Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
File:                     GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json)
Hash identifier:          Rb+o59gc1qNcAhY9w0fxyw383roNPfmgF89Awmq9l3o=
Subject key identifier:   E1:C9:5F:31:24:25:EB:4C:92:08:81:09:DD:3A:14:0D:78:D1:6D:64
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       0198D54E6986D711020690B2E4F307CEF615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
Manifest number:          07E6
Signing time:             Sat 23 Aug 2025 05:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:22 +0000
Files and hashes:         1: 0p2Ai41QAkiuowMq0GAz8EkQoms.roa (hash: u5a1iu//wfileSSCp/aIHv0SVKe0+GnXJmUcn45NA9U=)
                          2: 3NMfZNisec-vqD22vXNPki2ntVE.roa (hash: WaHglmLSlZJ16poYzd5QuYA7KNAkhTFS78CpF4RUX3I=)
                          3: AmTrNmiUz3PQJSPRxeGKui--CsM.roa (hash: D2X8Ub7d1XFRGUtdtCWVBQi+s/6Li/HzCnTuVF4H0hw=)
                          4: BjnyGiZGjHiQKk_KiK2yHf9VV5E.roa (hash: yPmoHixaBGhSn0ytp1vI4gHgRuEEubgW3Qlg0aIFvLw=)
                          5: DwaqxzmRSIx0-STl7nKTGpQzuOY.roa (hash: MZmP0bhKRokke3K++mx2NwZxuOVWVJCAYgwxbhXA9iI=)
                          6: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: gkNT77VttUSYHHbti3bCDBSJN7h2n4SFdKF0rETcylw=)
                          7: OjNkZBsD7_7ya1gvmoZ6C9IcKqA.roa (hash: QIsvbi1JaiVHwDu3LNY+DC4jKpBlQxMAMFNWUB09hyg=)
                          8: SStPLeYhuVW8ht29Rl4UMKZeE8Y.roa (hash: oIaG74/+nV2sdh79tye5X0ZT2qnqxj3Pq9M6q6XHKAw=)
                          9: UX1FG7BPxLN_6ufljGY3tuBoI2k.roa (hash: 2XU8mmir09zmdANIc3P91NSucr1JlTpLnKmXeZUmmHU=)
                          10: XLUh0v_eWb4ByZlyr_8IFlpagYM.roa (hash: OZc6IBFQYjTFaecuhGPDb6Fno7u24w/UXmkci73bi8k=)
                          11: bs7GziLox9peGF2yvnXKRWa8CtM.roa (hash: cBuRaE10dL+zgAwaQff5Gg3RICxaLuAu1aSi+XkcBE4=)
                          12: c_ipsLRzEgE5DXpkiVFIk32gy4w.roa (hash: KkfKem9M1oAl2JCMI+RrdXiWdDVk/LRejyZbOohwDvU=)
                          13: d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa (hash: 0RwztfGXYXDxIIQZaqPOXqxbSmC1TrJiJ1GXH53HmB0=)
                          14: gAnp1kq_OkOWUp3PN3HixppzTkE.roa (hash: /J5WbxoxADa6VRlF7IrRgFcOV8a+teEgTaVZOQn92/U=)
                          15: izylkdHb8K1XiexJr07bxHzS70o.roa (hash: +WAoXiTTcbRjvuFJ+mdToEXjYNYtqJBIbb39TwPcmHE=)
                          16: tlIT9EE8YpMp8nWSniI3miatB10.roa (hash: hMUJkDEHVtxIORugCsH16m3DT06lYDeH6qg/65YvGew=)
                          17: yTtcVU9ChNydH2mKs4iN5Ah2HPs.roa (hash: ro/KjPOdv9iitLmrbKrmD5i/eJZ/0hcJVF+hmNRnyAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:69:86:d7:11:02:06:90:b2:e4:f3:07:ce:f6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Aug 23 05:02:22 2025 GMT
            Not After : Aug 24 05:02:22 2025 GMT
        Subject: CN=e1c95f312425eb4c92088109dd3a140d78d16d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:44:ef:1c:51:6b:37:6d:c5:9b:06:f5:e1:
                    33:28:3c:33:37:9d:f0:62:84:9e:fd:57:3b:87:8b:
                    10:e9:8b:76:cd:3a:d3:16:84:5f:6f:21:00:b3:0d:
                    d6:1b:20:4a:4a:91:5c:34:84:6d:db:9d:2c:72:b2:
                    d9:52:45:e6:7f:d9:ff:45:73:ae:96:a1:e9:e3:97:
                    ef:11:74:7a:fd:ed:00:99:58:04:65:5d:83:3d:e5:
                    71:4f:c1:4f:c6:0c:a5:46:80:2a:8c:1f:84:00:47:
                    db:c4:67:aa:28:4b:db:e5:b6:40:9b:31:5a:88:28:
                    dc:33:40:36:53:fb:15:23:73:23:8b:47:8b:40:44:
                    00:61:89:66:87:4a:d6:a9:4b:e9:b4:c5:bc:ea:24:
                    2d:cd:6d:31:6b:ed:ac:8e:05:e0:3b:8f:54:14:b7:
                    40:28:ba:60:f9:14:2f:9c:63:cb:45:2e:32:29:38:
                    f8:45:28:86:da:95:df:0f:42:ee:ff:2a:7e:c0:95:
                    32:cf:ad:5c:8a:ea:18:fa:35:d8:bd:55:61:bc:7c:
                    4e:3d:63:5c:8a:f3:db:b2:27:c0:c3:01:fa:f0:2a:
                    94:99:7f:ff:4e:53:2e:32:e6:19:c4:f7:c2:34:a2:
                    28:09:52:db:28:f5:3a:a6:5d:3c:75:28:57:42:8e:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C9:5F:31:24:25:EB:4C:92:08:81:09:DD:3A:14:0D:78:D1:6D:64
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:e8:40:11:de:e8:37:d7:d7:f3:5a:89:bd:95:45:fb:23:
         00:91:78:73:46:07:e9:7f:dc:b2:99:67:24:d7:00:5a:ba:e9:
         cf:ba:c8:61:5b:f8:b7:02:4f:55:47:d4:3e:3d:53:ab:32:29:
         f5:bf:bd:c6:23:d7:34:af:cf:6c:c8:b0:25:df:63:03:0a:01:
         88:66:39:4f:a7:dc:6b:51:cf:8b:a9:46:61:3c:d1:d1:66:72:
         f5:aa:38:e9:6f:cf:ff:13:1e:83:fc:98:50:f1:34:9b:43:e8:
         62:e4:b1:19:49:f9:a2:cb:90:eb:14:f9:e5:a2:0b:4c:32:71:
         47:ef:2f:72:06:f5:03:cd:50:37:50:55:88:6a:0c:00:ef:af:
         ea:57:f8:d0:93:5d:04:da:d4:94:4a:6e:80:03:e2:77:e1:99:
         96:41:ea:7c:e9:cd:41:03:02:5e:5c:53:7c:74:6d:6b:d6:8e:
         a7:d2:83:3a:1a:1f:fb:5a:a7:d9:26:40:73:8e:92:14:91:4c:
         0b:2d:e7:27:57:df:1c:94:7f:d9:11:2a:78:96:f1:9b:b8:f7:
         34:7f:79:d8:04:1a:33:34:52:03:70:1a:a1:6d:33:cc:46:85:
         71:16:00:fa:66:7e:ea:f1:95:db:0a:07:42:e0:a6:5f:e7:31:
         3d:52:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:34 2025 by rpki-client