Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File:                     gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier:          PXngGRXEkCUkpEHKG8XtRo2W6zzb1A+3E6c3LABy8VQ=
Subject key identifier:   81:E3:60:18:02:96:42:A5:14:E4:AF:5D:15:F8:86:C4:19:41:A8:88
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer:       /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial:       0198D515C3C36E3D99D1844D2A294CE96F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number:          08E7
Signing time:             Sat 23 Aug 2025 04:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:29 +0000
Files and hashes:         1: MVRm2B27-mtawpjQijtz-fTQOKU.roa (hash: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=)
                          2: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: UvuJ5e5grt5K1eC99riRYPKkevnGwKZc+UlvKLcigXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:c3:c3:6e:3d:99:d1:84:4d:2a:29:4c:e9:6f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
        Validity
            Not Before: Aug 23 04:00:29 2025 GMT
            Not After : Aug 24 04:00:29 2025 GMT
        Subject: CN=81e36018029642a514e4af5d15f886c41941a888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:b4:f9:f3:17:9c:eb:d6:55:3c:61:fa:71:
                    a6:52:12:fe:1d:d6:f1:07:11:f5:d6:88:f6:a0:76:
                    89:f0:0e:fd:2a:84:51:d1:ee:ac:0d:7d:aa:1c:e2:
                    c7:42:85:19:11:be:d2:21:4e:0c:04:98:f0:d3:db:
                    14:6e:4c:6e:e5:de:33:4f:91:cd:eb:1c:c5:a3:de:
                    ab:27:6a:0c:3d:06:d8:62:9b:71:30:11:1a:4a:36:
                    c0:a6:28:df:e9:a1:6c:5c:b4:62:52:f0:8d:ce:eb:
                    bb:34:cd:3b:6a:32:91:36:ee:36:f1:e1:dc:e4:b6:
                    a5:d3:2d:8a:e2:73:46:3e:5e:d7:63:ae:df:56:44:
                    98:01:7a:fd:81:a8:ce:07:a6:a1:ff:1e:50:ac:d6:
                    d2:3b:88:dc:9d:12:c8:4b:8a:e1:d5:2c:83:50:38:
                    35:ef:86:ed:95:10:cb:41:c3:6d:c5:24:67:95:b8:
                    9e:43:a0:f4:a7:da:3f:44:d0:2d:f0:1e:54:c9:70:
                    32:da:78:c0:7f:34:a7:58:57:c4:6b:a6:ae:6c:a1:
                    c8:64:9c:c3:a4:70:9b:50:0d:3c:9c:f0:b3:37:63:
                    e7:14:4b:12:6b:eb:88:09:11:eb:e8:9c:d2:aa:79:
                    69:5f:04:ec:23:90:e3:35:ba:46:ac:06:1a:58:9e:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E3:60:18:02:96:42:A5:14:E4:AF:5D:15:F8:86:C4:19:41:A8:88
            X509v3 Authority Key Identifier:
                keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:27:5c:40:60:be:0b:ea:ce:76:9c:37:f1:e6:64:4c:50:79:
         bc:e3:15:e7:f9:5b:78:34:f2:2c:d8:fc:e7:27:48:1f:39:5e:
         94:28:e2:30:f6:6f:1b:13:16:9f:b1:a7:a9:b8:5e:69:cd:51:
         9c:2e:2b:c8:a3:71:69:16:22:4c:cc:ba:0e:d0:78:0a:e7:fc:
         c5:61:1e:a6:3b:cc:ad:83:3b:04:cb:70:38:63:f6:25:82:6a:
         63:ff:7d:a1:85:82:27:58:c6:7b:78:fd:e7:bc:6d:15:93:9f:
         bd:1d:b2:ba:74:93:3d:18:95:b7:0c:53:68:21:92:ad:2c:97:
         b7:fb:72:9d:c2:86:d7:67:d4:6d:a8:8c:83:3d:86:46:2b:c6:
         65:55:97:70:71:ab:86:e6:41:e7:0a:70:8c:41:13:56:47:fa:
         44:b4:0f:41:0d:2b:e6:30:fc:3b:68:ae:c3:ea:2b:ac:e4:04:
         99:7d:68:ce:87:e8:87:68:99:db:4a:92:f5:db:15:a9:2e:57:
         b7:dc:ba:2b:be:03:2c:8e:cf:b1:eb:14:be:fc:93:82:c6:8f:
         7c:1e:54:ec:bf:76:e3:27:bd:1a:07:49:3a:ec:1c:97:c1:57:
         0c:c1:42:bf:6f:d2:a7:a4:8b:ee:a9:57:43:24:23:d7:67:f6:
         ff:16:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:53 2025 by rpki-client