Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File:                     gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier:          LD4Zhr3/q6oEXlygZjuFLGur1xDWH4othg776nCoyoI=
Subject key identifier:   CB:B5:8A:00:55:C3:10:76:42:7C:F7:79:5E:77:24:C4:74:48:BC:41
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer:       /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial:       01988168AD79F1B94FB2BE60045C05ACDFAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number:          0B76
Signing time:             Wed 06 Aug 2025 22:02:57 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:57 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:57 +0000
Files and hashes:         1: OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa (hash: xQZYXykxBIz0VsK18m+4NwPpzDRdrPubWdJIqyjXD98=)
                          2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: Wm0EBr1uifvhtne+z+HgbcVy7DEElhg9bGm6g4wtvBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:ad:79:f1:b9:4f:b2:be:60:04:5c:05:ac:df:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
        Validity
            Not Before: Aug  6 22:02:57 2025 GMT
            Not After : Aug  7 22:02:57 2025 GMT
        Subject: CN=cbb58a0055c31076427cf7795e7724c47448bc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:be:1c:7a:1f:87:bc:70:41:de:83:3c:7d:
                    f7:2d:66:cf:21:14:25:24:6e:62:05:11:d2:83:96:
                    88:fa:48:88:d2:fe:fc:c5:3f:1d:81:10:61:ac:d3:
                    0f:15:26:d4:57:55:5e:78:98:72:bf:9f:29:23:2b:
                    fa:92:5d:71:85:c8:ee:4e:60:2d:71:23:a4:30:8d:
                    35:e1:f7:0d:72:26:37:94:f5:1c:9c:1f:0c:89:7f:
                    a2:65:0a:c0:37:f1:a0:48:c2:41:b8:a4:27:a0:18:
                    21:28:94:82:8e:a2:43:8d:3b:14:44:b5:22:1f:ea:
                    f9:cf:89:61:9a:3e:a5:7c:1d:b3:53:0c:03:f6:6a:
                    2c:94:7c:9a:15:c5:86:c2:e8:34:a8:8c:cc:cd:98:
                    d0:c1:ec:84:f6:37:ac:12:3f:31:67:0c:cf:93:f1:
                    d0:b6:96:48:87:f3:c8:5c:fd:a5:76:d6:3c:77:1d:
                    5c:c1:95:26:20:86:fe:32:87:09:bc:90:b6:b6:ef:
                    2a:61:1b:6a:d7:14:04:69:79:17:1d:13:db:d7:79:
                    69:09:bf:ca:50:df:69:56:6a:ec:d0:f5:4e:b3:40:
                    1b:03:5c:15:2b:a6:d5:aa:e3:d1:41:de:bf:7f:56:
                    b6:81:08:30:e9:b4:9f:3a:aa:34:8f:7c:94:ec:8f:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B5:8A:00:55:C3:10:76:42:7C:F7:79:5E:77:24:C4:74:48:BC:41
            X509v3 Authority Key Identifier:
                keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:06:6a:42:f1:dd:08:97:ce:82:90:dc:b1:2b:a9:ef:e7:
         46:c9:25:e8:2c:6a:c8:12:86:77:12:94:2f:b9:ca:33:28:6c:
         82:24:12:53:1c:39:4f:36:dd:d9:39:41:2d:ab:79:8e:2f:41:
         2c:aa:6b:d5:d9:14:0a:60:c1:73:59:37:d9:dd:29:f4:4d:20:
         e1:67:65:29:bf:e2:07:a1:03:17:19:13:73:4b:7d:1b:64:20:
         67:fc:e5:88:c5:21:7f:5c:14:40:ef:af:12:27:8d:67:03:91:
         d4:49:c3:68:e6:08:e0:ef:c6:43:f0:56:c2:2b:c1:e5:87:10:
         b5:6d:0f:7d:03:d7:5a:98:56:7a:9b:87:53:1e:f7:a4:07:a0:
         f9:04:db:93:1a:52:ff:de:89:bc:18:f8:3b:d6:05:63:91:06:
         0c:87:fa:66:bb:e4:8f:de:44:38:32:90:d7:ae:5f:58:c1:78:
         6a:f5:10:6d:64:e5:f5:2e:7e:dd:b0:ea:79:9f:14:dd:00:d9:
         58:95:d9:81:91:8f:e3:1b:59:39:bb:d5:79:a4:1d:40:25:31:
         8a:8e:ab:7e:2d:cc:16:78:7e:fb:ee:d1:b5:8e:c1:b6:9c:d4:
         73:a8:27:be:9c:c6:7e:97:d1:02:ba:ad:5b:d0:b6:c2:a0:41:
         a4:67:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:20:46 2025 by rpki-client