Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File:                     GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier:          4xhNDradk4DqBok19ZUGTQmD0jdvJ4Ivm79/HSndkJc=
Subject key identifier:   7B:6C:90:73:0B:3B:EC:DE:D7:64:FB:8A:00:39:6B:61:8D:4C:FB:88
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer:       /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial:       019849D3BCD00688BEF3416050E1EEF77B1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number:          075F
Signing time:             Sun 27 Jul 2025 03:01:09 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:09 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:09 +0000
Files and hashes:         1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: iDmAfN1hx36USsPTxExUtRj9wJyfPUnHrrSdSssC0ls=)
                          2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:bc:d0:06:88:be:f3:41:60:50:e1:ee:f7:7b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
        Validity
            Not Before: Jul 27 03:01:09 2025 GMT
            Not After : Jul 28 03:01:09 2025 GMT
        Subject: CN=7b6c90730b3becded764fb8a00396b618d4cfb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:f6:c0:a0:38:77:5b:a7:56:d4:25:39:fe:
                    fd:33:9f:30:5c:6c:bb:44:2a:81:4d:5a:4c:24:88:
                    e3:f8:c3:4a:1e:d3:1a:50:a6:06:5b:0e:da:ca:28:
                    04:6d:11:78:7f:ae:d9:45:10:f9:51:f8:bb:01:8b:
                    0f:e7:c7:77:51:c0:95:f7:eb:1f:05:c0:68:59:45:
                    4c:a7:94:12:47:20:aa:95:b8:7e:41:16:a5:44:34:
                    fd:84:18:2e:19:cd:59:27:2b:a0:a5:a2:7f:ae:df:
                    62:38:fb:50:6e:1f:01:2d:68:79:3a:d5:c0:10:a2:
                    d1:0f:58:4a:1e:37:eb:0b:60:a9:fa:68:80:36:94:
                    93:62:6e:07:a4:fa:43:32:1d:88:5d:66:0b:76:7d:
                    ea:35:99:d1:06:11:94:86:a9:80:bd:90:03:56:52:
                    f8:3f:96:00:6a:35:58:db:df:1f:b9:0a:e5:5a:d6:
                    01:08:65:62:78:2d:cf:c8:1d:bd:7b:f6:9a:a9:9b:
                    9f:2e:e3:2d:0a:b0:0c:ba:5a:d0:8f:d5:8b:e8:9c:
                    1e:b6:7e:a2:c9:b3:71:0d:d7:e6:0c:0a:78:6e:19:
                    bf:83:5b:f5:71:49:78:96:88:9f:f2:da:d8:14:8e:
                    92:96:1b:29:f7:b8:d5:33:d6:8b:06:14:d7:80:fb:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6C:90:73:0B:3B:EC:DE:D7:64:FB:8A:00:39:6B:61:8D:4C:FB:88
            X509v3 Authority Key Identifier:
                keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:68:a2:3e:3d:13:cb:63:0a:8c:f3:de:e2:cf:2a:f6:85:26:
         d7:98:9c:62:37:d7:fa:b4:41:2b:b3:b2:47:63:69:78:72:1a:
         09:1b:45:1c:d2:69:96:69:8a:83:eb:49:74:f1:c4:f3:1e:49:
         17:06:0a:34:d8:c2:8d:0b:b9:16:2f:3b:c8:51:a5:35:db:4a:
         8d:52:c1:42:5f:62:47:0f:e2:ca:af:a5:f6:f1:91:0e:91:bb:
         92:a6:77:09:d3:ff:3a:a3:87:c9:c2:c7:dd:2b:c5:7f:c9:10:
         3f:fe:49:81:1e:1a:f4:0b:35:29:c1:bd:ac:9f:a8:bd:25:ab:
         97:db:e6:1d:8e:21:85:ba:d7:02:22:db:eb:a5:d0:09:87:ec:
         d6:4f:41:34:d9:48:20:86:14:9b:d5:42:a4:b4:68:3a:a4:d9:
         14:e0:ae:35:ac:a8:0a:f2:65:42:63:aa:48:b7:cb:40:ac:46:
         43:46:c3:30:40:f3:79:21:8f:49:1c:b7:e9:3f:26:bd:34:8a:
         70:12:64:d9:e6:87:84:41:2f:f7:d7:ac:59:d5:1a:ec:de:88:
         f4:ee:2e:16:fd:8c:97:1d:8d:6d:27:19:3c:67:bb:48:18:f3:
         73:b6:d3:99:28:05:75:af:8a:26:f2:0f:a2:ef:d4:d8:2a:d1:
         85:dd:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:42:13 2025 by rpki-client