Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
File:                     gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft (raw, json)
Hash identifier:          01uAfs7n89LmdEEdDzieXqSXITj8SmC4PeV82OlM3Wc=
Subject key identifier:   EE:C1:A4:1A:7E:5A:BD:B9:5F:C1:A2:86:A4:20:2B:63:53:41:AB:93
Authority key identifier: 82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
Certificate issuer:       /CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Certificate serial:       0196B9A35869D53C4E9B9DAE0D0E5F70D9C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
Manifest number:          0B23
Signing time:             Sat 10 May 2025 10:00:11 +0000
Manifest this update:     Sat 10 May 2025 10:00:11 +0000
Manifest next update:     Sun 11 May 2025 10:00:11 +0000
Files and hashes:         1: 9KyF73rehYPV02tjofB2AZLrL40.roa (hash: puNKsT3QO3F9HAC3FWFKHMpsh3lk62Ax5BDntOG9N0s=)
                          2: gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl (hash: 81pX+1qO9Drl094rACfzLpWN3ntiWQPBqNKsFX6Dbp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:58:69:d5:3c:4e:9b:9d:ae:0d:0e:5f:70:d9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
        Validity
            Not Before: May 10 10:00:11 2025 GMT
            Not After : May 11 10:00:11 2025 GMT
        Subject: CN=eec1a41a7e5abdb95fc1a286a4202b635341ab93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:b2:6d:da:62:ee:67:86:e4:a2:6a:07:2e:
                    a1:f3:f8:e2:0d:37:0d:84:ea:f2:97:6f:ea:78:d5:
                    4e:e8:62:a3:82:22:e1:80:84:db:27:e9:0f:4d:33:
                    92:46:75:c3:08:6c:fd:00:2e:a0:a1:18:10:68:13:
                    f8:45:8b:48:24:c0:d1:9c:aa:c3:82:ba:25:8f:84:
                    8e:47:52:56:82:dc:0a:07:0e:69:75:4a:7c:23:e3:
                    49:45:37:79:48:de:1b:9b:da:a9:6a:85:87:bf:96:
                    5c:13:66:69:b1:f0:6e:fb:be:e9:a3:a8:c5:6a:81:
                    95:6b:0a:73:dd:f8:2d:22:49:32:a3:a4:87:7d:02:
                    2e:11:fb:1b:40:27:c0:48:e3:ef:a8:da:82:32:65:
                    49:06:3b:3a:f5:25:46:ee:09:d4:92:1e:27:02:4c:
                    c9:e5:66:4d:28:be:9c:42:00:7e:8b:ce:7f:67:09:
                    58:50:2d:79:50:dd:90:04:48:5b:56:65:9a:53:e3:
                    e2:d9:f6:8f:64:dc:63:e3:01:1b:21:29:c4:18:6e:
                    3a:0a:22:71:c7:7a:b3:23:03:02:f6:01:f5:34:b6:
                    8b:ac:6b:a5:7d:13:d3:f7:62:52:4f:94:89:53:1d:
                    bc:2e:f2:00:b2:a6:20:b2:a7:7e:85:3a:eb:cc:de:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C1:A4:1A:7E:5A:BD:B9:5F:C1:A2:86:A4:20:2B:63:53:41:AB:93
            X509v3 Authority Key Identifier:
                keyid:82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:92:39:85:fc:e1:26:47:7f:78:7e:3e:a6:32:3d:76:4a:9d:
         f9:de:0f:ab:bc:fb:7f:75:ae:6e:b8:75:d4:38:b7:d9:15:df:
         52:32:6e:d2:68:10:6c:80:c8:64:ee:ad:6c:63:56:06:77:fb:
         a9:8f:c0:33:01:3a:7a:31:87:d2:97:75:66:39:ac:93:10:59:
         97:d3:4e:d2:3c:f9:fe:3a:29:dd:79:ad:fb:ea:27:0c:ae:aa:
         9e:7f:5e:c9:17:f8:9d:c1:9a:4f:85:36:13:ef:e7:ac:88:41:
         be:84:d2:35:bf:76:c3:5e:15:27:ad:c8:94:93:a7:a6:b3:8a:
         a3:46:44:1b:d6:2e:7e:e4:86:68:ca:f4:02:ba:b6:56:e1:0e:
         5f:03:9d:7a:b7:9b:b1:e8:1d:be:b1:a9:5f:b2:3d:3e:78:1a:
         94:3b:cc:e8:5a:e9:a9:a6:51:61:9f:bb:35:27:6f:5e:ba:7d:
         df:7e:54:27:55:e5:38:60:f3:91:59:03:cf:dc:e8:f1:00:4a:
         4c:fb:4f:d1:ff:42:5e:ee:9b:0a:97:fe:87:61:1a:98:6a:f4:
         4d:17:f6:a3:15:9f:d4:1a:a5:2b:3e:57:a6:1b:33:d9:02:be:
         fb:10:e4:2d:f9:a4:4f:4a:2e:b3:3c:31:0c:a8:f9:7c:a1:aa:
         4a:32:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:17:19 2025 by rpki-client