Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File:                     GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier:          HqTYyTNhAwsing0pef4c87GSzMyzPM+UF97NRGSDNDs=
Subject key identifier:   B6:B8:C0:23:D4:21:49:24:F2:05:E2:AC:DE:4D:5C:F4:26:90:78:8B
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer:       /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial:       0198D5BB8BD1717EA86026A13379DA63AB43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number:          0959
Signing time:             Sat 23 Aug 2025 07:01:34 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:34 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:34 +0000
Files and hashes:         1: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: 5d8iUiTKV0NPKrWS5vuwZpRGVhR1udG+X9jHKqcDx3M=)
                          2: JLeYM1Nb1WkxGedHLrl3D2YAcD0.roa (hash: kpcTVdbw29GtZxZaBOoPfJn9eSPlvRnFiHJuCzaGNU4=)
                          3: izbCDxefHi81Ceh8v70jil8PjrA.roa (hash: G81Vq+SeFhUUiPynuXGPGqpCxUEFG0haFucomHcGaT8=)
                          4: uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa (hash: knG2zE+cphfPly9s92WP/7hjIDgEXmoUhOUrwgfF5vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:8b:d1:71:7e:a8:60:26:a1:33:79:da:63:ab:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
        Validity
            Not Before: Aug 23 07:01:34 2025 GMT
            Not After : Aug 24 07:01:34 2025 GMT
        Subject: CN=b6b8c023d4214924f205e2acde4d5cf42690788b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:d9:f5:14:81:8b:ba:89:02:81:51:f3:d1:
                    7b:51:ff:17:5a:bd:71:54:57:34:57:d7:a3:25:53:
                    cc:7c:32:2e:8c:54:5b:17:cb:29:bd:ac:7e:d9:c1:
                    fe:40:71:d8:fc:10:9d:e8:bb:cf:a5:d6:fb:83:6f:
                    5d:60:18:ea:02:0f:a4:08:eb:d0:08:22:70:26:b9:
                    c2:35:01:a9:3a:f8:37:5d:f9:03:77:17:fe:2e:bf:
                    1d:b4:c5:f3:00:f6:c5:8e:65:e9:b2:ed:ed:44:87:
                    fa:06:9a:51:bf:32:a3:0a:38:1c:9f:ee:8b:45:50:
                    1a:1d:11:23:ba:89:6e:10:85:f6:2c:18:a6:eb:88:
                    11:32:11:14:99:4a:46:8b:53:a7:0f:ed:ac:b3:bf:
                    e6:da:75:1d:cf:9a:1d:47:27:86:c1:8a:7c:c8:3d:
                    8b:2d:48:f2:b5:44:fa:d6:d8:62:23:ec:c2:6f:4f:
                    19:c1:fd:51:4a:f8:dd:9b:d1:a5:5f:24:14:12:77:
                    08:c7:c2:bf:91:11:ad:34:00:50:f8:90:58:25:8c:
                    7a:76:e1:6b:d8:17:79:53:44:31:87:2e:69:88:df:
                    3d:b3:5e:48:53:29:b0:a8:e5:9b:70:71:92:3e:3f:
                    a1:a0:59:9c:97:95:1d:73:ab:af:70:7f:6a:09:7e:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B8:C0:23:D4:21:49:24:F2:05:E2:AC:DE:4D:5C:F4:26:90:78:8B
            X509v3 Authority Key Identifier:
                keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:02:6c:66:ee:bf:47:83:ec:9c:15:5d:37:9d:9f:ca:62:b2:
         5f:7b:68:00:4d:2c:e5:50:ef:8b:f5:cd:22:d8:e7:bc:b9:48:
         05:77:bf:45:94:ec:4a:89:6b:1d:ca:69:d9:9f:cf:62:97:f3:
         82:8f:ef:0e:87:96:f6:46:08:6e:04:e9:9f:10:5a:92:49:85:
         9f:cd:bc:6e:18:4a:ee:85:f1:f8:f0:09:2b:32:fd:ef:48:16:
         8d:f5:20:0d:5e:cb:85:fa:b9:3f:4b:44:4d:9a:34:35:54:7d:
         db:a3:3b:d4:98:40:de:8b:0a:8e:a6:4e:44:05:4c:fc:35:b3:
         62:67:88:b7:f0:b5:b0:34:19:16:cf:e8:ac:1c:17:e9:33:3b:
         59:5a:b0:85:59:a5:26:24:c7:67:0a:34:25:92:f3:58:95:0d:
         2a:96:7d:ef:cb:2b:d9:78:c0:20:99:f3:2f:4a:d3:ff:7d:16:
         2f:e3:c7:40:a8:b0:4e:23:7f:95:a0:ee:52:19:ce:2b:f9:18:
         c7:99:05:d3:e5:9a:81:e2:43:5c:2a:14:fa:b6:a9:b7:30:c8:
         20:fb:4c:85:17:c9:51:a3:c3:1f:a6:df:c6:60:4e:f2:e7:a8:
         08:de:56:e2:5e:8d:9f:84:1b:76:f4:91:18:84:75:d1:f0:6f:
         e1:b0:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:16 2025 by rpki-client