Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File:                     GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier:          swpxrVBCgODY8FGcVu692wVNyy4hlZznE0anTbrhoF4=
Subject key identifier:   ED:C7:2E:F2:7E:D4:B2:A4:CA:CD:46:0A:71:54:6B:E7:3D:5F:BC:1A
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer:       /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial:       0197C94B6AF6800EC46C34FA2C2E093BD2EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number:          07BC
Signing time:             Wed 02 Jul 2025 04:00:52 +0000
Manifest this update:     Wed 02 Jul 2025 04:00:52 +0000
Manifest next update:     Thu 03 Jul 2025 04:00:52 +0000
Files and hashes:         1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=)
                          2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: hzNoa5Q3p1IMEKnYyYPejfJSqs2oSTMFO9uPxnW4pWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:4b:6a:f6:80:0e:c4:6c:34:fa:2c:2e:09:3b:d2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
        Validity
            Not Before: Jul  2 04:00:52 2025 GMT
            Not After : Jul  3 04:00:52 2025 GMT
        Subject: CN=edc72ef27ed4b2a4cacd460a71546be73d5fbc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:74:07:41:39:a2:b0:8d:83:74:43:e6:f8:
                    35:6e:24:7a:79:70:bb:fd:37:4b:7a:b1:51:f2:6e:
                    f1:7c:80:8a:fd:70:a3:c9:d1:c5:6c:a7:bb:f0:fc:
                    b7:92:98:6e:c1:35:be:a6:d3:17:56:ed:ab:1d:cf:
                    60:6c:ba:96:f3:27:2d:91:a6:71:ce:82:ca:7c:b9:
                    34:ed:81:e5:ec:90:b0:fa:6a:6b:ca:77:e0:e7:71:
                    51:15:e0:1b:63:f5:db:11:e5:29:14:48:52:0f:a2:
                    6e:e8:f4:38:d9:37:2a:36:37:39:61:61:52:c3:c9:
                    71:84:c0:0e:3e:a0:c3:ac:1c:13:97:fd:bb:38:16:
                    3d:ad:59:15:8d:0a:ad:a5:77:40:69:73:70:88:c2:
                    8b:55:67:5a:82:81:b3:dd:a0:15:82:c1:4b:42:24:
                    6b:c7:fc:2e:62:67:47:ac:85:ec:fd:84:a4:5d:79:
                    65:3e:5f:60:fb:a1:8c:98:c4:dc:b7:a9:a2:63:3d:
                    bb:8f:1b:f7:7d:b3:17:c2:5d:25:d0:75:a2:74:c0:
                    d8:a4:96:b6:73:3c:eb:aa:cb:b4:6e:42:20:a1:67:
                    ca:b1:d4:cf:d6:15:9a:4c:10:c6:87:da:d9:0e:24:
                    2d:bd:7b:df:38:ab:f5:f6:d0:7d:c1:93:fd:9c:21:
                    43:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C7:2E:F2:7E:D4:B2:A4:CA:CD:46:0A:71:54:6B:E7:3D:5F:BC:1A
            X509v3 Authority Key Identifier:
                keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:30:83:d8:96:2d:c2:08:21:6d:8d:b0:26:59:40:92:33:ed:
         41:b5:5d:f5:f8:6b:60:ff:2a:d2:b7:d3:6c:dd:61:6c:6f:75:
         ea:7e:f6:d8:12:e5:a5:97:1d:1a:f8:af:fa:57:89:fd:9c:0a:
         7c:d3:30:da:79:e0:ac:25:97:7d:e6:0f:84:b5:8d:cd:27:99:
         05:b8:3c:9e:b7:fe:ba:cf:b6:2a:70:d1:4a:34:0c:8d:a4:ea:
         3a:78:f5:6c:92:0b:2b:6e:93:e7:8a:5e:25:94:ef:2e:e2:f3:
         bd:0a:93:0d:dc:0c:d7:a4:4d:eb:6a:a6:d2:12:bf:a5:d3:ab:
         3a:9d:2d:08:ea:22:4b:bd:fd:9b:b5:69:18:90:fc:b6:04:10:
         8a:09:11:17:40:8d:6e:15:d5:da:fe:2c:79:10:d3:0b:09:79:
         95:a7:2a:ad:04:3a:0d:a9:34:e0:22:f9:d6:3a:bc:7f:0e:9d:
         4f:ed:f5:b6:e2:eb:6d:35:09:2b:82:6c:36:58:23:d2:34:2e:
         a9:6d:d9:5f:d6:8b:e4:2c:ea:f6:40:81:57:f9:bc:7a:8d:7c:
         e8:d9:2f:4b:10:b4:a3:3e:04:ed:3a:bb:6b:02:89:20:c0:bd:
         0c:5d:0f:52:34:41:f7:62:d6:60:19:72:e5:72:39:e0:8a:de:
         32:3a:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:38:26 2025 by rpki-client