Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File:                     GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier:          0Hxl5Iur6OYmxRdK7oVgkeS9PpMGX98uGhZOX+3tGK4=
Subject key identifier:   5F:E0:BF:5D:97:EE:97:39:EA:C4:99:63:77:45:E8:7B:85:A5:A5:AC
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer:       /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial:       0198D583E10F9E0586087FD241472F87E108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number:          11C0
Signing time:             Sat 23 Aug 2025 06:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:46 +0000
Files and hashes:         1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: voQ+kj2G7Ey8lWEf2n0bPrLvSsKGvnSBmrsuRj3TrnI=)
                          2: uIeYeZznF-O1grN0M5g3SmcN33U.roa (hash: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:e1:0f:9e:05:86:08:7f:d2:41:47:2f:87:e1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
        Validity
            Not Before: Aug 23 06:00:46 2025 GMT
            Not After : Aug 24 06:00:46 2025 GMT
        Subject: CN=5fe0bf5d97ee9739eac499637745e87b85a5a5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d9:ff:c6:e9:ab:4d:22:3c:df:29:76:92:a4:
                    09:2e:95:a4:7b:64:a7:a5:90:20:23:7d:8e:52:ff:
                    29:f3:80:e6:6b:85:d3:a7:b2:3a:0d:88:aa:a8:39:
                    35:f8:8b:76:b5:7b:dd:b3:4c:48:10:94:c0:1c:76:
                    dc:cc:bb:46:f4:a9:0e:67:a0:b0:93:3b:68:6e:d3:
                    fa:f5:4a:0b:ab:10:70:c9:47:cd:70:a8:9e:fd:32:
                    d3:73:44:14:82:6e:62:41:bd:fb:d7:63:9b:ab:9e:
                    d9:77:03:88:84:de:5c:1f:7a:be:cb:5b:40:46:99:
                    02:24:5c:b1:c6:29:8d:ee:33:5c:92:b9:34:1e:33:
                    01:4c:81:ed:ed:cf:43:0a:64:e2:52:da:57:66:de:
                    27:2f:bf:3d:9c:4f:ea:78:27:a7:1f:7b:8b:56:b2:
                    05:de:87:66:56:28:1f:fe:89:b1:ab:7c:d0:ef:b1:
                    30:90:fc:ef:1c:40:6e:09:fc:bd:ee:98:42:64:61:
                    e1:74:d7:32:65:37:8f:50:72:14:03:63:60:2f:d1:
                    31:da:d2:58:c5:47:ec:86:19:c4:30:d8:dd:e8:32:
                    2c:19:40:34:fb:2c:b0:04:01:59:c2:5e:13:bd:d4:
                    62:d4:29:57:da:29:85:dd:49:6f:2d:5e:38:a3:53:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E0:BF:5D:97:EE:97:39:EA:C4:99:63:77:45:E8:7B:85:A5:A5:AC
            X509v3 Authority Key Identifier:
                keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:e8:db:3f:e1:08:8f:69:ee:da:a6:48:54:bb:a1:6b:1c:
         d8:c1:26:c0:17:e8:d8:72:59:bd:2f:29:f4:e5:71:c1:7e:55:
         f0:be:05:90:fb:dd:f1:4f:d5:fc:6b:10:3d:30:0c:60:1a:a0:
         a8:dd:c8:d2:ea:89:bf:02:dc:7e:02:ef:3a:db:17:74:14:90:
         08:c3:93:9d:f5:5c:8a:56:ba:52:0d:f1:71:97:7d:80:1b:6e:
         44:0e:ea:a8:68:b7:b6:f3:7c:eb:11:66:b2:9d:73:30:f1:14:
         9c:c1:a0:c5:b7:6f:c4:58:4d:d7:39:0b:b0:2b:ea:03:46:0a:
         89:fb:c7:26:99:db:5c:8f:39:bc:5f:76:f4:a5:9e:95:6a:4e:
         cb:02:3c:19:12:c2:20:e9:35:b0:d6:b3:8d:37:dd:e0:c6:1a:
         12:4e:93:ad:38:b0:07:1a:ca:7c:c0:3d:67:06:c9:b4:88:f8:
         80:f1:cb:7e:ac:dc:20:12:de:6b:ab:d7:9b:b2:da:e7:81:e6:
         bb:00:96:53:ec:97:54:51:ee:2e:6a:29:31:18:dc:32:76:c0:
         1f:08:97:6f:00:88:b0:f0:10:1a:6a:0e:ef:82:01:4d:2d:20:
         bd:f4:53:43:e0:d5:b4:1c:9e:a2:26:a6:02:ab:7d:23:1e:c7:
         0f:84:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:42 2025 by rpki-client