Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
File:                     gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft (raw, json)
Hash identifier:          TtdehQZP7+V/Q8j0vZWZ3WY2LCV3hTi5ITC9JbedHzc=
Subject key identifier:   7C:BE:3C:4B:97:75:A4:C7:51:CB:4D:E6:5B:C8:95:00:5E:B0:6F:30
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Certificate issuer:       /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial:       0197B7455AC04BE5654C3ED52757120FF36E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
Manifest number:          1155
Signing time:             Sat 28 Jun 2025 16:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:05 +0000
Files and hashes:         1: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl (hash: NB9ek6AlWnNC/nxAIfEEn9tKmVdX2tzBNz38/pxYZPM=)
                          2: iR_ztCB6R1k94ApZF9GyNibhF8I.roa (hash: YgaarQK+xvFmoK9MLi28PlE1obREeY36cujrYCHGRgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:5a:c0:4b:e5:65:4c:3e:d5:27:57:12:0f:f3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
        Validity
            Not Before: Jun 28 16:01:05 2025 GMT
            Not After : Jun 29 16:01:05 2025 GMT
        Subject: CN=7cbe3c4b9775a4c751cb4de65bc895005eb06f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:87:f2:fa:26:be:33:72:28:7f:fa:e2:bb:
                    2e:53:ce:bd:73:a9:d9:d2:4f:4b:0f:c4:db:e5:78:
                    ca:38:10:be:b3:ba:47:3e:88:ca:13:20:d8:46:b3:
                    a7:90:e7:ea:79:a4:71:d0:65:6e:87:7a:9a:e8:16:
                    d2:84:93:55:0b:4e:6f:8f:dc:30:4c:36:bf:73:a0:
                    3e:8c:21:10:5b:41:8e:42:e0:b4:ec:52:0c:86:f3:
                    cf:f6:87:dc:d0:55:de:3e:55:a1:6c:1e:23:24:30:
                    ce:ec:d5:95:d1:df:c6:fe:c7:7a:08:25:62:75:cf:
                    a7:cc:e8:54:8a:b7:f6:3b:01:3c:2b:f9:c2:49:3a:
                    55:c4:43:68:ea:3e:34:7f:6d:4a:8c:29:33:c7:0f:
                    8c:63:97:93:1d:e6:74:64:c4:c7:1f:ed:47:3b:71:
                    aa:94:7e:ce:db:65:1a:db:08:2d:02:be:7e:2d:b5:
                    c5:1a:e9:eb:8a:4d:57:46:66:16:cf:bf:5c:cf:00:
                    af:72:57:38:e3:ad:f0:c9:4b:4a:3a:01:55:2a:48:
                    06:c7:97:cb:18:27:b6:63:ff:00:e2:e9:99:e2:ad:
                    bc:f9:ad:1c:39:ff:f6:21:79:5f:f7:70:2f:61:03:
                    45:1e:d5:ae:c7:09:77:e8:61:4c:6d:00:b6:37:a9:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BE:3C:4B:97:75:A4:C7:51:CB:4D:E6:5B:C8:95:00:5E:B0:6F:30
            X509v3 Authority Key Identifier:
                keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:57:97:d0:ac:14:87:66:a8:de:47:22:01:79:94:80:e1:94:
         cc:dd:e3:20:56:ec:6c:13:11:82:5f:58:77:8b:b9:74:cb:87:
         77:34:be:2d:a7:61:62:13:95:a1:0b:50:11:44:21:d2:c2:f6:
         cc:79:68:08:21:9a:91:89:ec:18:52:c4:96:91:49:ca:48:cb:
         16:a3:de:9e:a4:69:a5:66:a3:13:ff:6e:b0:8c:cd:de:b1:9d:
         3a:61:27:5f:d0:c0:43:16:51:e4:10:19:ee:3a:b0:95:98:a7:
         38:18:8d:24:a5:3c:d4:b8:f2:e4:ff:c7:07:c2:40:70:57:95:
         86:53:e1:3c:12:f6:53:b0:40:ba:a3:5e:5b:a8:e5:e0:53:58:
         65:34:6c:51:b4:39:89:be:4e:a5:65:6b:af:64:79:79:fc:19:
         b9:3a:f0:94:29:de:31:e4:34:02:e1:02:1f:99:f3:8f:7f:c4:
         bc:74:f9:a8:51:b4:81:ae:37:19:c5:bd:35:ad:86:75:2f:ff:
         b1:8c:fd:2e:ae:45:f3:92:aa:1d:a1:17:64:e5:8b:ff:cd:e7:
         a1:9c:0e:a1:d7:00:0a:1c:7e:dc:c1:3d:13:42:b9:8b:52:16:
         ac:c2:c9:ef:d1:1f:92:2b:82:52:37:64:b5:a0:bd:6f:84:a7:
         a4:0e:35:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:10 2025 by rpki-client