Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          8AMqJVRypNretfiWuBj1D90XUX7ZLRzEmX/uv12spoM=
Subject key identifier:   3A:58:98:3B:00:BB:1E:C5:AD:D1:C7:05:88:0C:22:A0:75:78:7F:51
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       0198D54DD07A527977AB8323EDA69E168E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          0906
Signing time:             Sat 23 Aug 2025 05:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:43 +0000
Files and hashes:         1: 8830yksUtOARQk3UFlh-4PNgBiA.roa (hash: EmMvReS/jq/SYrfMRIBrAHCck7YrsLYqaTcJWkpKgFg=)
                          2: EFk_WP_A_QvGCbPv627jqVmsHfg.roa (hash: k68DoPvpgB6wKb8qFWWLmBs9+urZUeVvssLhdMSBf6k=)
                          3: Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa (hash: mLCh1eZnjR+MrenmFjvdAR50ujw/VIYVRd5MKC5x8OQ=)
                          4: ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa (hash: ULlmWYQOwziva5U7xH3+US8Vy16wr3u3qWj4qpwczMo=)
                          5: c3zA2IV4VwS8jnesB0LpZBsDyEU.roa (hash: hofK+2Uxhr/bTuv6Zx9VkqisU5DNhllbJwm0jIPd9ao=)
                          6: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: jCKOD0soAVpAGk1ujhfvXAso5anuWdxZBl2ZfHuE9ZQ=)
                          7: xufGdiw8vu26zsmML7UeTUou5hA.roa (hash: FPD/rr/c4+/3+ME4ysyP2eNMHG6cFBZQMwG4yZOWY+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d0:7a:52:79:77:ab:83:23:ed:a6:9e:16:8e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Aug 23 05:01:43 2025 GMT
            Not After : Aug 24 05:01:43 2025 GMT
        Subject: CN=3a58983b00bb1ec5add1c705880c22a075787f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:88:06:ce:62:4c:9f:3d:1a:22:fe:64:68:
                    5c:ee:01:db:af:3f:83:42:36:dc:c0:71:0b:21:15:
                    43:da:53:69:c6:be:fb:dd:d9:9e:b8:78:e0:90:84:
                    47:07:f6:94:de:15:13:16:74:63:14:84:03:f1:2c:
                    cd:3f:bc:02:b0:ff:1c:f2:54:54:80:a9:a0:73:3f:
                    b6:7a:c6:13:8a:b5:b3:db:be:c9:a5:f9:21:4e:92:
                    3c:e1:6a:fd:d9:da:b8:da:7f:eb:b7:30:fe:f8:bc:
                    82:ea:01:58:39:8b:27:0b:89:17:f5:b4:08:c4:a4:
                    1d:af:d7:8e:05:7e:0b:54:9f:05:9c:71:b1:6c:9d:
                    cb:58:88:4f:3b:c3:43:5b:18:4a:9e:c6:ce:b1:a5:
                    28:31:80:2c:c1:96:96:36:bd:58:f7:4c:59:a5:7b:
                    a6:38:f9:e0:9f:ce:16:9b:2b:13:12:6e:70:9a:1d:
                    65:d5:80:3a:80:f8:20:9f:f9:ca:e0:25:c7:dc:62:
                    9f:d8:d7:9b:5d:a3:c0:08:a6:94:12:3d:d1:55:29:
                    c2:e7:ca:94:9a:62:0c:8e:a6:ab:d1:8b:09:ca:45:
                    43:d7:27:8f:c5:f1:63:e1:ee:a0:c6:3d:32:41:9d:
                    a9:1b:44:3e:bc:9a:5e:a8:76:c2:47:ca:98:27:e2:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:58:98:3B:00:BB:1E:C5:AD:D1:C7:05:88:0C:22:A0:75:78:7F:51
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:42:27:5f:9b:3d:f1:d9:e3:80:5d:1d:8c:70:38:76:55:a6:
         50:3f:b3:66:07:9e:78:42:53:81:e0:f3:43:ec:07:ad:cf:4b:
         cb:1b:e4:2a:ff:ba:97:cc:5b:02:c4:73:1e:bc:94:7d:1c:35:
         2b:68:b6:06:f0:58:08:d8:c5:9d:fc:9c:7e:3e:12:cd:e2:08:
         f1:2b:2a:6b:91:1a:5f:49:1a:9d:18:55:d3:f2:71:4d:73:e4:
         40:0d:f9:40:59:5c:c0:c4:52:c6:99:4b:bf:78:ee:22:51:08:
         69:9e:b0:2b:31:4d:d7:2d:15:ac:e1:c3:53:3c:a0:7d:0b:69:
         c8:ac:bd:f5:6a:6c:a2:bf:2f:c6:63:f9:da:1e:98:04:57:6d:
         5e:da:14:8b:8e:fc:b6:80:e1:35:65:d2:1f:63:56:c2:b1:6e:
         af:b0:8a:81:48:0b:46:af:df:2c:a3:cc:7e:b9:64:9b:6b:ef:
         21:43:3b:ac:18:42:e0:a8:14:c6:10:65:7c:32:f3:f0:89:c1:
         47:39:5d:5b:44:46:26:c0:05:a3:eb:13:0b:1b:2d:4e:01:b0:
         78:53:5a:1b:7f:3d:fd:d5:6f:b7:75:d5:ea:4d:36:a2:1b:fd:
         90:35:6a:a1:a0:dd:42:c7:ea:32:89:df:03:2e:63:ad:6f:ca:
         51:14:34:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:09:43 2025 by rpki-client