Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          wCrPqi4mitZPvI/0rwWF4pLNMOFdZqAwaAaXnGQWxwc=
Subject key identifier:   EF:16:58:7F:DC:70:1A:27:8D:E5:9E:87:90:09:55:4A:1E:AA:77:1F
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       01984D439A3B09F374AF58CEACB060E5C19A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          0749
Signing time:             Sun 27 Jul 2025 19:02:12 +0000
Manifest this update:     Sun 27 Jul 2025 19:02:12 +0000
Manifest next update:     Mon 28 Jul 2025 19:02:12 +0000
Files and hashes:         1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=)
                          2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: rS4QUuoWRxu6DxHmIAMX5KIITBW0syiGQ3hU6CUP4+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:43:9a:3b:09:f3:74:af:58:ce:ac:b0:60:e5:c1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Jul 27 19:02:12 2025 GMT
            Not After : Jul 28 19:02:12 2025 GMT
        Subject: CN=ef16587fdc701a278de59e879009554a1eaa771f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:50:b7:b7:18:be:11:01:5e:f9:e4:f2:81:
                    af:22:04:e2:ca:86:4a:3b:20:36:30:c4:2b:6c:50:
                    01:f1:0b:d8:98:ad:1a:0d:f5:e0:d4:fa:4c:3e:9d:
                    a8:a3:61:f2:a2:1c:2c:1e:dd:8d:b9:ca:49:e0:15:
                    a0:2c:4f:45:0a:0e:ec:e0:7b:3d:3a:4b:a3:1f:cd:
                    6d:de:17:3b:81:6c:17:1a:04:90:2e:cd:1e:15:b7:
                    58:d2:3c:f5:58:b0:a8:dc:12:fd:0a:a1:32:e0:8b:
                    2a:6b:dd:04:fb:b8:28:4b:30:af:66:43:bb:b6:b4:
                    4d:ea:30:9d:0d:67:af:f5:bd:6e:df:8b:f2:b9:02:
                    58:79:d7:cc:cb:c5:bb:96:87:78:05:3f:2f:01:ad:
                    be:35:bb:24:13:39:b8:ab:f0:c1:58:20:69:06:9a:
                    58:35:f1:6b:f1:5b:29:fc:6b:f0:3a:4c:b9:90:33:
                    34:1e:10:ef:14:15:74:11:e3:15:a1:c8:50:5d:89:
                    91:3e:3f:82:fd:43:dc:fb:3d:4c:2e:0b:5f:37:6e:
                    ef:0b:ea:ba:0f:63:0d:d8:91:4a:9a:9c:9e:a3:d4:
                    07:25:11:81:07:10:eb:6f:56:b7:49:fe:1e:14:06:
                    25:49:f4:f6:2c:85:e5:5f:f6:90:14:33:56:b6:8a:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:16:58:7F:DC:70:1A:27:8D:E5:9E:87:90:09:55:4A:1E:AA:77:1F
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:26:46:4f:17:b5:bf:42:6a:f1:7d:2f:54:ed:a2:32:6d:1c:
         48:c3:a9:ad:61:7a:7d:5d:ae:ea:12:44:ad:95:b8:5e:e9:4d:
         12:5c:a6:a9:69:71:35:14:a0:c2:2f:a2:36:8a:e0:fc:b0:74:
         48:93:9e:c5:cf:94:1d:f7:66:5a:65:91:68:28:be:f6:df:c4:
         86:4d:2a:4f:4c:e7:9b:6b:41:25:91:57:f3:69:35:3c:ad:27:
         28:b6:8f:9f:c2:2b:3c:53:c9:9e:d3:fa:77:48:0b:77:e6:25:
         b9:ab:4c:18:79:85:b5:64:98:0a:94:6c:c5:04:ea:86:e1:f3:
         7e:37:47:fc:15:20:7f:d5:47:72:26:83:ed:44:cd:d2:b4:d4:
         69:18:bc:49:bf:d1:59:72:e2:7d:b2:70:c0:3d:c4:c1:a2:d6:
         5f:ec:b5:31:22:97:63:15:a8:49:e9:59:12:4a:b8:ca:4c:82:
         f0:a2:88:1f:cb:f2:f4:b9:a0:bb:44:c8:10:ea:7d:e6:5b:79:
         3d:19:51:60:ef:d4:7e:63:d2:54:0d:43:4f:23:fd:9f:74:7a:
         f1:93:2f:bc:06:1b:25:06:5d:d9:f9:c4:75:b8:63:79:ff:a8:
         5a:a7:c0:d2:94:c3:6c:9a:6b:68:b7:bf:9a:f1:23:b5:0e:9a:
         30:e1:9e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 22:34:00 2025 by rpki-client