Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File:                     GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier:          NOH2YUf4OcfTQj8DFvarNkMGuGUTVirMnrfgQCKeDCQ=
Subject key identifier:   6B:D4:41:11:F3:68:49:8E:47:FA:0F:5B:B6:6F:FF:79:2E:4D:62:48
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer:       /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial:       0198D4A7D7A1C62C3929CCC7969E4531A2BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number:          1476
Signing time:             Sat 23 Aug 2025 02:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:25 +0000
Files and hashes:         1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: DAdfGIaTlSnaXGyWGLAdRCiZAbP9cRYQmoWpEXbQ8Ec=)
                          2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d7:a1:c6:2c:39:29:cc:c7:96:9e:45:31:a2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
        Validity
            Not Before: Aug 23 02:00:25 2025 GMT
            Not After : Aug 24 02:00:25 2025 GMT
        Subject: CN=6bd44111f368498e47fa0f5bb66fff792e4d6248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:3b:ca:9a:17:58:ab:c0:36:3e:a6:9a:0e:
                    1d:e0:aa:c6:48:67:51:c8:3a:3e:33:58:4a:12:ec:
                    31:10:f7:0e:6b:d5:4c:39:e4:8d:34:88:88:44:1b:
                    60:e1:c2:c1:03:ac:e3:99:b4:01:c5:09:f9:d0:10:
                    f4:d2:0e:15:db:ca:1f:dc:4f:c1:f6:5e:2c:53:a5:
                    59:a4:81:57:cc:46:85:b7:6c:73:f0:2b:08:8e:09:
                    d5:66:3f:46:27:ac:43:68:02:0a:93:8f:e0:94:d9:
                    57:33:d9:3a:cf:ce:5f:c5:15:e8:25:e4:2d:8c:07:
                    07:00:94:82:05:12:73:55:6d:70:d2:bc:eb:37:d5:
                    da:29:f4:a8:59:58:e2:8e:c2:16:d8:60:0c:6b:75:
                    69:6b:8d:0b:ca:39:db:e5:39:8d:b6:af:05:e1:60:
                    dc:6b:6e:c6:3a:43:86:a2:95:73:5a:ac:d3:3b:9f:
                    78:ba:b9:f1:b3:e7:7f:c5:0a:17:e5:77:af:04:26:
                    ff:b0:e6:86:75:cb:3c:a2:49:19:6d:53:92:57:5c:
                    0c:a6:55:3c:f8:f9:3b:a7:5e:85:d3:73:b4:07:4f:
                    de:55:12:b1:31:07:69:58:e1:bf:34:0d:ac:a8:d7:
                    ac:e0:2d:0b:91:d4:d0:5e:10:ec:5b:24:d4:00:28:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D4:41:11:F3:68:49:8E:47:FA:0F:5B:B6:6F:FF:79:2E:4D:62:48
            X509v3 Authority Key Identifier:
                keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1b:71:59:ba:ea:26:7a:9e:8d:fa:d9:b2:44:0a:84:a6:bc:
         bb:bb:9f:96:e1:a8:21:6e:91:8b:13:b3:94:3d:a4:e5:84:63:
         a9:45:93:86:d1:38:52:3f:fc:ec:04:2d:ed:e8:9c:98:59:aa:
         b2:65:47:57:a6:0d:35:f3:eb:5f:7a:88:6a:ce:61:60:ce:a0:
         f6:51:b7:9b:f3:b5:2a:3b:00:d4:ca:ba:f9:07:23:81:a2:12:
         41:55:ac:9c:d4:01:1d:3b:16:5e:9e:fb:92:b4:15:69:6b:aa:
         e3:b2:31:98:97:a0:ee:88:63:0d:72:92:6b:59:73:2b:4e:38:
         96:7f:3b:3f:ea:25:7b:da:a8:cd:c5:1c:cb:84:0c:57:75:c0:
         cf:b2:7c:eb:26:63:b8:cb:37:4f:bc:be:ef:ad:5e:71:55:9d:
         c7:b3:5b:df:21:e7:95:b3:a1:13:fc:b9:70:98:56:3f:d6:7b:
         36:5b:63:19:ea:86:35:3b:09:a8:74:ce:5a:3c:7a:b4:fc:12:
         97:42:2a:81:79:68:dd:6f:a3:42:22:0f:48:7e:c2:c3:2f:2d:
         ef:0b:94:97:eb:c6:3b:e5:5d:6d:b3:e9:93:45:ba:a3:6d:79:
         0a:c4:59:15:6c:1e:32:08:c0:fa:ad:ad:74:92:7b:b7:68:76:
         05:74:38:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:06 2025 by rpki-client