Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File:                     glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier:          lP8PqY44yDZfW+WRHxxKOU8t3tvSWzKAjQ63Sw53GUc=
Subject key identifier:   E7:C4:19:EC:E2:12:21:A2:7E:F7:EA:46:E9:C5:B2:EF:AD:ED:2B:E8
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer:       /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial:       0197B7450FFCBC3E4281021E1D36F39FFAA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number:          0C96
Signing time:             Sat 28 Jun 2025 16:00:45 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:45 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:45 +0000
Files and hashes:         1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: UY/o7OFGHzeLgJdWOb9KnraYb2TIok8b7HIOdCdf7w0=)
                          2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:0f:fc:bc:3e:42:81:02:1e:1d:36:f3:9f:fa:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
        Validity
            Not Before: Jun 28 16:00:45 2025 GMT
            Not After : Jun 29 16:00:45 2025 GMT
        Subject: CN=e7c419ece21221a27ef7ea46e9c5b2efaded2be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:32:b7:5e:ab:0e:11:81:4f:85:7a:12:ab:
                    86:4c:0e:f5:28:ae:8a:71:46:81:17:dc:0c:19:d5:
                    ea:75:59:e7:80:55:80:32:8a:8e:84:26:08:2f:81:
                    d0:bd:84:39:9b:2b:e7:43:e7:d7:2d:62:79:ac:10:
                    20:c3:5d:96:86:22:58:3f:63:b2:77:68:a5:c0:2f:
                    ef:30:a5:1c:2f:44:09:b5:02:5a:30:dd:b8:2c:56:
                    b3:da:42:d9:f0:d8:62:84:0b:41:bc:a3:c3:ca:1a:
                    4b:ab:ad:b4:f0:20:e4:1c:04:5b:11:6f:e4:ff:8c:
                    bd:e7:ae:ee:2b:cb:81:f3:75:6e:c5:48:e8:0c:5f:
                    80:91:a9:c9:4a:3a:48:40:35:60:db:2c:57:90:6e:
                    fd:7e:bc:91:e7:6b:6d:50:33:34:fb:86:2b:81:d6:
                    fc:81:0e:03:59:f4:ca:d6:73:0c:44:63:bd:44:1d:
                    74:96:71:b0:e1:28:a9:7b:c8:69:9d:1a:52:d3:72:
                    2f:0a:0b:e2:81:5c:96:f2:33:12:32:9d:8f:64:06:
                    ae:7f:d8:e0:e0:f2:1e:0c:c9:0b:f3:69:c6:7f:d6:
                    af:d8:e4:c1:0f:69:40:56:2a:cc:3e:20:79:bc:07:
                    f5:e2:08:c3:29:69:d8:e2:5c:d1:1c:3a:e4:d2:67:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C4:19:EC:E2:12:21:A2:7E:F7:EA:46:E9:C5:B2:EF:AD:ED:2B:E8
            X509v3 Authority Key Identifier:
                keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:81:bc:f0:3d:e8:46:6f:71:d2:97:eb:92:17:a4:f4:cf:d4:
         a1:40:e1:60:bc:7a:6d:6b:dd:ae:c0:74:61:84:9a:a9:ab:48:
         d2:7e:e8:e2:65:a7:5c:73:70:2d:f9:d6:60:67:fc:b4:5f:f0:
         21:e2:49:56:54:b3:a6:5a:a4:23:81:cf:15:bd:d1:99:7f:f7:
         43:c0:88:c1:5c:0d:69:7c:91:90:1e:ae:90:7f:d2:24:10:6e:
         71:b2:a3:58:df:3a:fd:1e:70:6e:eb:d3:e0:75:53:ed:2c:65:
         9e:1b:1f:0c:79:ea:35:8c:20:97:3f:0b:b6:e4:9d:4b:89:de:
         a0:54:e8:7c:b4:11:db:f3:4b:3b:a1:c4:99:ac:24:70:56:4a:
         84:50:3f:84:91:09:6e:e1:7f:c8:f5:57:78:3b:f2:10:e9:78:
         09:72:69:41:ef:f6:32:2d:64:8c:8b:fd:e0:dc:52:6d:b7:2c:
         b0:ae:67:18:cf:85:bd:c7:fa:b1:9c:17:d2:81:fc:fd:55:37:
         a6:f1:07:60:40:d0:a9:01:8f:45:89:21:0f:c6:a8:24:72:c1:
         aa:cb:b8:ec:5a:ba:1b:02:98:5b:83:98:e4:a8:cb:79:a2:51:
         2f:72:2e:79:02:a4:6b:cf:85:17:85:26:27:95:1b:b4:9a:39:
         4b:34:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:28 2025 by rpki-client