Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          RF9IFDlHR7ZzYqPtfDnxBBawiTk91LV38aZHim+oSa8=
Subject key identifier:   4F:24:C2:F8:35:7B:C4:99:0A:B6:26:D6:19:D8:8C:B2:4D:80:7C:02
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       019A50075DA16D84B3537C7ACDC5A10ED3EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          052A
Signing time:             Tue 04 Nov 2025 18:00:51 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:51 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:51 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: QkBFgWZWgFimbrUb9IpvCxMETnsCVkumdzTdsXgZJ7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:07:5d:a1:6d:84:b3:53:7c:7a:cd:c5:a1:0e:d3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Nov  4 18:00:51 2025 GMT
            Not After : Nov  5 18:00:51 2025 GMT
        Subject: CN=4f24c2f8357bc4990ab626d619d88cb24d807c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:ad:cd:82:9a:07:a7:62:c0:b6:c0:79:5f:
                    bd:a9:64:c6:25:88:67:83:f2:f6:9f:c6:5d:71:ac:
                    05:77:2d:3f:26:09:cc:53:c4:ad:14:29:7d:7a:fa:
                    ec:e3:ce:93:d1:88:a7:53:65:32:41:02:24:5d:42:
                    4f:0d:4b:6b:9d:65:0e:0e:07:b0:d4:ee:47:d1:a3:
                    d7:03:1e:6d:c9:e2:51:20:5c:8d:c2:c7:42:30:26:
                    05:70:15:86:78:84:e5:bc:5d:a9:a3:60:18:e8:68:
                    3e:59:72:4a:07:e4:04:59:0c:64:f2:11:d2:eb:b1:
                    bb:cd:f8:19:15:f9:8c:93:a9:29:9c:7c:0a:29:94:
                    c5:72:4e:9d:8d:fc:1e:1f:5d:5c:a9:17:76:6c:8c:
                    76:be:6b:90:86:12:b2:00:06:19:5e:20:ed:c9:c1:
                    d3:94:88:2a:53:7e:84:bc:06:2d:fc:97:75:25:e8:
                    de:f3:b3:35:61:86:6d:ff:71:5c:a0:9a:47:90:31:
                    5e:11:15:63:9d:2c:1c:01:7a:79:11:f8:ad:b5:8f:
                    3e:44:10:f3:2f:32:f3:bf:53:14:6b:1f:47:ff:cd:
                    4a:e6:a6:37:50:a9:20:dc:f9:de:43:a5:a6:0c:62:
                    a0:aa:53:c1:d8:fb:dc:03:6a:f2:5b:dd:74:83:f5:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:24:C2:F8:35:7B:C4:99:0A:B6:26:D6:19:D8:8C:B2:4D:80:7C:02
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:2b:00:3a:9e:f5:c8:f0:19:69:84:b0:66:18:cc:a2:ab:8f:
         b0:32:12:65:74:ce:4c:8d:0e:8b:8e:66:0a:63:cf:a4:cc:db:
         ce:3f:bd:d6:e3:c7:0e:ef:d7:e5:bc:6a:a9:39:72:50:22:57:
         2f:03:b5:39:f2:4c:82:3e:e5:3a:9e:eb:19:e2:f2:bf:ff:9b:
         f6:c2:23:ab:9b:02:0c:6a:42:cc:4c:70:22:47:a7:a1:40:18:
         5d:71:b7:0c:d3:fb:ba:95:d4:ac:4b:9b:2e:ce:61:04:9f:19:
         97:e0:b7:bc:da:22:f8:8b:af:f5:f5:ac:0b:fb:d0:11:77:35:
         e8:3f:5a:c7:33:96:b3:81:6d:ca:5e:1c:f4:3b:24:de:94:9e:
         21:da:40:b8:93:80:a1:5a:da:bf:5a:ea:0c:d9:31:63:4c:f6:
         e7:8e:1d:56:6c:03:f7:fe:87:4e:0b:4e:92:2a:f7:bc:cb:92:
         34:a8:ed:88:c0:ec:f3:bd:1c:3a:c4:1e:ca:e8:14:e4:82:1a:
         f8:61:9c:c5:86:dd:65:af:b1:8c:50:59:b8:8c:35:2c:7e:6f:
         98:10:cb:f2:3b:62:92:ea:55:e9:a9:2b:52:b6:7c:8c:32:79:
         de:9a:29:e3:0b:40:ed:c5:3c:2f:4b:0f:a8:9e:a5:af:44:bd:
         56:53:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:42 2025 by rpki-client