Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
File:                     Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft (raw, json)
Hash identifier:          acgGLovpA8pSlxVQFBHMxOWVu5zkdoejA2bvmNWS520=
Subject key identifier:   F6:2D:D1:D0:ED:00:DB:D2:7A:F2:2A:2F:6D:AE:34:64:50:41:DD:4D
Authority key identifier: 1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3
Certificate issuer:       /CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
Certificate serial:       01984A77E63C12017CD53EBD5D585AED1AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
Manifest number:          15FE
Signing time:             Sun 27 Jul 2025 06:00:28 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:28 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:28 +0000
Files and hashes:         1: Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl (hash: Xrozaiz5vyY0i33vNJUgGuAS8H6/5P6BYE+Uz6j0CWU=)
                          2: ttZNv6l1EeF-xiTWTGqQIM7MdNI.roa (hash: 7CYeRmxgoUhsy4kTyySHz2v5rlglnUVr1BYD9Sp0a6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:e6:3c:12:01:7c:d5:3e:bd:5d:58:5a:ed:1a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
        Validity
            Not Before: Jul 27 06:00:28 2025 GMT
            Not After : Jul 28 06:00:28 2025 GMT
        Subject: CN=f62dd1d0ed00dbd27af22a2f6dae34645041dd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:0c:09:5d:0d:bc:ca:83:b1:15:95:62:f5:
                    ea:7e:d3:83:ed:c7:20:74:ed:3c:15:f6:2d:1a:d5:
                    45:89:f7:d0:8d:78:73:27:b0:78:c8:06:26:ec:c2:
                    af:0a:1a:24:4d:08:e0:bb:0f:1d:08:ee:a5:d6:0d:
                    d5:d5:88:6f:cc:4d:4b:a7:86:86:7b:34:93:7e:6a:
                    5c:90:a9:3f:44:44:58:d3:7f:c1:86:4a:95:e2:f8:
                    5b:47:2d:99:55:f9:81:ca:0b:58:c3:ff:8a:9e:34:
                    f0:b6:94:76:e8:3b:be:04:9c:78:ae:5f:5d:3b:c9:
                    d8:a3:a7:04:64:d9:c1:6c:09:98:42:1f:35:56:c7:
                    e4:79:78:5f:cf:50:43:d8:8d:7d:9a:1e:af:22:cd:
                    0c:22:90:35:a0:87:ec:2b:40:93:3f:e1:f9:08:d8:
                    02:73:32:2a:ad:aa:f2:54:44:5c:f3:6c:69:ea:be:
                    a7:74:17:23:31:c9:1a:8e:65:ed:c0:81:31:2b:8d:
                    87:07:47:41:90:69:50:76:c7:1c:36:f3:f9:ef:a9:
                    f9:5e:02:9c:24:cb:63:a2:dd:ad:22:38:e8:8e:07:
                    ee:43:d7:ee:98:9a:27:cd:8f:a5:38:2f:ac:06:d9:
                    ce:36:27:7b:24:a0:26:07:ab:60:6c:25:d2:3d:b6:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2D:D1:D0:ED:00:DB:D2:7A:F2:2A:2F:6D:AE:34:64:50:41:DD:4D
            X509v3 Authority Key Identifier:
                keyid:1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:34:92:0a:ab:92:eb:5e:03:5e:0d:17:2f:41:de:0e:3f:94:
         a5:ff:a8:fd:a4:af:22:5b:97:6d:20:6c:ef:41:4c:f1:24:55:
         64:4c:78:0c:40:0e:06:41:e6:ff:db:94:07:18:93:d8:17:87:
         21:4f:39:6c:ab:c1:3c:2b:5f:69:9c:2a:f3:78:5c:fc:32:02:
         99:3c:61:2f:96:c8:47:43:45:e3:b3:ce:d1:5f:64:6a:5b:80:
         45:ef:8c:ef:0d:a8:ac:c9:cd:46:8e:fc:4c:bb:20:3e:5b:59:
         1b:a5:39:ae:36:64:8c:f3:21:7a:23:1d:d1:70:5a:0c:13:72:
         04:25:fb:db:b5:46:ed:cb:dd:76:86:92:38:31:f6:a6:25:95:
         dd:e6:6a:b3:98:3b:a9:87:83:e9:06:cc:48:61:99:ca:a5:82:
         e2:31:5b:c1:38:da:92:88:8a:d5:95:ef:47:12:67:ac:e3:34:
         6d:69:f0:2b:5a:3c:a3:1c:da:8a:34:cc:c0:3d:4d:41:b1:a2:
         e7:38:5f:cd:a0:76:69:18:1c:79:d7:28:3f:e9:66:10:7f:d7:
         7d:b2:64:ad:6e:26:ac:d4:e7:a1:94:17:36:04:d2:3e:5b:75:
         33:ec:1f:98:4c:e8:33:5c:2d:3e:01:f1:cb:32:6a:64:87:df:
         82:e6:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:56 2025 by rpki-client