Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          s7Vw4v7VtkYeUFZfpurhfIBLJdQnzIU8ig9lnpyi4xg=
Subject key identifier:   CD:16:5D:F6:7B:DB:27:61:A0:45:83:4F:C3:47:F9:86:80:89:4C:D1
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       0197B7B33DBA50BF34406204E07B820B53A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          03D2
Signing time:             Sat 28 Jun 2025 18:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:06 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: JXSw1sdRK2ZyeRfBIUqEXZsCvriIIc7uyUWxqDdgRJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:3d:ba:50:bf:34:40:62:04:e0:7b:82:0b:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Jun 28 18:01:06 2025 GMT
            Not After : Jun 29 18:01:06 2025 GMT
        Subject: CN=cd165df67bdb2761a045834fc347f98680894cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:db:a0:dd:0d:ac:dc:4a:b0:9c:3b:dd:bc:
                    32:57:04:ba:5f:82:53:85:93:55:8c:2d:c4:1d:47:
                    ae:50:4a:82:2a:cb:5f:7e:a6:c4:0f:d8:90:8b:87:
                    c0:3b:14:2b:bf:f0:2c:40:d3:b4:cb:70:a5:e1:63:
                    f9:1e:94:f8:80:ab:73:cb:5d:a2:b6:27:b4:23:f5:
                    4f:e8:cc:74:60:36:7b:e3:b4:9f:69:43:6e:65:9b:
                    d0:ef:69:b6:fa:9d:bb:c1:ed:bb:40:79:f4:99:f3:
                    ff:59:da:09:6f:c9:23:e4:e1:71:a8:78:32:99:f0:
                    cf:5c:9b:f9:1b:58:b1:3f:56:6d:6f:70:5a:aa:8b:
                    ba:f0:56:ea:48:fa:f7:32:e8:a4:85:65:8d:7d:65:
                    cc:f5:c7:4f:c9:94:c8:07:15:64:d7:33:66:01:a7:
                    b0:8e:72:9e:68:54:a1:0a:5b:a6:29:df:d7:06:1e:
                    dd:1f:af:40:a9:30:75:67:63:2d:b5:28:f2:15:66:
                    e7:ff:48:e0:4f:af:db:ea:23:e7:9b:23:35:35:6c:
                    35:c2:bf:d4:d0:be:27:13:4f:0d:8c:8c:53:fa:fa:
                    f3:81:c6:3b:0a:52:1f:02:aa:7a:48:97:d8:64:8f:
                    5e:48:29:27:01:82:9c:0c:3f:67:ec:c6:5f:17:6d:
                    73:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:16:5D:F6:7B:DB:27:61:A0:45:83:4F:C3:47:F9:86:80:89:4C:D1
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:19:01:68:6b:e2:cf:33:d3:fc:26:42:47:1f:55:ff:92:c5:
         b4:99:c3:4d:90:8d:2d:6d:b6:8a:c6:71:63:04:37:2c:26:ce:
         b1:58:7f:8b:be:c2:6d:31:b4:c3:fd:3f:31:3e:4d:52:a9:75:
         58:ca:be:e9:f4:4c:2e:f7:fb:6e:cb:89:84:57:81:89:7f:a5:
         6f:d5:ab:d1:36:6a:61:82:13:c6:b6:4d:39:74:f3:82:8f:f2:
         de:77:ac:63:57:a8:56:a2:ae:fc:c1:e1:ea:b4:99:22:32:d5:
         cf:21:f0:94:7f:77:d9:50:2d:a4:e5:da:57:53:cc:7a:cd:96:
         4e:8a:22:74:ff:48:f3:0f:32:f4:25:e3:55:13:d9:29:39:ef:
         1d:03:47:d0:29:d1:2f:95:6b:99:94:13:9a:ae:25:f3:36:c7:
         69:ee:87:d7:45:6b:a9:aa:dc:0d:18:c0:43:36:94:27:45:0e:
         18:50:f8:1a:14:37:05:6c:f7:2f:83:2e:2e:ed:50:75:cc:65:
         84:f7:fd:a2:46:db:33:36:47:0c:e3:3b:79:8e:01:78:ec:d9:
         a4:d4:a5:4c:90:67:ad:4f:f1:ea:df:6c:a2:e7:c1:86:eb:a2:
         4e:8d:c6:59:54:5e:75:5a:3c:4f:ec:a5:03:97:b8:e5:d4:63:
         92:7e:30:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sz26UL80QGIE4HuCC1OgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NWZhODMzMDI1MmEwN2YyNTBlNTFkOGU0NzRiYjM4ZDdk
YzNiOWEwHhcNMjUwNjI4MTgwMTA2WhcNMjUwNjI5MTgwMTA2WjAzMTEwLwYDVQQD
EyhjZDE2NWRmNjdiZGIyNzYxYTA0NTgzNGZjMzQ3Zjk4NjgwODk0Y2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1vboN0NrNxKsJw73bwyVwS6X4JT
hZNVjC3EHUeuUEqCKstffqbED9iQi4fAOxQrv/AsQNO0y3Cl4WP5HpT4gKtzy12i
tie0I/VP6Mx0YDZ747SfaUNuZZvQ72m2+p27we27QHn0mfP/WdoJb8kj5OFxqHgy
mfDPXJv5G1ixP1Ztb3Baqou68FbqSPr3MuikhWWNfWXM9cdPyZTIBxVk1zNmAaew
jnKeaFShClumKd/XBh7dH69AqTB1Z2MttSjyFWbn/0jgT6/b6iPnmyM1NWw1wr/U
0L4nE08NjIxT+vrzgcY7ClIfAqp6SJfYZI9eSCknAYKcDD9n7MZfF21zIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0WXfZ72ydhoEWDT8NH+YaAiUzRMB8GA1UdIwQY
MBaAFBlfqDMCUqB/JQ5R2OR0uzjX3DuaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lOWIwZTAtZjRiNi00NmRhLWFmZjgt
YmU3MDg3ZGJmNTM2LzEvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9lOWIwZTAtZjRiNi00NmRhLWFmZjgtYmU3MDg3ZGJmNTM2
LzEvR1Ytb013SlNvSDhsRGxIWTVIUzdPTmZjTzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhkBaGvi
zzPT/CZCRx9V/5LFtJnDTZCNLW22isZxYwQ3LCbOsVh/i77CbTG0w/0/MT5NUql1
WMq+6fRMLvf7bsuJhFeBiX+lb9Wr0TZqYYITxrZNOXTzgo/y3nesY1eoVqKu/MHh
6rSZIjLVzyHwlH932VAtpOXaV1PMes2WTooidP9I8w8y9CXjVRPZKTnvHQNH0CnR
L5VrmZQTmq4l8zbHae6H10VrqarcDRjAQzaUJ0UOGFD4GhQ3BWz3L4MuLu1Qdcxl
hPf9okbbMzZHDOM7eY4BeOzZpNSlTJBnrU/x6t9soufBhuuiTo3GWVRedVo8T+yl
A5e45dRjkn4wJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:26 2025 by rpki-client