Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
File:                     GtXRdMu0aq-GVVuA4XczMbhwtWg.mft (raw, json)
Hash identifier:          85BFvprUyWWKyGSUmHc00NoPi4R1Q1NR8wLyv5WnP7A=
Subject key identifier:   18:8F:61:56:F9:AB:2B:57:B9:FD:0D:91:C9:7E:B1:C5:48:EC:C1:B0
Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
Certificate issuer:       /CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Certificate serial:       01987E66235C58A26CF75A01092EBB4F8DA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
Manifest number:          04D7
Signing time:             Wed 06 Aug 2025 08:01:19 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:19 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:19 +0000
Files and hashes:         1: 9dcg4kop7SgWnE6_RqxuTw6E4S0.roa (hash: 0Gyw3aRec61kP8ssDusbhrk3Tfc+FxYebdPIc+4lPH0=)
                          2: BCx9uHR447EqnUAT6LDXDmc-U64.roa (hash: uKePdL/bKCVHy8Q2jDMnzQQFWnYFjJHWmlJeT5g86S8=)
                          3: GtXRdMu0aq-GVVuA4XczMbhwtWg.crl (hash: bz2G3+F8RDacLsYbxoYThnGUnhPiUenlYsrrq6yPrQU=)
                          4: XUhnIv1VyzEH-O2IlJPEOJmVv7s.roa (hash: ia3ApPA9xBWk3etwJmYP71gyRoYwwrPnhqVB0ZSnJZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:23:5c:58:a2:6c:f7:5a:01:09:2e:bb:4f:8d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568
        Validity
            Not Before: Aug  6 08:01:19 2025 GMT
            Not After : Aug  7 08:01:19 2025 GMT
        Subject: CN=188f6156f9ab2b57b9fd0d91c97eb1c548ecc1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:35:5c:ff:d1:2c:51:6c:44:f6:04:a0:5f:
                    25:4c:ef:7a:77:2b:c0:c4:05:04:3f:5c:2a:81:b8:
                    81:94:f9:3a:f3:fa:f5:fe:43:38:5e:46:14:84:94:
                    86:c4:2c:6c:06:7b:11:c6:f1:68:c8:ff:ec:77:b4:
                    4b:df:ae:ff:5e:9d:07:00:a0:43:f2:df:4d:c8:02:
                    55:16:7e:69:3b:67:b9:7d:d2:29:13:70:34:dd:e1:
                    7f:6f:49:50:08:7b:9c:bc:81:82:af:f4:9b:ad:b6:
                    f1:56:d6:3c:51:0a:ea:2c:39:72:83:df:ce:15:68:
                    77:78:14:9c:eb:d7:cf:45:51:a1:66:28:55:b4:e4:
                    f4:6a:58:ef:e0:e2:68:e7:be:fd:45:c6:3a:ea:7a:
                    b6:d6:cc:44:1d:85:0e:42:b1:4e:76:cd:aa:02:f2:
                    b9:1c:57:26:1b:da:2b:9d:4e:75:2a:45:89:ac:3b:
                    66:06:ed:1c:74:73:d2:7b:91:40:7a:0b:0f:19:df:
                    01:59:c1:d6:a8:ba:48:d4:ff:8e:0b:6f:ab:fa:1c:
                    e9:32:b1:12:12:bf:9d:1c:7a:38:be:85:08:d4:6c:
                    7f:3f:8c:44:17:f3:85:7d:7d:9f:cd:f3:84:23:f0:
                    6a:6e:28:bb:cb:57:c6:c7:d0:52:2e:3d:be:70:13:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8F:61:56:F9:AB:2B:57:B9:FD:0D:91:C9:7E:B1:C5:48:EC:C1:B0
            X509v3 Authority Key Identifier:
                keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:00:66:da:85:f6:d9:bd:46:e8:09:4d:5e:43:c0:4d:6d:c3:
         43:f9:9c:82:75:e9:13:03:ac:d1:c4:38:7c:93:e9:4b:6f:23:
         7c:89:2b:41:fc:76:d3:2f:93:01:4d:6e:6c:3f:7f:5b:1b:40:
         56:61:f8:2d:93:56:6a:fc:a8:90:0f:50:a0:19:f9:9d:d6:9f:
         93:31:46:76:c6:ae:d3:26:77:12:b2:2e:2b:56:e8:3f:9c:20:
         42:75:b7:f1:1d:ee:ea:1f:00:90:c4:0a:86:f7:ca:65:e5:88:
         9a:14:99:b3:e7:98:b1:d9:bf:d4:9a:9e:4e:c8:67:1f:00:42:
         db:8d:70:36:17:a2:32:85:f5:00:2d:2f:a3:1b:2b:24:7e:58:
         84:67:13:c5:7c:40:82:52:24:71:b3:f9:f3:b4:cd:a2:ea:47:
         16:60:1c:c7:49:53:d9:c2:17:6e:c3:b8:7e:64:eb:a0:ea:7a:
         92:0e:d0:63:eb:0e:fc:35:24:94:95:dd:c7:89:b7:fe:b3:22:
         e3:19:cd:86:24:f2:67:51:e7:ba:94:e2:29:a1:8c:9a:5c:5e:
         66:71:8e:eb:ff:46:c1:b4:7d:a8:29:2d:48:cf:c9:77:96:25:
         ca:1d:63:2f:dd:af:81:89:f3:bf:c3:21:74:49:fb:5d:3e:6d:
         11:01:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:14 2025 by rpki-client