Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
File:                     GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json)
Hash identifier:          64/Yqht+/ihRMfxCuGUr3R8hUGmgYzV/QTsbOC7Gdv4=
Subject key identifier:   C8:51:2B:48:88:41:54:F6:46:D0:FC:C5:32:55:A1:EF:46:D2:8A:51
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Certificate issuer:       /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial:       019873065896CE8AED689AC55B7C4D743F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
Manifest number:          15A9
Signing time:             Mon 04 Aug 2025 03:00:52 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:52 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:52 +0000
Files and hashes:         1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: k+IfRg2cU2f2bo6fS+IvmTeSn5dHNYYxljYAKoC/QSg=)
                          2: dPTbW5NvAJKveanwf9xsMOGfn5Y.roa (hash: DpFROJeoc1UpOy7/3HzFb7ViY51RvdrZHobQAff/jls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:58:96:ce:8a:ed:68:9a:c5:5b:7c:4d:74:3f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
        Validity
            Not Before: Aug  4 03:00:52 2025 GMT
            Not After : Aug  5 03:00:52 2025 GMT
        Subject: CN=c8512b48884154f646d0fcc53255a1ef46d28a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:e4:37:4a:f5:e0:92:e8:1c:19:63:19:b9:
                    dc:cb:a2:d6:51:23:8d:2a:0e:09:fc:a6:44:7c:a9:
                    85:00:81:ad:14:34:4a:2c:4a:9d:fc:8d:73:e8:b5:
                    81:8c:f3:26:bd:6a:0e:32:39:73:ad:01:96:d2:cd:
                    9e:96:46:b7:7f:40:4e:62:cc:15:6a:b8:13:23:22:
                    09:7b:e8:25:a6:66:2c:34:dd:b3:29:f5:eb:0d:db:
                    43:8e:be:6c:c8:c8:1e:b9:09:76:0a:32:d1:03:eb:
                    71:48:a5:73:6d:b2:85:23:6d:0c:4f:43:e3:81:01:
                    2a:c6:d8:b5:a2:72:8c:43:83:30:9d:84:12:25:fc:
                    c7:db:0e:14:cb:1c:b4:89:e8:89:0e:11:7d:4f:0c:
                    8f:15:e7:87:e1:b7:d2:73:3d:6b:af:b2:d1:c4:6b:
                    94:c7:3d:af:3f:aa:34:57:10:19:63:a5:10:9b:b6:
                    7c:66:03:63:39:61:ad:e8:62:ad:5f:db:6f:d1:39:
                    85:6e:34:61:16:ee:f5:cf:c3:70:ba:bb:fc:4a:e8:
                    c6:44:c4:35:e9:28:5e:7a:d3:d2:d3:20:28:9a:70:
                    d0:38:30:dc:fb:26:54:f9:3e:a2:d5:b7:6b:21:4e:
                    1d:03:39:c3:a1:e2:9f:f0:d1:60:a6:1f:88:f1:cc:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:51:2B:48:88:41:54:F6:46:D0:FC:C5:32:55:A1:EF:46:D2:8A:51
            X509v3 Authority Key Identifier:
                keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:76:39:23:e9:9d:09:f3:4a:61:db:5d:29:75:94:97:9d:77:
         16:c2:ac:a1:9c:78:ff:42:91:9d:47:20:49:da:d0:5a:73:79:
         5e:48:0f:56:27:33:06:89:72:11:24:cb:46:ed:30:0d:46:24:
         5a:67:6b:fb:7e:35:c5:aa:e9:fe:69:5e:f3:c1:71:f3:14:68:
         9f:c5:2e:d6:04:4a:34:39:9d:70:08:a3:8b:2c:92:59:bc:e7:
         e1:9d:b1:b9:5a:14:7f:54:25:77:f7:4b:bc:2a:59:9b:05:d3:
         57:c6:f4:b3:d8:c5:2a:26:47:28:f6:47:e0:9a:c1:7d:02:de:
         17:2d:6a:3a:6d:cc:92:4e:de:8b:44:f1:e1:d8:37:5f:2b:e2:
         e5:52:26:ee:4d:dd:c9:cd:f8:5b:e5:d1:e0:8f:b3:07:32:65:
         4c:2d:36:a8:44:36:70:10:ee:15:49:7b:ad:e7:6b:85:7c:eb:
         ae:5c:c6:4b:c3:4f:13:b2:1e:50:92:00:90:ca:fd:13:aa:66:
         e7:87:26:68:b4:d8:bb:61:59:90:e4:15:00:e4:4c:02:33:05:
         35:38:c8:59:e8:5b:94:07:1d:2c:10:18:f9:25:b9:27:70:cd:
         07:52:ce:d6:0d:ac:37:70:4f:ed:24:f4:cd:0f:f8:97:50:4e:
         09:59:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:39 2025 by rpki-client