Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File:                     gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier:          Wk6NMFEphHhWVastpQp6aDCRxIie4TfXcOcEg6msv68=
Subject key identifier:   EA:14:C4:70:1B:A0:60:62:B1:A2:97:4B:32:0F:DC:77:36:5D:2B:10
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer:       /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial:       019872CF95A04209EA050C425C59FAA9FA3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number:          15A7
Signing time:             Mon 04 Aug 2025 02:01:03 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:03 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:03 +0000
Files and hashes:         1: aBrEW06-xKv77MgMEwK2_lYbz-I.roa (hash: RP6KdM7YV2WY/3+umq6rKSdZ3FIW7gCCmbirjcfrx/0=)
                          2: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: w3to/NM/bbWGj7os7PhUl5QHYSwZd7a1BH2xqYix4C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:95:a0:42:09:ea:05:0c:42:5c:59:fa:a9:fa:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
        Validity
            Not Before: Aug  4 02:01:03 2025 GMT
            Not After : Aug  5 02:01:03 2025 GMT
        Subject: CN=ea14c4701ba06062b1a2974b320fdc77365d2b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:a7:9c:73:9b:77:4c:0a:11:ba:56:b3:48:
                    51:36:57:d6:3c:73:6e:72:ad:5b:f8:c1:08:32:fb:
                    f5:99:be:db:2f:03:f7:40:e9:dd:07:1c:c3:fb:11:
                    66:9a:8f:39:d6:1f:79:2b:14:37:92:3a:96:49:92:
                    ee:8f:26:11:c7:50:06:66:2d:2f:00:8a:b6:9b:ba:
                    a1:81:ba:8d:eb:de:fd:73:62:fa:92:99:2b:6b:f0:
                    df:17:f9:b9:98:c4:c7:c2:7f:97:d1:e7:2e:80:87:
                    f8:a8:1a:da:da:75:d7:47:d9:87:07:ce:49:f6:e5:
                    8c:e3:f1:ea:5c:3a:90:25:8e:ce:32:d6:77:6b:c6:
                    a7:26:e9:48:59:55:d4:59:51:4d:34:5d:00:86:70:
                    9a:c4:c1:5f:c4:77:df:3c:ca:bd:7c:70:ec:da:4c:
                    39:84:63:c8:20:8c:6b:9c:85:54:9d:72:59:59:59:
                    31:16:18:36:55:40:1e:0e:82:2e:15:fb:ca:63:0e:
                    08:27:b4:8b:ae:60:44:18:1a:2c:ad:d2:ab:64:7c:
                    2f:91:c2:f8:4e:75:73:7c:46:aa:8d:5c:0b:62:b8:
                    97:21:80:c9:79:6a:25:10:74:a0:f0:23:df:6f:47:
                    d4:81:a9:f7:fb:8b:4c:1f:3e:53:f8:fb:96:27:ba:
                    08:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:14:C4:70:1B:A0:60:62:B1:A2:97:4B:32:0F:DC:77:36:5D:2B:10
            X509v3 Authority Key Identifier:
                keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:66:84:f0:65:f0:b0:4b:35:df:b9:9a:e9:0d:01:1c:35:99:
         5a:fa:4a:72:01:f1:87:ca:4c:52:7e:8e:76:aa:bb:c1:4b:33:
         d7:18:2b:58:ad:7c:06:ac:89:9c:a4:c6:67:95:3a:bc:f6:9c:
         8b:dd:fa:fb:40:33:5b:dc:16:17:e4:bb:b7:59:cb:4a:bc:24:
         63:f3:a9:25:74:95:55:ec:4d:34:30:31:7f:f0:5d:6f:4e:76:
         a4:1e:d4:8a:79:9b:fa:fb:3a:82:92:9c:1e:be:6f:07:fc:be:
         87:bf:dd:d5:93:0b:cc:cc:cd:ee:82:d6:85:50:fe:46:86:c8:
         f3:be:54:08:7b:86:3f:41:0b:13:ac:10:b7:fa:5a:b0:09:d2:
         44:c6:6a:58:69:93:28:9d:5e:e1:93:c5:27:94:ad:2d:47:ea:
         2c:80:fa:cc:f2:11:ac:74:ba:26:ee:7e:02:3a:76:af:46:e4:
         df:fa:b5:8f:2f:7b:a8:bf:56:89:a1:5a:0f:44:b4:e7:45:0a:
         ca:97:17:5f:e8:c8:6a:09:6b:d3:b4:09:e0:e2:95:71:25:74:
         d3:7d:cf:96:12:a7:39:21:9a:5d:80:16:6b:81:f3:02:23:84:
         18:f9:f2:24:95:ca:56:15:b1:2c:6a:46:7b:db:70:8a:64:6c:
         43:70:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:36 2025 by rpki-client