Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File:                     gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier:          swgmwj0vCLNlSabJ2eP4HsAIdLwzXqsWZ5aiZg2HkeE=
Subject key identifier:   26:2D:80:D2:A1:3F:FF:D7:5C:03:3B:DA:E2:86:8E:03:8C:66:0B:5C
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer:       /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial:       019954F8E375E47F08C8F56D718BD3DE204E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number:          0D08
Signing time:             Wed 17 Sep 2025 00:00:21 +0000
Manifest this update:     Wed 17 Sep 2025 00:00:21 +0000
Manifest next update:     Thu 18 Sep 2025 00:00:21 +0000
Files and hashes:         1: 8IUfLut7BygQV_kfUjYxZ6R1hWo.roa (hash: osXEgzEeRLXEDV95MIWOG4REHDOr18vMvAPD5SIJRo8=)
                          2: e906IBwj4MSiW-e8owQAWsQ_4Jo.roa (hash: P83ELX1oAyr6YQ0Ab0RC6iwmwrr6PxLhv5UjiehFQxc=)
                          3: eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa (hash: ytxhtvq1ezR1if4ipOboDxmwy8xQfyDHM3VrrrzA9pU=)
                          4: g2b35-nULZDfmdIQobQp625Nk-I.roa (hash: daDEnydg6U3m1GEZ8hWZT3NDMPEI2dbQkvddvsu4lNo=)
                          5: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: ySU60wBagFDbx8wK1BVCeRNYdFeWpFVwORB/SseyfQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:54:f8:e3:75:e4:7f:08:c8:f5:6d:71:8b:d3:de:20:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
        Validity
            Not Before: Sep 17 00:00:21 2025 GMT
            Not After : Sep 18 00:00:21 2025 GMT
        Subject: CN=262d80d2a13fffd75c033bdae2868e038c660b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:1d:48:0d:18:9a:e5:d0:e9:3b:9b:eb:7d:
                    67:5a:83:88:28:9d:1d:f5:20:9a:ec:6a:46:4b:52:
                    c5:3b:e6:cd:f9:b6:91:e5:46:18:33:68:61:9a:65:
                    64:a9:d9:9a:3b:37:0c:af:b2:a7:66:ef:77:98:c5:
                    43:c3:67:8d:ed:3f:33:83:7e:3f:3a:92:83:f2:fc:
                    ab:0c:13:5f:4a:ef:b3:04:46:f4:11:a2:d5:be:2c:
                    6e:b1:1a:54:8e:49:44:b5:2e:af:e9:07:ef:0f:8a:
                    34:1d:de:61:93:16:15:77:dc:5c:88:46:fd:fc:6b:
                    5c:71:dc:4d:6f:2b:12:a8:bd:a4:16:9b:52:d4:ce:
                    76:dd:64:97:85:c0:f8:9a:01:47:4d:f0:7d:a0:f0:
                    58:8c:3f:b9:1b:ec:cd:a8:1e:fb:12:dd:50:eb:ac:
                    db:14:b0:a2:68:bb:02:0b:a7:8e:dd:d7:44:2b:1b:
                    36:7d:7d:22:fa:f1:20:ab:e4:7c:6e:c8:4f:38:50:
                    c1:ae:4b:82:96:0e:a3:db:7c:4c:9e:1b:ad:51:3f:
                    a4:32:17:b5:c3:b9:bc:f2:3a:3d:eb:e3:56:9a:b4:
                    ac:e5:3e:ce:c2:08:bd:40:67:f5:65:85:32:7a:f7:
                    07:cf:68:57:6e:a0:31:59:31:a3:e0:27:ec:da:b3:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2D:80:D2:A1:3F:FF:D7:5C:03:3B:DA:E2:86:8E:03:8C:66:0B:5C
            X509v3 Authority Key Identifier:
                keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:24:98:bc:06:33:34:d1:8c:19:53:e8:c6:96:63:4d:9d:d2:
         b4:e3:e1:93:10:71:4d:95:98:e8:97:63:f1:ca:46:5e:fd:92:
         a2:71:0a:34:e6:35:94:27:e4:64:f1:f4:4f:7a:42:50:7f:b6:
         1e:39:19:c7:96:9a:7d:11:52:83:fa:cf:79:91:ff:44:63:fc:
         a1:2d:8f:b5:11:9f:b8:e1:49:07:b6:e4:0b:b5:0e:19:c4:d6:
         b7:1b:35:e7:0f:58:74:fd:b0:f1:c7:ae:9c:95:a5:77:38:43:
         22:16:54:0d:3a:ff:5a:f4:c9:3b:08:6a:5d:37:53:45:e9:ca:
         48:86:33:a3:86:ca:be:b1:44:7c:0f:48:3e:13:0b:22:bc:1f:
         67:d8:2c:08:ff:b8:c0:f7:a0:22:26:f9:84:7f:da:05:d3:9f:
         e7:ec:30:0d:14:7f:f8:85:cc:6a:bf:a0:1e:20:ac:ec:dd:d7:
         0b:ed:15:cc:56:6f:f9:e0:d0:0f:f3:b8:1f:9b:d9:5f:32:64:
         8e:3c:89:f8:21:e0:59:e0:50:94:2e:41:74:e3:64:a5:0e:5b:
         d9:c8:ac:83:23:d1:d3:b6:59:c2:8d:21:4f:69:e7:d2:4b:c5:
         dd:13:75:bf:48:61:4b:39:3a:b3:4b:5b:5c:db:e8:a3:18:1a:
         9b:94:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:45:44 2025 by rpki-client