11:65:0f:65:72:73:7a:ea:ea:50:
                    d7:9e:cf:3c:22:a0:24:0b:80:b6:04:63:ce:99:83:
                    fe:5a:76:75:b7:ce:6b:d8:73:d9:97:8c:8a:b0:28:
                    f8:fe:05:c8:50:5d:aa:f1:3d:5d:63:2c:89:a7:a8:
                    93:fb:83:1d:f2:c4:bf:4b:68:89:52:98:bc:e0:f5:
                    c5:da:2e:e8:b4:06:27:45:08:d9:2b:35:6d:57:a7:
                    74:fc:6e:26:e6:7f:8e:4e:09:b2:ee:3c:f2:1a:28:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:43:7A:78:46:BA:29:76:B0:0D:67:57:4C:93:82:01:77:B2:47:4E
            X509v3 Authority Key Identifier:
                keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:c9:a9:52:df:b3:3d:79:47:1f:97:b1:05:bf:51:a8:80:
         44:30:37:fe:b6:53:52:ee:a9:d0:4f:5a:a9:cd:22:aa:3a:c5:
         9f:a6:bb:bc:a3:cf:c2:10:e5:c1:1e:fa:7f:38:13:2d:76:44:
         ea:10:b9:26:97:0b:c2:cb:fc:3a:c5:78:67:00:9f:b5:99:a9:
         97:3a:6b:63:42:38:4b:38:3d:00:78:73:40:93:0a:98:0d:db:
         a4:65:a4:6b:ea:ba:e7:a3:a1:63:13:f2:a6:9d:c2:dc:76:ce:
         78:7f:ee:3a:7f:a3:0e:e4:eb:1c:60:02:bb:42:65:a3:76:7f:
         a8:b8:8a:84:26:ff:38:b7:ed:50:9c:d3:3f:62:61:45:96:e5:
         00:26:6c:af:92:25:af:d9:ed:c0:3c:8d:aa:6b:40:4f:24:fb:
         7b:4c:d4:83:7b:13:e9:d6:a5:28:eb:bd:1b:71:19:2e:11:77:
         4d:ed:c2:c1:9d:43:c5:a8:85:7e:82:c0:53:d2:2f:8f:53:e8:
         7a:26:ef:84:7f:38:0d:94:8c:6a:86:4e:64:df:a2:95:26:ba:
         6d:f8:cc:93:28:f9:be:d6:05:d4:ec:aa:78:94:df:14:e1:fc:
         26:5b:b2:71:89:70:4d:6a:14:3b:f2:cd:40:d6:d7:2e:01:7a:
         be:6b:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:25:47 2025 by rpki-client