Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File:                     GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier:          f9SOo8jVh99lOq9ky7suKqcOGZiZERNT57r6HRAhuOE=
Subject key identifier:   D7:1D:A2:54:9F:44:9D:83:45:B0:A8:AA:14:84:9B:6D:5D:A6:1F:AE
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer:       /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial:       0198D6CD1CA62AD2872E770CB7EFD9BF3BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number:          0A4B
Signing time:             Sat 23 Aug 2025 12:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:22 +0000
Files and hashes:         1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: cr2Plk38mZgN0R7IyLxZkZc/cA04BprSoT336kNBK3Y=)
                          2: huPI6u_LRtdxxCntM6xWi8UILhs.roa (hash: dxaGNUPSqDMCpFu0jmftsWJq4vBwtQVy+FWsjciFptc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:1c:a6:2a:d2:87:2e:77:0c:b7:ef:d9:bf:3b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
        Validity
            Not Before: Aug 23 12:00:22 2025 GMT
            Not After : Aug 24 12:00:22 2025 GMT
        Subject: CN=d71da2549f449d8345b0a8aa14849b6d5da61fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:02:b8:c2:90:d7:89:2e:23:27:0c:87:7c:
                    70:19:68:79:9f:e8:f5:d0:e7:d2:57:db:ab:27:5f:
                    89:72:a6:c9:54:58:7f:5d:28:18:f7:2e:0e:f0:60:
                    fd:f4:e5:3d:35:ec:47:f0:77:c2:cc:96:e8:55:92:
                    38:10:eb:fc:6b:e7:0a:75:d4:5c:1c:b7:63:64:7e:
                    c1:9e:4d:5a:1a:1a:85:74:60:b7:86:9f:54:2f:f5:
                    cc:55:34:62:93:74:d7:f2:cd:6e:f1:ac:4e:23:7b:
                    15:fd:4c:54:c2:0b:84:03:0b:29:86:6b:47:76:bc:
                    d7:43:79:46:36:04:9f:be:36:c3:f9:e3:71:cd:6d:
                    45:6c:b2:79:d5:72:40:f2:73:e6:58:9d:61:70:7c:
                    c1:e5:f6:ec:4f:6c:e4:ab:4a:05:5e:13:94:f1:1a:
                    00:f2:56:fe:18:42:4f:76:d5:71:53:18:ea:07:de:
                    f5:9a:ef:76:c0:06:85:7e:10:1d:85:24:ba:dc:2b:
                    95:08:49:fa:96:bd:9d:9b:7c:41:cd:70:67:5e:5d:
                    fd:fd:21:84:d2:cf:31:de:ad:8f:c9:e1:25:31:3c:
                    96:7e:76:72:98:40:43:3b:de:c5:be:ff:60:0f:07:
                    49:8f:15:80:1a:7b:b7:5c:55:cc:d7:3a:3c:76:cf:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1D:A2:54:9F:44:9D:83:45:B0:A8:AA:14:84:9B:6D:5D:A6:1F:AE
            X509v3 Authority Key Identifier:
                keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:f3:32:f0:99:2f:5d:33:f3:80:aa:a2:6a:c4:a6:15:45:
         e3:19:86:21:f4:50:5d:6f:9f:8d:90:b4:49:90:10:09:b7:8c:
         df:f4:44:48:19:06:9f:0d:76:78:5c:22:46:e3:5a:46:ae:29:
         75:f9:07:b8:6f:41:86:4a:b2:84:27:02:fb:b5:91:9f:4a:6a:
         c6:1c:64:68:e3:53:46:59:3a:94:fc:93:41:76:36:ed:cf:cc:
         42:31:04:dd:14:4f:b9:91:59:08:fd:68:89:54:eb:9c:6a:3d:
         a7:d1:6a:3e:64:c0:e6:c9:79:e7:00:1e:28:00:63:a0:2a:ed:
         a0:dc:7d:30:fd:03:b9:fe:9e:03:bd:5e:01:05:c2:fd:e1:5d:
         b4:91:71:00:fd:02:b6:f5:d8:64:a7:b7:2d:00:18:ff:5a:65:
         26:0a:7a:56:59:78:da:8c:b3:e1:9c:6a:57:09:ac:62:2e:13:
         5d:cc:ed:0a:72:56:9b:10:d0:83:37:6f:c5:d5:f9:fc:ad:a9:
         4d:c1:e6:f6:a6:3b:02:00:42:de:5d:88:d3:25:41:11:11:fe:
         aa:38:9b:16:49:45:92:9e:e4:f3:8d:cf:62:d5:b2:0c:b8:b8:
         0d:4d:de:b9:52:82:23:91:3f:a5:1d:36:42:75:28:87:77:8d:
         7e:a1:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:01 2025 by rpki-client