Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File:                     gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier:          rDDsACOQyQRzm3sJzk9soYDB6fZ220Z/CngJyuEMzJ4=
Subject key identifier:   80:2F:49:8B:30:AE:1E:11:BA:F4:3E:7A:55:C9:4B:06:12:EA:56:60
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer:       /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial:       0196CA97040B14F4528FEB10659E5A141A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number:          0D7D
Signing time:             Tue 13 May 2025 17:00:16 +0000
Manifest this update:     Tue 13 May 2025 17:00:16 +0000
Manifest next update:     Wed 14 May 2025 17:00:16 +0000
Files and hashes:         1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=)
                          2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: SlFcDJ12gdvMHpMIbCpRPCqSrM9FTtiD7myJi/qhTOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:97:04:0b:14:f4:52:8f:eb:10:65:9e:5a:14:1a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
        Validity
            Not Before: May 13 17:00:16 2025 GMT
            Not After : May 14 17:00:16 2025 GMT
        Subject: CN=802f498b30ae1e11baf43e7a55c94b0612ea5660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:3f:33:78:0b:53:dc:03:00:c0:43:7f:f2:
                    f7:4f:ec:b8:b8:d2:d3:0c:0c:3d:e1:62:dd:69:bc:
                    1c:8e:8f:29:f2:bb:bc:7a:44:ae:cc:20:8e:71:ba:
                    48:e5:8d:b8:da:ef:e9:e8:42:a3:60:cd:6c:1e:bf:
                    9c:c0:af:3c:07:bd:62:9f:74:c9:3d:d0:7a:9f:e8:
                    a6:ca:97:86:6a:f5:e6:c3:a4:3a:2d:19:9c:15:ec:
                    f7:43:38:24:f0:13:48:0e:31:6e:a8:99:f3:40:a6:
                    e7:67:f9:d2:cb:c0:6e:a8:23:08:71:8d:76:3a:e3:
                    93:84:44:b2:af:38:d8:91:f7:22:ad:fa:5c:20:af:
                    9a:0c:72:9c:62:ed:b4:25:2a:15:f6:8f:05:19:1c:
                    60:74:57:ca:ea:fb:df:3d:63:93:6a:04:7f:58:1f:
                    0e:4c:c3:8c:13:d4:76:4e:aa:ee:a5:38:86:d8:03:
                    2f:2b:61:6d:38:aa:60:66:64:9f:ea:e8:b2:78:be:
                    c6:9c:4e:a1:d1:dd:bc:f5:bd:13:82:da:de:1c:7b:
                    d7:ff:c3:f0:a8:1c:22:a3:98:ec:e6:d4:fe:a4:2f:
                    38:ba:04:00:66:57:6c:e6:53:2e:7c:30:f3:a3:2c:
                    24:f9:22:4d:14:22:fc:4a:23:ca:ee:4b:0a:6f:fe:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2F:49:8B:30:AE:1E:11:BA:F4:3E:7A:55:C9:4B:06:12:EA:56:60
            X509v3 Authority Key Identifier:
                keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e1:6a:17:c5:17:ac:c4:70:be:ad:b3:34:ab:83:77:2f:3a:
         29:b2:f4:f1:db:c2:e4:5a:54:1e:2f:47:bf:e8:cc:0b:b0:f5:
         ac:87:e6:0c:88:13:c0:d7:19:53:41:7a:4d:f5:08:24:4a:48:
         22:50:2e:e0:ed:1d:26:62:36:ed:2e:8d:18:91:39:61:90:47:
         fe:75:1a:5a:a0:42:46:14:d1:9b:ec:4d:b6:37:7d:e8:aa:66:
         79:51:57:bc:e0:73:69:f6:32:73:26:da:6f:ba:06:e4:c0:66:
         84:b3:7c:b3:43:08:3e:51:49:f4:ee:40:3f:35:82:68:0a:07:
         eb:9d:7b:f2:5c:79:87:4d:43:ac:4f:8f:0c:5b:0c:d1:01:12:
         60:96:2f:12:f6:76:9e:4d:d2:3e:3f:b0:39:b3:8d:0d:42:7e:
         6d:53:7e:3d:7c:4f:f5:3d:90:e3:23:a5:f4:b9:71:be:44:a3:
         1b:8b:08:08:00:d2:f7:ac:e5:b0:44:fa:ea:3e:50:bb:a2:22:
         81:75:96:6c:ff:60:61:b7:f7:1d:5e:42:82:23:36:ef:44:61:
         21:e6:b7:7a:eb:b9:ff:87:a7:83:20:0e:60:20:35:30:a6:a2:
         d6:8c:ef:52:81:74:91:84:c9:a2:90:d0:07:dd:9a:83:0b:1e:
         1c:06:f0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:24:36 2025 by rpki-client