Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File:                     GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier:          kzmGTIn4DOJXVGV3TYQhHGCTNJlqUSQr1W5xNbG+8KI=
Subject key identifier:   3A:95:E5:62:84:40:9C:B9:B7:B0:08:29:62:C3:33:FF:10:D3:B5:BE
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer:       /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial:       0198819E5C60351FCD63204EFBD49B436E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number:          07B2
Signing time:             Wed 06 Aug 2025 23:01:35 +0000
Manifest this update:     Wed 06 Aug 2025 23:01:35 +0000
Manifest next update:     Thu 07 Aug 2025 23:01:35 +0000
Files and hashes:         1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: 8njdFMd4XDJWCAyMr+RB0HlbnC+wOYa2ITE4q5f4FO0=)
                          2: i3e8wCKSQ41m2OIaVF9MlCgeLgA.roa (hash: 4qgbTrajbEXgLsjqzkg5VgJTQJvi2U7RCx9bgextP3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:9e:5c:60:35:1f:cd:63:20:4e:fb:d4:9b:43:6e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
        Validity
            Not Before: Aug  6 23:01:35 2025 GMT
            Not After : Aug  7 23:01:35 2025 GMT
        Subject: CN=3a95e56284409cb9b7b0082962c333ff10d3b5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:e4:84:c3:14:84:d9:d3:68:36:e4:5d:2c:
                    e2:b0:43:52:8a:ca:21:11:58:1b:b1:e1:d3:8b:e0:
                    bc:52:34:ba:0f:b2:a8:b5:9b:00:16:e9:65:b0:0f:
                    81:45:fd:23:57:b3:01:5a:7d:87:29:3d:ba:cc:98:
                    b9:63:fb:64:d0:15:7b:cf:19:e9:8b:00:87:40:81:
                    3b:8e:10:fc:ab:d7:48:20:0c:8a:f3:a1:9a:f6:db:
                    08:ad:dc:10:d6:63:3e:f6:6a:2d:d3:d6:3f:83:1d:
                    5b:28:59:fc:70:3c:59:c5:c2:8f:74:d9:d9:9d:96:
                    6e:dd:a1:74:a9:37:9b:79:0c:7c:44:be:2a:58:c0:
                    38:5a:ee:f6:1a:b7:c4:64:b6:a6:c7:fe:d1:9c:4b:
                    d9:3f:c2:2d:46:0f:84:4b:32:5d:89:6f:d8:61:f5:
                    aa:83:8e:bb:90:c7:d6:cd:46:3f:d9:12:4c:63:1c:
                    ad:98:bb:1f:f6:61:a5:7e:c5:ed:c1:2e:97:14:18:
                    51:ab:46:95:f6:7a:3f:e3:d9:7a:64:ca:3d:d2:90:
                    77:15:39:ef:c5:16:88:bf:f7:f6:3d:17:3a:b8:28:
                    41:3d:b0:e9:1f:b9:3b:31:9f:56:cb:7c:b5:2c:10:
                    ee:41:a9:e4:b6:f4:ac:f5:10:a0:7b:df:d7:89:b2:
                    8a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:95:E5:62:84:40:9C:B9:B7:B0:08:29:62:C3:33:FF:10:D3:B5:BE
            X509v3 Authority Key Identifier:
                keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b2:35:c5:fc:d8:6e:8d:be:a5:12:b8:88:1c:fd:15:4b:97:
         e3:86:3e:3f:20:8c:ad:41:98:81:9e:b8:1f:0c:d1:83:a5:e0:
         ff:60:cb:6c:ac:ae:dc:1a:ce:2b:ed:7e:68:00:40:27:56:2b:
         66:fd:dc:35:95:eb:73:cc:7b:19:57:45:8e:a3:ed:48:30:be:
         0a:f0:dc:0e:af:bc:2f:a7:77:bc:d8:42:4b:ae:f4:de:4a:84:
         7d:9a:3a:b5:46:ac:47:fb:e0:af:30:93:08:58:dd:e8:d1:cd:
         03:c3:de:fb:bc:b1:49:c1:a0:ec:9c:4a:ec:5d:4a:84:e9:cc:
         df:c6:74:5c:05:7c:c7:dd:9c:59:31:af:c7:a7:35:44:b3:42:
         8a:29:c9:15:e4:98:46:59:29:8a:27:a0:6b:97:2a:52:27:a9:
         fc:00:7e:70:4b:09:e4:67:fc:85:bd:15:0a:24:ba:95:a1:41:
         0b:9f:06:57:81:ec:c6:85:8a:5b:03:44:0b:cd:b5:8a:27:02:
         bf:c2:9b:13:01:88:c9:8d:7f:50:9c:f0:e2:d0:85:19:b0:d1:
         25:9a:67:24:88:08:35:e8:0f:84:58:30:01:9b:17:f9:da:5a:
         d3:b3:d3:ee:cb:46:67:c0:84:8d:13:ec:48:cf:9a:8e:73:07:
         55:df:d9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:37:47 2025 by rpki-client