Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
File:                     gmvh-3GvSNazGFEKqL35qBXzPbg.mft (raw, json)
Hash identifier:          rWZ5EU0fhHLwD9g4Axg5omgGHfh8F+wCq1JvOwikxKk=
Subject key identifier:   CB:9B:5D:7F:9C:BA:08:9F:52:E7:7D:77:BF:25:DB:48:63:72:17:27
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Certificate issuer:       /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial:       019674F9E398B5AC78D97B13E9E367A60D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
Manifest number:          0BF0
Signing time:             Sun 27 Apr 2025 02:00:55 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:55 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:55 +0000
Files and hashes:         1: ItDOSAPXP7fGwIUCyAUKyyhkB4Q.roa (hash: OWstEJSZcgCk402ChRTJkXohNTIeEApse64rKCImRuM=)
                          2: ckwFjtT2deecTIv0EBJffOzlHQ8.roa (hash: AfxLwGByDY21vrcsdo3k0yXW342fPqqOEbjPkEKPwyg=)
                          3: gmvh-3GvSNazGFEKqL35qBXzPbg.crl (hash: qfAKAl5W9zr0V4YYy5YUgry8YqYqjK6SO1M6wSuO2pg=)
                          4: hSlAxKZnavSBFWLhMLPVbCueXS4.roa (hash: VFJXjLPeI3ZR1WorzKTvxcecT73zNWbWt4fU0UCHVzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:e3:98:b5:ac:78:d9:7b:13:e9:e3:67:a6:0d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
        Validity
            Not Before: Apr 27 02:00:55 2025 GMT
            Not After : Apr 28 02:00:55 2025 GMT
        Subject: CN=cb9b5d7f9cba089f52e77d77bf25db4863721727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:82:ef:6f:13:d5:28:c6:d0:58:13:85:95:
                    3e:e6:ce:86:1c:6e:3a:32:d3:70:88:ff:ec:bf:a2:
                    08:b1:aa:99:cc:dc:60:24:50:4b:d9:36:47:aa:a0:
                    5d:34:70:be:d1:10:e5:e7:e1:c5:23:6e:4d:39:24:
                    a1:c5:f6:f6:03:b3:dd:e0:ab:ff:5b:d0:b7:87:18:
                    41:0c:c3:b1:25:b5:e2:e6:62:22:de:98:6c:8b:cb:
                    c6:00:78:04:7f:01:dc:8c:9e:9a:09:c2:8b:50:6f:
                    83:5f:9b:a3:f0:ef:03:c7:11:d3:b7:2f:5a:9f:a9:
                    8b:97:b2:e8:e3:34:9b:43:3e:3a:de:c4:6c:53:6a:
                    9c:36:a4:f3:be:f5:fd:ba:41:e6:b6:22:89:0a:e2:
                    cc:3e:d5:78:f0:32:c3:0b:80:77:6b:5d:53:81:b4:
                    04:42:d9:21:ad:ee:99:84:a7:4e:6a:3e:70:25:a0:
                    55:a0:b7:50:e4:ea:b7:bf:14:c8:a2:8f:39:6a:1c:
                    03:da:39:cd:1a:a7:7f:01:1d:f1:9d:c4:cd:93:8f:
                    51:32:5f:dd:da:9b:af:cd:6c:3c:e5:73:a3:83:a6:
                    ec:d7:b8:bc:4e:09:ec:15:e6:a4:63:28:a8:64:ee:
                    25:5d:eb:6d:0f:10:1b:94:7b:71:85:7e:ec:69:06:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:5D:7F:9C:BA:08:9F:52:E7:7D:77:BF:25:DB:48:63:72:17:27
            X509v3 Authority Key Identifier:
                keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:58:d6:ff:d3:8f:7e:53:e6:f7:70:c9:b7:ae:54:e5:ce:46:
         7c:1e:01:dd:06:c1:f2:8c:d7:eb:9e:17:82:e2:28:c5:18:90:
         db:d3:cd:51:5c:d7:75:43:80:be:73:df:12:3c:22:87:62:4a:
         27:d6:9c:f8:3a:49:e2:6e:b7:ab:68:3e:85:8b:4f:06:86:3d:
         04:87:da:b5:c1:8a:d9:7f:52:60:57:a2:91:83:5e:a1:aa:d6:
         af:9c:95:e8:e2:01:e1:65:cf:9d:fb:23:5a:9e:2d:0d:65:07:
         fe:83:66:23:b9:75:46:b8:9d:5b:67:fe:9a:f6:fc:5a:86:9e:
         35:e2:42:a9:3e:a4:4e:a6:4c:d1:06:d2:d5:a3:74:d8:76:ca:
         c3:3d:15:ff:6b:05:82:8c:4f:f1:8d:bb:ec:9c:35:84:fa:70:
         ba:91:fe:0c:db:99:73:e5:a0:d8:e5:5a:2f:60:2c:c4:9b:77:
         ce:5f:5e:b9:cc:c8:09:3b:5e:a0:88:31:53:4d:3a:53:1d:13:
         3f:9d:27:b7:60:3f:a2:a2:16:af:b5:cb:86:bd:94:08:ee:5c:
         e9:d4:95:b9:3e:57:72:88:d6:5a:e7:c5:87:26:0b:a9:22:81:
         a7:a6:76:26:0f:ab:7d:2d:f4:dd:5f:b0:6d:42:75:5f:63:de:
         d2:bd:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:16:32 2025 by rpki-client