Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          pyPuAqTfUlpsX8vwyv1LhX0pqOTejuvEf1E3a4oJCT4=
Subject key identifier:   43:F0:54:A7:92:52:E4:6D:73:FD:B1:51:14:3D:67:CA:A3:51:88:55
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       0198846817416D628C10E33CD7D1F87E458F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          043C
Signing time:             Thu 07 Aug 2025 12:01:10 +0000
Manifest this update:     Thu 07 Aug 2025 12:01:10 +0000
Manifest next update:     Fri 08 Aug 2025 12:01:10 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: W+yrseV8AQO7b7ar2PBdgLlrxL5Yu2iuvf5562dqYAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:68:17:41:6d:62:8c:10:e3:3c:d7:d1:f8:7e:45:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Aug  7 12:01:10 2025 GMT
            Not After : Aug  8 12:01:10 2025 GMT
        Subject: CN=43f054a79252e46d73fdb151143d67caa3518855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:9d:95:fa:a0:44:80:95:25:2b:e2:2f:b8:
                    67:0b:6f:13:90:9a:02:c3:52:32:25:2d:c8:3f:3e:
                    ad:05:16:90:1b:56:d3:aa:57:ae:22:2a:85:db:9f:
                    e8:c9:a9:39:be:3f:7c:eb:60:62:96:55:89:de:72:
                    09:95:0e:d1:11:aa:fe:82:28:ba:ab:d8:8f:d3:83:
                    0f:96:ae:91:71:2e:87:74:42:f7:48:1a:b5:4f:c4:
                    89:28:9e:70:0c:69:0e:f3:42:29:4a:2b:9c:3f:1b:
                    04:d6:51:41:80:87:c8:14:8c:fd:3c:d6:3f:4c:e6:
                    e2:f8:e6:13:37:d7:b3:dd:9f:47:4f:59:74:3b:0e:
                    b9:dc:45:94:86:4a:1d:4b:3a:13:70:c1:2a:c6:d7:
                    4c:5a:f9:b4:25:18:24:7b:7d:e7:6e:ed:88:36:dd:
                    47:2c:0a:9d:6d:7b:8c:1e:7d:26:b6:a1:a8:f2:85:
                    11:5c:0e:bc:2e:cf:b4:cd:d6:c4:c3:91:ed:ef:78:
                    0f:b1:05:29:8c:b8:f5:02:aa:ca:8e:54:33:64:2b:
                    28:19:fd:36:b2:a7:5b:f5:ae:1a:c0:69:60:63:d8:
                    4b:c9:cd:8a:ea:bc:35:12:ed:fb:23:42:2b:c2:3b:
                    a9:59:62:26:cb:92:a6:01:a9:0a:d2:ba:ff:9c:a5:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F0:54:A7:92:52:E4:6D:73:FD:B1:51:14:3D:67:CA:A3:51:88:55
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:3a:b7:73:0f:48:8a:9f:02:06:e2:19:a7:0c:40:e9:5b:
         95:b9:21:77:b9:cc:fa:11:b8:f8:b9:7e:40:a7:e2:15:85:18:
         5a:5a:8a:31:65:b2:31:63:3e:e7:ba:8a:ae:f0:12:6b:5f:1c:
         6b:21:8a:8a:4a:b0:4e:e6:32:da:22:a0:0f:40:af:b6:bc:03:
         41:2e:c6:c0:73:c8:ed:cb:05:fa:09:0a:e7:96:eb:2d:05:c0:
         26:23:b1:ed:df:bd:84:df:50:3c:b7:09:9d:ce:99:16:a5:20:
         60:82:3f:3f:d2:df:eb:6e:07:5d:34:8b:d4:95:4a:aa:98:30:
         48:f6:a8:3e:54:f7:69:4a:6c:89:2b:75:bf:d2:7c:5c:4a:d8:
         4a:80:81:d2:66:80:3f:b2:8c:76:1a:d7:2e:4c:ec:4b:b9:e2:
         c7:3e:44:bc:a5:5f:a8:d7:1c:f0:7d:df:01:c6:e4:cf:df:25:
         eb:01:2e:d9:44:0c:b5:7e:55:1c:ca:0a:ab:8b:a8:c0:11:3a:
         93:f7:ee:9d:81:9b:cf:6c:aa:44:c3:e1:1e:79:61:69:34:cc:
         4a:4a:3e:31:6d:45:03:d2:07:4f:db:06:e8:5a:90:cd:52:34:
         7f:88:92:77:a4:10:44:f8:81:80:b5:95:08:f0:4c:d0:fc:0d:
         ec:34:fc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:27:07 2025 by rpki-client