Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File:                     gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier:          xfxAXyd3Kqm1ZQxjgao6ct/pmL2KniYHZE6VfhvjXUQ=
Subject key identifier:   89:35:26:60:73:98:AF:E5:EA:19:D1:1C:88:0E:30:9D:D7:9C:C6:52
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer:       /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial:       0197778A859B61BD672F1550A17D6F30EC92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number:          0832
Signing time:             Mon 16 Jun 2025 07:00:56 +0000
Manifest this update:     Mon 16 Jun 2025 07:00:56 +0000
Manifest next update:     Tue 17 Jun 2025 07:00:56 +0000
Files and hashes:         1: MVRm2B27-mtawpjQijtz-fTQOKU.roa (hash: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=)
                          2: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: P02Kvtf0k0LP/ISI/S32X8MGYsx7ZNNyQUYHlDbwHWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:8a:85:9b:61:bd:67:2f:15:50:a1:7d:6f:30:ec:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
        Validity
            Not Before: Jun 16 07:00:56 2025 GMT
            Not After : Jun 17 07:00:56 2025 GMT
        Subject: CN=893526607398afe5ea19d11c880e309dd79cc652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ba:30:9e:40:46:ca:6d:11:6d:cf:87:40:28:
                    23:7b:9e:08:e1:c7:bd:e4:93:5a:55:da:5d:72:c8:
                    c6:ca:d8:57:11:ca:b9:fe:bc:19:0e:e1:16:26:7b:
                    4d:ce:c5:40:09:e4:2d:32:58:3e:d9:02:53:8f:42:
                    3b:a7:cf:09:e9:07:41:3f:7a:62:6a:85:7f:fa:8e:
                    92:fd:8b:35:ca:6b:60:02:22:5a:8d:cd:e9:32:c8:
                    85:f9:cb:b9:9c:87:52:fb:e6:3b:9e:48:4a:a7:57:
                    9d:ac:95:8e:a7:2c:d6:7d:37:4f:e2:d8:2f:7b:2e:
                    56:dc:90:4a:6a:13:36:56:9a:50:95:77:fc:b1:42:
                    cc:d3:1b:09:39:bd:f8:b5:dc:84:b5:46:9d:0d:2d:
                    97:12:0e:eb:07:d8:eb:c7:af:cc:c1:31:51:4a:be:
                    80:8e:68:5a:7a:a7:3f:f6:c7:6d:0a:0b:9a:5a:74:
                    65:83:16:2c:73:5e:5b:50:a1:60:c4:92:10:89:df:
                    a0:f7:02:83:06:37:d2:61:44:c5:3d:81:0a:bc:f6:
                    c5:d0:10:5b:a5:0a:3e:f7:fe:72:d8:c7:f5:88:18:
                    69:02:ee:cb:82:87:f2:f1:9e:b2:66:c7:69:07:7c:
                    72:72:d6:0b:59:4f:72:1c:ef:02:fe:c4:f7:c3:14:
                    09:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:26:60:73:98:AF:E5:EA:19:D1:1C:88:0E:30:9D:D7:9C:C6:52
            X509v3 Authority Key Identifier:
                keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:d6:57:df:b9:ad:7b:11:00:e2:c2:fd:11:b4:aa:4b:af:
         4c:d7:cc:27:c5:39:6f:70:22:4d:96:37:b0:68:f4:bd:38:4f:
         35:17:9c:c4:08:e8:b9:46:54:26:e9:80:5f:3c:4c:a0:56:67:
         98:3d:a7:2e:65:0d:53:e4:3e:f4:78:96:2b:7d:e1:0b:b6:16:
         fe:de:02:7d:8e:bb:b6:67:6d:37:6a:77:35:82:cc:ba:be:ed:
         5c:ac:ca:88:1f:be:2f:15:e5:e8:17:0e:13:4a:9e:92:2c:d2:
         a3:5c:ca:26:7e:06:10:5d:d6:de:c2:95:32:b2:d7:60:db:51:
         84:01:c6:ee:e6:5a:47:c2:81:ba:32:16:8d:67:38:f7:ee:3b:
         81:c1:aa:df:bc:00:31:27:c6:15:99:19:9f:5f:ae:38:99:82:
         85:60:db:e5:c0:ca:7d:bf:c9:d2:43:e8:20:a8:41:ed:ef:e2:
         02:89:5d:42:58:0f:df:cb:26:e5:0e:a5:b5:63:1f:1d:c9:a2:
         b4:d0:7a:76:93:bb:c7:8d:b6:72:a0:6c:b2:3f:de:73:82:24:
         aa:18:41:f7:c8:69:3f:7e:91:31:21:22:58:c8:b5:69:cd:fd:
         42:eb:7f:db:6d:cd:30:43:59:3c:09:18:c5:08:d9:7b:3b:c3:
         74:1c:af:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:44:54 2025 by rpki-client