Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File:                     gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier:          2K0AaC92KRjzaN717N4z7TPtK1KW28lQEslCs1eAcmA=
Subject key identifier:   32:D8:0A:EE:83:F2:FB:00:79:59:8B:A4:B8:5D:D0:94:BB:18:6C:26
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer:       /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial:       0196A50A957B1A91205B27C34D3023528FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number:          08D7
Signing time:             Tue 06 May 2025 10:00:56 +0000
Manifest this update:     Tue 06 May 2025 10:00:56 +0000
Manifest next update:     Wed 07 May 2025 10:00:56 +0000
Files and hashes:         1: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: E0wkh2nAjz30xan2Ld6BG7Vu7wNNqaC0x2DSRxp53VE=)
                          2: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (hash: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:0a:95:7b:1a:91:20:5b:27:c3:4d:30:23:52:8f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
        Validity
            Not Before: May  6 10:00:56 2025 GMT
            Not After : May  7 10:00:56 2025 GMT
        Subject: CN=32d80aee83f2fb0079598ba4b85dd094bb186c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:0b:7d:c3:02:68:b0:99:b4:d4:20:99:8b:
                    dd:96:92:7b:82:b1:9a:2b:aa:af:33:f0:88:3e:d9:
                    6c:95:9c:8f:6d:17:95:86:ed:0d:72:4d:55:39:af:
                    a1:21:6f:a8:49:0a:47:cd:84:b3:26:21:4d:c9:69:
                    56:96:55:69:1e:5e:6e:1b:c4:26:e1:7d:0f:4b:52:
                    40:ba:f6:7d:63:37:72:e9:b8:d5:8d:e3:46:a1:19:
                    ab:ee:51:95:93:60:c9:d7:61:b7:0f:56:4f:9f:88:
                    27:95:be:d6:c7:e0:8a:ee:3c:fa:03:f0:8b:21:ad:
                    2d:d3:2f:45:ac:a9:1f:d8:69:36:d2:c2:69:a3:d7:
                    ad:e5:6d:f0:67:3e:5b:de:27:20:c6:89:08:cc:59:
                    4d:65:95:22:97:fb:72:3f:b6:0e:33:02:0c:a2:4b:
                    5d:93:14:1d:35:8a:d1:75:1b:a1:22:1c:7b:a7:a1:
                    ed:8d:64:ee:06:b8:27:85:95:4d:22:b0:e2:8b:a0:
                    97:a8:0a:24:f4:02:86:c8:da:f3:ac:3b:d5:4f:a3:
                    2d:fd:da:5e:e4:73:0b:26:17:f4:85:20:40:ab:ff:
                    c8:ae:44:c1:39:2a:aa:c2:56:5a:7f:fc:2d:a4:e7:
                    e8:72:d5:03:eb:60:bb:8c:f2:62:53:5f:2c:af:d5:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D8:0A:EE:83:F2:FB:00:79:59:8B:A4:B8:5D:D0:94:BB:18:6C:26
            X509v3 Authority Key Identifier:
                keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0f:45:82:0f:84:7e:58:7e:65:8a:a6:3a:86:3d:57:6a:6e:
         5e:94:a6:e1:ad:8c:4c:b8:29:f4:95:3d:5c:8d:95:bd:c2:e4:
         63:13:0f:5c:3e:0a:7d:b7:57:ed:9a:38:2e:6e:5c:e8:24:52:
         a2:f8:38:71:cc:18:ac:de:de:83:53:bc:a1:55:70:04:1a:5f:
         fd:a1:78:f6:42:33:27:7a:86:83:88:90:dc:36:8d:d1:88:36:
         b9:e5:c7:89:d5:bb:9f:cd:d2:b6:89:6a:39:6b:02:41:2d:4d:
         b6:94:f1:41:2a:d3:c1:e9:d7:8e:b2:63:1e:1d:21:da:e8:ac:
         40:30:a0:cd:54:e7:23:d7:e6:c3:a5:1f:d6:38:08:bf:86:19:
         92:25:b3:fc:d6:a8:e3:72:c8:ae:c1:71:1d:0d:1b:2c:61:cf:
         88:39:eb:2e:6c:8f:2b:e0:41:5c:0d:18:cd:51:5c:73:57:36:
         fb:ff:bf:78:14:68:d8:44:9c:68:31:79:d6:fb:97:00:87:e4:
         61:c3:36:d6:83:80:35:bc:f3:58:b6:89:53:0d:09:f8:2b:34:
         97:e6:75:7f:14:3d:52:4d:42:4e:2f:e6:70:28:f2:b5:0d:9e:
         dd:b5:fe:e3:f6:b2:d3:53:23:07:5e:76:4f:95:08:e7:66:ad:
         d3:5e:fb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:54:18 2025 by rpki-client