Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
File:                     GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json)
Hash identifier:          OgW1UDvioH5zXa6fkuc0yoSSjwc7AwknDDDeGZ4C/Hw=
Subject key identifier:   87:A4:D5:CC:92:FD:2E:EC:18:B5:3B:72:13:0B:52:12:1C:9F:AB:DA
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Certificate issuer:       /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial:       01987E9CF9A5E07AB9B0F8B81294D66F9248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
Manifest number:          15AE
Signing time:             Wed 06 Aug 2025 09:01:13 +0000
Manifest this update:     Wed 06 Aug 2025 09:01:13 +0000
Manifest next update:     Thu 07 Aug 2025 09:01:13 +0000
Files and hashes:         1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: G615R/rtTUzLP2O4adMOSKkTm/odBxwI/RxlhreiTQk=)
                          2: td5of2c-zNIx95LtRN04mtFJYAg.roa (hash: rMhWdT4I0hK2RGp5gGoiamCjAXi8+XSWiM4KXZ7JjMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:f9:a5:e0:7a:b9:b0:f8:b8:12:94:d6:6f:92:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
        Validity
            Not Before: Aug  6 09:01:13 2025 GMT
            Not After : Aug  7 09:01:13 2025 GMT
        Subject: CN=87a4d5cc92fd2eec18b53b72130b52121c9fabda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:f5:63:e5:43:17:8c:1b:5c:56:2c:b2:61:
                    70:ae:63:62:43:00:30:14:30:65:03:d5:17:3d:53:
                    58:a6:be:e3:19:9b:e5:fe:75:a6:32:68:da:cc:44:
                    95:51:ba:37:3f:b0:8e:ec:44:89:1e:34:14:a2:1d:
                    b9:1f:48:20:f6:fd:b5:eb:79:db:95:f5:9d:12:7b:
                    01:dd:a4:a8:74:76:06:3f:61:d2:b2:11:c0:cb:4b:
                    9c:43:23:1d:34:ee:55:70:6a:8e:e9:03:1e:0f:b7:
                    73:b1:39:30:6d:c5:f8:81:15:c5:e7:e0:84:19:37:
                    b8:f1:dd:0e:f3:20:f9:96:09:3a:9f:00:85:9a:74:
                    02:d0:38:ce:05:8a:5e:1e:03:77:97:5c:fc:a8:2b:
                    23:d9:93:7f:52:7c:fb:22:1a:7c:28:45:ef:ba:88:
                    2d:3f:58:9c:49:c6:19:d6:12:8a:13:45:88:38:4c:
                    2f:bf:47:0f:e8:64:4f:cb:6a:90:d8:4c:4d:03:36:
                    cf:55:ca:60:d8:1d:78:e5:53:b9:5b:31:df:08:6b:
                    63:69:68:99:08:b7:3b:c7:75:45:e5:01:b7:9b:83:
                    68:54:2c:b7:04:04:d3:af:9c:9d:18:c0:27:58:67:
                    7e:39:45:16:d6:92:84:b7:27:86:82:06:12:c1:92:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A4:D5:CC:92:FD:2E:EC:18:B5:3B:72:13:0B:52:12:1C:9F:AB:DA
            X509v3 Authority Key Identifier:
                keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:34:cf:48:5b:80:7f:13:fa:c9:3a:e2:d4:53:fe:09:60:14:
         26:f6:6f:b7:e0:bd:d6:f5:c8:9f:fe:56:f0:df:5c:5a:2f:87:
         3e:e2:04:49:e1:5f:ee:73:b4:22:79:43:95:75:72:f7:82:7f:
         dd:c8:56:36:80:b1:c8:b6:53:c8:f6:37:6b:b4:78:c8:b4:19:
         6b:7e:7f:9d:39:3f:64:9e:ff:18:db:32:1e:5e:41:f0:24:0d:
         11:ff:3c:4b:2e:9f:23:c8:da:31:5a:fe:14:77:7d:7b:bc:67:
         22:71:ec:0f:5d:9f:59:51:db:99:ab:a4:fa:e1:78:53:e7:4b:
         eb:05:52:a4:ba:ee:af:20:aa:b6:69:02:30:50:eb:a4:20:9f:
         2f:68:49:c0:dd:87:16:b5:6b:76:3f:91:ec:de:dc:2e:36:58:
         85:84:19:23:ae:0a:27:aa:55:e5:91:d1:1e:0f:f7:b1:bb:65:
         9f:3a:73:4b:0f:d7:bd:84:c7:7b:39:3e:8d:ca:78:52:4c:8f:
         2f:49:82:ee:81:cd:42:5b:62:e1:ec:f1:d3:1c:67:61:a1:2e:
         c8:07:b6:b6:80:a0:26:19:89:7c:6b:80:15:69:b8:59:9d:af:
         3a:16:f7:37:73:8a:77:dd:05:d7:24:ab:6b:04:bc:bf:ee:8e:
         f1:21:6e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:29 2025 by rpki-client