Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
File:                     GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json)
Hash identifier:          raTb3xseVubj6hQGLSks2QHhFAhlMJDq9s9ghhaJcKg=
Subject key identifier:   88:6E:36:78:1F:99:FB:6B:AA:20:18:72:28:37:17:F2:0E:64:E5:1C
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       01987D8A0D20C135EDD14DB5D60D6F19FA08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
Manifest number:          07B8
Signing time:             Wed 06 Aug 2025 04:00:55 +0000
Manifest this update:     Wed 06 Aug 2025 04:00:55 +0000
Manifest next update:     Thu 07 Aug 2025 04:00:55 +0000
Files and hashes:         1: 3NMfZNisec-vqD22vXNPki2ntVE.roa (hash: WaHglmLSlZJ16poYzd5QuYA7KNAkhTFS78CpF4RUX3I=)
                          2: AmTrNmiUz3PQJSPRxeGKui--CsM.roa (hash: D2X8Ub7d1XFRGUtdtCWVBQi+s/6Li/HzCnTuVF4H0hw=)
                          3: BjnyGiZGjHiQKk_KiK2yHf9VV5E.roa (hash: yPmoHixaBGhSn0ytp1vI4gHgRuEEubgW3Qlg0aIFvLw=)
                          4: DwaqxzmRSIx0-STl7nKTGpQzuOY.roa (hash: MZmP0bhKRokke3K++mx2NwZxuOVWVJCAYgwxbhXA9iI=)
                          5: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: 3pTxCmTJnt0RWmHCLktUBk6NqMOQ73M0ca+pKhtnMIw=)
                          6: OjNkZBsD7_7ya1gvmoZ6C9IcKqA.roa (hash: QIsvbi1JaiVHwDu3LNY+DC4jKpBlQxMAMFNWUB09hyg=)
                          7: SStPLeYhuVW8ht29Rl4UMKZeE8Y.roa (hash: oIaG74/+nV2sdh79tye5X0ZT2qnqxj3Pq9M6q6XHKAw=)
                          8: UX1FG7BPxLN_6ufljGY3tuBoI2k.roa (hash: 2XU8mmir09zmdANIc3P91NSucr1JlTpLnKmXeZUmmHU=)
                          9: XLUh0v_eWb4ByZlyr_8IFlpagYM.roa (hash: OZc6IBFQYjTFaecuhGPDb6Fno7u24w/UXmkci73bi8k=)
                          10: bs7GziLox9peGF2yvnXKRWa8CtM.roa (hash: cBuRaE10dL+zgAwaQff5Gg3RICxaLuAu1aSi+XkcBE4=)
                          11: c_ipsLRzEgE5DXpkiVFIk32gy4w.roa (hash: KkfKem9M1oAl2JCMI+RrdXiWdDVk/LRejyZbOohwDvU=)
                          12: d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa (hash: 0RwztfGXYXDxIIQZaqPOXqxbSmC1TrJiJ1GXH53HmB0=)
                          13: izylkdHb8K1XiexJr07bxHzS70o.roa (hash: +WAoXiTTcbRjvuFJ+mdToEXjYNYtqJBIbb39TwPcmHE=)
                          14: tlIT9EE8YpMp8nWSniI3miatB10.roa (hash: hMUJkDEHVtxIORugCsH16m3DT06lYDeH6qg/65YvGew=)
                          15: yTtcVU9ChNydH2mKs4iN5Ah2HPs.roa (hash: ro/KjPOdv9iitLmrbKrmD5i/eJZ/0hcJVF+hmNRnyAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:0d:20:c1:35:ed:d1:4d:b5:d6:0d:6f:19:fa:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Aug  6 04:00:55 2025 GMT
            Not After : Aug  7 04:00:55 2025 GMT
        Subject: CN=886e36781f99fb6baa201872283717f20e64e51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:06:a0:35:c7:be:82:19:5c:7b:1c:f9:52:
                    3c:6b:96:fa:7d:f3:f2:58:92:db:e6:02:d9:6c:ae:
                    47:d0:bb:ab:31:f5:3e:c5:fc:56:d2:35:53:a3:a1:
                    45:8e:c2:39:af:55:8d:86:8f:d0:c0:28:87:e4:c9:
                    95:58:b6:2d:c1:b4:15:50:bd:c1:30:fe:a7:08:e1:
                    b0:be:b9:1c:63:bc:7f:99:eb:c4:b6:f5:f2:7e:4d:
                    1f:0d:14:6f:0b:38:93:76:59:85:6d:d0:c4:db:79:
                    c5:47:53:b7:53:37:9f:cd:0e:c4:41:27:d2:be:90:
                    34:d9:34:55:30:03:95:40:9d:43:bb:83:46:07:2b:
                    3b:86:b1:59:60:16:75:4e:5a:5e:a9:6f:f1:3f:4f:
                    89:ff:73:ad:96:c2:0c:1d:22:a3:ed:ed:15:9a:49:
                    e5:14:a5:65:d9:34:87:88:08:98:4d:53:bb:82:45:
                    5f:3f:d9:f9:34:5b:fc:c8:91:01:8d:45:b5:fd:fc:
                    bf:8e:8c:27:3e:d4:c5:06:b8:c5:b3:3a:af:61:26:
                    fb:a7:85:0e:ca:97:c3:4a:a9:c2:4b:98:50:05:d2:
                    05:f3:9e:4d:3a:a0:3b:e7:7a:7b:6b:77:92:7b:e8:
                    ed:5b:f6:f6:5f:e4:66:61:73:9c:02:cf:1c:ff:b0:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6E:36:78:1F:99:FB:6B:AA:20:18:72:28:37:17:F2:0E:64:E5:1C
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:da:2f:0d:ae:25:56:c2:2b:43:6b:b1:7c:b5:e4:6a:05:88:
         f0:98:b0:49:14:f9:eb:74:57:ce:2a:9d:3f:83:61:a6:82:07:
         23:67:34:9b:db:cc:4b:a6:ec:a7:1d:cf:2a:92:4b:5d:05:ad:
         e3:d2:7c:a9:74:aa:22:a8:70:62:41:82:b3:8f:b9:4f:28:77:
         d4:63:0f:c6:77:56:cd:38:e9:55:d0:f0:ff:c8:09:08:86:62:
         79:84:cd:5f:f6:a3:e3:f4:0c:73:09:5b:17:c3:48:fe:2d:d6:
         2f:75:bd:96:bc:b6:c8:ab:ba:9e:23:3f:25:67:98:a6:e0:45:
         a5:c6:7d:c4:37:d9:3a:f4:26:7f:50:22:48:b3:93:64:fd:a5:
         7b:7a:99:61:6d:94:a5:e3:a0:14:c3:2a:d9:24:2b:72:ed:1b:
         f7:11:5c:b0:26:ec:66:b7:83:20:32:11:ba:1f:e1:d3:18:45:
         ac:64:bc:88:29:0d:37:fd:6e:cb:95:6b:65:c5:41:1d:d7:11:
         f2:03:d5:d9:07:1d:ce:2f:ce:5f:38:cc:e6:08:39:2c:b6:29:
         d1:3b:e5:56:9a:5d:d0:9c:79:9d:64:2d:5d:44:02:27:39:99:
         14:ef:dd:a5:da:d1:58:a1:da:51:f7:a7:86:08:18:79:e8:80:
         60:f3:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:16 2025 by rpki-client