Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File:                     gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier:          6d+mgVSsY1pBC1l5PHe7Lpwd9+n1+QGaIPsmgU6x6Xg=
Subject key identifier:   46:F5:4C:1A:3A:46:92:9C:7D:CF:3F:FB:5C:8E:2A:45:02:E0:04:04
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer:       /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial:       0196B96CAF7F7FCD2ABCF4005D764E8B9327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number:          1055
Signing time:             Sat 10 May 2025 09:00:29 +0000
Manifest this update:     Sat 10 May 2025 09:00:29 +0000
Manifest next update:     Sun 11 May 2025 09:00:29 +0000
Files and hashes:         1: Yk_mB5Br41Nhda13vL3dksE5LgU.roa (hash: K0LuZJCRzNJs5Bjbkimkjj4nwWKGnFgBw0hG+qjP3AM=)
                          2: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: TGnk7jKLsVhdrGe16wKfwdgmiAZfjtkdtgUCVFPqIV0=)
                          3: lkCjPKHQ8Kw51UGG5Fx-gWmfZeo.roa (hash: IrYEpIdSCLf/ZAAdJvK3O7zC/ibmRmQLp4sdzgkQJvg=)
                          4: mRlLG-5kU_wBciWClXIVvCGQxeE.roa (hash: ZuSklCsUXIbLUEwi1a/wPQy/93NYaA4MC8miFKmm96c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:6c:af:7f:7f:cd:2a:bc:f4:00:5d:76:4e:8b:93:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
        Validity
            Not Before: May 10 09:00:29 2025 GMT
            Not After : May 11 09:00:29 2025 GMT
        Subject: CN=46f54c1a3a46929c7dcf3ffb5c8e2a4502e00404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:65:32:7e:68:04:49:e4:55:9f:7c:10:48:
                    d4:25:d1:f8:03:ce:95:34:64:f8:6e:b6:94:23:e1:
                    c6:aa:9e:b5:43:e7:0b:2b:5f:58:63:8e:39:97:e0:
                    e4:81:2f:f2:94:2a:2a:99:da:6d:1f:13:07:99:6c:
                    53:b6:9d:91:31:eb:d6:44:b1:14:da:94:cc:f8:fd:
                    54:47:64:bc:3e:ae:61:1c:33:e3:a3:35:f5:a0:12:
                    1a:66:8e:38:58:2c:8b:05:1a:62:a2:25:32:55:4b:
                    2d:d4:b5:7e:66:81:1a:49:23:2b:1d:d9:18:00:a1:
                    dd:5c:08:da:f1:a6:67:92:5d:e0:99:74:02:5f:3f:
                    c9:5c:c1:c9:18:75:86:82:dc:32:b5:05:a8:37:07:
                    a8:cc:0e:85:b7:d6:f0:46:d2:54:42:17:63:a7:f5:
                    c2:0f:56:d4:83:dc:c7:ce:66:25:86:fe:90:eb:99:
                    d6:08:37:d3:02:11:1b:0e:f6:20:a9:6a:a8:be:db:
                    cb:af:d1:1c:43:5b:7e:e1:63:6f:91:3c:1b:8e:04:
                    a7:2b:da:c8:38:fe:15:75:90:55:ac:29:2f:0a:79:
                    df:84:11:cf:d9:52:46:de:21:cd:08:c2:7d:20:d7:
                    b5:18:1a:77:78:55:20:2d:92:56:8d:98:9b:6c:23:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F5:4C:1A:3A:46:92:9C:7D:CF:3F:FB:5C:8E:2A:45:02:E0:04:04
            X509v3 Authority Key Identifier:
                keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:64:53:70:a1:ea:37:b5:5b:d7:8b:5e:f9:ef:76:55:0f:55:
         d9:a0:99:a3:ca:29:e8:a3:a2:3d:12:9e:a6:0c:16:bd:e6:9d:
         e1:4c:53:fd:84:0f:27:13:be:d2:12:4e:ca:0d:0d:ca:fc:79:
         69:99:56:df:62:0e:85:93:5a:ee:3f:5b:56:b8:f7:06:38:1f:
         6d:36:ca:44:56:90:2a:5f:33:1f:25:5f:d6:b1:3b:70:93:b2:
         c3:d0:d8:d2:e1:17:dd:c0:e5:01:45:2e:33:7a:21:91:a0:91:
         a2:d2:a3:bb:d2:c2:97:52:55:78:19:63:10:36:be:5c:f6:e3:
         34:f7:e7:32:63:2b:a5:f4:4e:53:8c:d1:67:53:32:fc:02:43:
         8b:9a:a5:2c:72:86:fe:65:0e:64:7a:13:49:ca:8d:82:92:e1:
         31:cc:38:49:1c:dd:c2:23:cf:61:24:a6:cd:31:bb:55:25:f4:
         5f:8d:06:df:94:7d:a3:c1:61:5a:7b:46:88:be:5b:dc:56:71:
         9a:12:5b:27:87:b2:2e:85:05:64:1a:db:72:e0:36:b3:63:63:
         d3:67:9f:c1:33:10:07:e4:c4:dc:ec:68:b6:28:44:14:49:fb:
         2c:6d:c8:62:2f:6e:25:43:b6:16:a7:5f:77:67:e7:28:27:ee:
         ff:08:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:54:39 2025 by rpki-client