Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
File:                     gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json)
Hash identifier:          jTRpgfpQCubYt184c2sF64jl3rsK5F34p9+bM4nvcVc=
Subject key identifier:   24:1A:55:B0:88:01:5C:C5:F9:E4:5E:A1:34:47:10:D2:0A:4E:DA:8B
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Certificate issuer:       /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial:       01988166ED539C2925F1C96E55ED298D2136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
Manifest number:          0DDA
Signing time:             Wed 06 Aug 2025 22:01:02 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:02 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:02 +0000
Files and hashes:         1: L47fpbavJjM8YwHHhvMkJOYd5vE.roa (hash: IzwhrGUTddMft7RJzZ/2mXaFd/PY/Xp0a/SU/LUo1YY=)
                          2: dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa (hash: PjGfWgf8wj53bPtlEQkRSwYcsy5G/eLRYAuG9DVnO5o=)
                          3: dP1XMz72bEIizOJx_8e3gubbo08.roa (hash: 34zsks6roiR3rEQ6SRISFcNl3J9bQeeIWhcKnK78jO8=)
                          4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: qY5A5yAZZVjabzn1fLp4ARCXD5/ml4RJi+O+M0E/r/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:ed:53:9c:29:25:f1:c9:6e:55:ed:29:8d:21:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
        Validity
            Not Before: Aug  6 22:01:02 2025 GMT
            Not After : Aug  7 22:01:02 2025 GMT
        Subject: CN=241a55b088015cc5f9e45ea1344710d20a4eda8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:9d:24:ff:d5:a7:b3:89:a8:7b:3a:88:90:
                    ad:70:01:a6:75:a0:dc:84:ac:01:5a:e0:df:62:b8:
                    72:b6:40:75:41:6d:99:0c:1d:7a:84:95:75:a3:5b:
                    87:93:7a:27:ea:40:10:af:66:33:28:d3:9e:53:fd:
                    7a:86:79:6b:63:03:9d:dd:1d:43:a1:be:30:a2:95:
                    92:16:8c:71:75:a3:ad:1d:fb:cf:c7:18:12:89:ad:
                    db:ea:bc:36:90:45:af:87:cc:1d:11:56:f7:37:28:
                    c5:8d:80:0e:e1:bb:98:1f:58:f4:a2:cf:4a:9e:ec:
                    7d:dc:c6:4d:38:55:7b:53:bc:bb:07:10:5b:d2:df:
                    ec:fa:8c:bc:61:63:8b:13:f0:a1:92:8e:7f:3e:50:
                    68:1f:ba:d4:c2:c2:86:27:ed:0e:05:50:db:3c:60:
                    fc:5e:55:b5:c3:1b:b0:84:18:7d:4f:3d:68:a7:6e:
                    1c:0d:47:fd:c5:31:1e:71:c6:95:fc:2d:52:0b:3d:
                    e8:3b:0e:00:01:30:af:5c:b6:b8:8f:bc:8e:fb:c6:
                    34:13:bf:0d:92:7e:c4:ee:c8:31:5c:5f:59:4f:26:
                    a2:6a:23:f5:e2:94:17:9d:26:05:5a:a5:f8:e9:db:
                    2e:cb:8e:f7:c4:8e:3d:70:9c:e9:e8:bc:5d:31:c0:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1A:55:B0:88:01:5C:C5:F9:E4:5E:A1:34:47:10:D2:0A:4E:DA:8B
            X509v3 Authority Key Identifier:
                keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8e:e9:69:95:6c:e4:e7:35:19:2b:fc:f7:c3:59:f6:b7:83:
         4a:74:e8:7b:17:0a:bc:2d:cf:d0:93:bc:fa:15:9f:60:01:9a:
         db:02:86:06:9e:76:42:d7:68:61:eb:a5:d2:15:a5:5a:52:89:
         df:b6:86:2e:0a:5f:e7:6e:d6:fa:6d:c7:09:b4:d3:93:8e:3c:
         07:21:d4:f7:1c:90:cc:50:1c:8b:93:39:34:f5:2d:7e:5e:e2:
         35:c4:90:b8:3a:16:5a:c0:78:bf:ae:52:d6:a5:af:20:d9:42:
         10:0d:5b:fb:67:54:54:1e:b2:bb:43:fe:b7:35:b9:23:86:7a:
         c7:03:69:f0:12:45:9c:86:a9:49:04:4d:23:9a:4e:a0:28:da:
         c0:19:94:db:bf:0f:ed:2c:e6:62:9c:00:c1:db:9e:e0:ed:67:
         a5:91:5e:8d:88:1e:e2:1b:b5:83:89:ac:19:fb:4d:70:f7:28:
         47:bc:1b:49:a6:2a:92:c5:0b:9a:ce:5b:a5:f4:94:39:7b:b3:
         de:1f:81:1b:4a:8c:10:0f:b2:94:8a:42:a8:83:2d:da:c2:9a:
         aa:3d:d5:9e:fc:05:90:da:68:96:44:fa:c5:87:fa:1e:61:a9:
         66:d7:a3:c9:e2:31:62:27:e1:a2:c8:0b:94:50:35:fc:3b:00:
         44:71:3a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:30 2025 by rpki-client