Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File:                     GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier:          0280K8S+8++BhxlKAG0ezWVqEShCJvpUU5/rr4w29Bw=
Subject key identifier:   38:CC:86:C2:90:B6:2F:98:85:87:0A:F3:E6:57:C8:A7:63:02:52:11
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer:       /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial:       0198D4E0E0B1AF07E1326C0AB512135B639A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number:          07A7
Signing time:             Sat 23 Aug 2025 03:02:44 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:44 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:44 +0000
Files and hashes:         1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: XjGGNA2CZoU2P9BAEoy7wrzKxFRst8FPNtiQq8wSDhc=)
                          2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:e0:b1:af:07:e1:32:6c:0a:b5:12:13:5b:63:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
        Validity
            Not Before: Aug 23 03:02:44 2025 GMT
            Not After : Aug 24 03:02:44 2025 GMT
        Subject: CN=38cc86c290b62f9885870af3e657c8a763025211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:6c:8a:55:27:b0:fa:88:dd:bb:ad:51:e3:
                    fe:75:2b:5d:ff:46:22:a5:5e:ce:ac:ff:e4:49:8c:
                    42:44:ea:f0:c8:2d:7e:ee:92:41:d0:4e:ef:1a:2d:
                    02:60:ce:50:9d:0b:92:50:68:44:68:94:6f:fd:11:
                    c0:3e:45:b3:65:a0:0f:8c:e4:a1:78:0d:14:79:5a:
                    4e:a6:61:4d:84:09:64:b0:ca:95:73:64:a8:b0:d9:
                    5f:4c:65:70:20:43:e6:7d:a6:41:91:53:0d:95:71:
                    0d:70:a3:b8:ea:71:21:12:2a:32:be:6f:99:5f:78:
                    66:19:67:9d:68:c4:58:58:8f:db:5d:03:69:f9:7c:
                    27:fc:6b:ac:f8:28:df:fc:59:1d:1d:a0:70:db:74:
                    d4:16:0f:4c:8f:c7:be:77:23:cc:6b:a2:c6:d5:0b:
                    36:9d:d0:25:92:5e:ce:88:ab:01:42:88:d6:e6:19:
                    a6:9a:b4:1b:f2:6f:0a:39:d0:30:03:75:49:3b:14:
                    31:a5:54:d2:28:d1:96:b9:93:2a:b9:4c:65:35:3c:
                    0e:8a:c4:c3:c4:3c:11:25:37:86:c2:13:79:68:4a:
                    61:7d:ef:d4:eb:ee:51:5e:98:54:eb:28:0b:e8:58:
                    63:e2:44:dc:a7:70:aa:6b:77:ad:39:17:4b:97:ef:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CC:86:C2:90:B6:2F:98:85:87:0A:F3:E6:57:C8:A7:63:02:52:11
            X509v3 Authority Key Identifier:
                keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4f:0d:ef:1c:fc:32:6d:05:c7:cf:4a:1a:db:0b:c7:c7:51:
         64:02:3d:64:14:3b:ad:8e:5a:35:08:28:65:54:f3:80:85:13:
         99:e4:c3:42:a7:cd:d6:8d:9e:79:d3:fc:40:b2:2c:cb:ae:9c:
         a8:12:49:16:81:4c:9d:ad:6e:d7:67:9b:df:67:d0:36:95:45:
         45:f2:a8:66:f9:71:49:55:0d:f2:50:53:15:ce:c4:ec:c4:e5:
         bb:8d:0c:5c:7b:80:ac:ff:cb:51:cb:26:29:b1:29:54:c1:b6:
         e3:6a:e3:8a:33:fe:18:37:d3:bd:46:2e:83:24:7d:3f:f6:c4:
         77:77:f6:9d:12:6a:b0:65:be:ff:96:a1:dd:d8:da:c8:a4:d3:
         65:b1:f4:2a:df:46:15:c0:3f:8a:08:cf:35:89:33:60:f0:a4:
         32:c2:39:21:3b:36:e8:0e:a6:cf:53:9b:16:ce:13:6d:0d:c8:
         f3:aa:ee:ca:5a:ba:5b:67:8c:c5:bd:67:46:ce:ca:ef:a0:7d:
         c6:1e:79:50:84:1c:a0:60:b2:2d:77:86:8b:7b:49:08:0e:78:
         1d:23:f7:ed:de:e0:75:2b:b8:e2:6b:1d:cf:36:23:5a:cf:8b:
         e9:9f:67:e5:02:9a:29:e3:79:05:18:79:4a:73:de:42:50:64:
         ab:0e:c8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:13 2025 by rpki-client