Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File:                     GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier:          KafObme2+EValng7Heen5eN1hBO8NKiR8mAxHfoU3Z4=
Subject key identifier:   8A:90:38:DA:3F:A1:E5:FF:A7:AF:36:D8:AC:AB:2E:05:C8:7E:03:1C
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer:       /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial:       019848C0DE60AE5D0D592BC3B6FB19394C59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number:          07FE
Signing time:             Sat 26 Jul 2025 22:00:56 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:56 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:56 +0000
Files and hashes:         1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=)
                          2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: M9ZIqKSQLxyNTNi1z7OfyGluTUPY6scquajxXiOMSa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:de:60:ae:5d:0d:59:2b:c3:b6:fb:19:39:4c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
        Validity
            Not Before: Jul 26 22:00:56 2025 GMT
            Not After : Jul 27 22:00:56 2025 GMT
        Subject: CN=8a9038da3fa1e5ffa7af36d8acab2e05c87e031c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:a4:91:80:8e:53:e9:b4:92:7d:28:49:c2:
                    0c:b5:e0:42:d2:df:52:ec:f0:91:4e:25:a8:f1:09:
                    d1:e6:74:7d:b0:d2:1c:76:b8:48:5a:b4:5e:6c:cd:
                    1f:dd:fc:0c:9f:46:b6:3b:bf:29:29:10:28:a1:20:
                    0b:0a:95:79:0d:7d:9a:ce:4e:98:34:5e:34:c2:a0:
                    ac:13:6e:ee:4f:75:74:67:da:dd:82:ad:86:5c:96:
                    d3:9d:6d:07:fc:2e:01:54:a7:83:7c:a2:d0:3b:50:
                    24:c0:e6:b1:cf:4a:58:7b:bb:ba:51:6e:c9:35:ec:
                    4b:ab:8c:f1:fa:f0:66:d4:a4:ed:74:10:e2:cc:1c:
                    0d:bb:dd:7c:fb:f8:bd:d8:f1:c6:75:bf:05:47:8e:
                    30:29:f9:fe:f9:2e:0e:b1:5b:0d:21:d8:e5:0a:a3:
                    8f:2c:d1:71:1c:99:17:7f:43:9d:fd:2c:49:92:9b:
                    8f:39:16:9a:e1:69:5a:38:bb:2f:c9:d7:72:b6:08:
                    61:23:bf:cb:b9:85:25:06:55:06:04:53:04:61:63:
                    fe:00:11:e1:92:af:8b:ce:27:a4:ec:af:b6:2a:52:
                    48:d0:96:4c:28:d1:af:1c:cd:cc:97:86:53:02:b1:
                    0b:44:10:3d:b6:53:58:56:d9:70:a5:08:d8:43:be:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:90:38:DA:3F:A1:E5:FF:A7:AF:36:D8:AC:AB:2E:05:C8:7E:03:1C
            X509v3 Authority Key Identifier:
                keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6c:9f:eb:d8:c3:13:56:18:4f:d6:c9:01:4a:4d:f6:36:5c:
         9b:bd:1d:4f:dd:c8:60:17:3f:fa:50:5b:c6:40:f8:59:59:65:
         be:2a:6b:7e:65:9e:c4:ef:68:ab:4e:32:22:a4:1c:b5:d0:1d:
         03:68:e6:dd:ec:c3:d4:08:13:e8:b1:27:c0:f7:30:73:c4:86:
         88:da:f6:54:c9:63:d3:b9:8f:c6:34:ae:41:ae:03:c5:01:ae:
         14:de:d4:e7:db:67:1e:e7:0e:36:02:60:58:37:6f:ae:70:75:
         a2:0d:f1:02:df:96:59:02:d5:98:5d:07:ae:93:f6:50:47:b2:
         57:11:b7:94:a2:f6:ea:d2:eb:8b:74:55:77:d8:82:84:ea:c5:
         f8:90:53:13:39:d3:3c:56:7a:8a:51:00:2c:69:8c:87:1b:75:
         aa:82:0c:72:b8:b7:23:ff:e1:03:40:5e:0c:c1:bc:81:bb:2b:
         77:d3:30:a9:ca:c2:60:9f:81:5e:c0:f0:7b:6b:58:63:15:2f:
         54:28:03:a3:e3:d5:f7:2f:3b:73:d5:ac:fc:f1:a6:8a:b3:b8:
         e1:59:ad:fe:7b:2d:a8:00:b1:6d:2d:41:09:b5:5c:64:1a:bb:
         e0:96:21:b4:ff:18:0f:a2:f8:42:ba:7f:58:a8:17:09:e7:b1:
         98:1f:72:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwN5grl0NWSvDtvsZOUxZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDk4NDEyYzk4NGI4OWJlMzgwMTFhNzJhM2M0NzE5NzVm
YzQ3YTIwHhcNMjUwNzI2MjIwMDU2WhcNMjUwNzI3MjIwMDU2WjAzMTEwLwYDVQQD
Eyg4YTkwMzhkYTNmYTFlNWZmYTdhZjM2ZDhhY2FiMmUwNWM4N2UwMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRSkkYCOU+m0kn0oScIMteBC0t9S
7PCRTiWo8QnR5nR9sNIcdrhIWrRebM0f3fwMn0a2O78pKRAooSALCpV5DX2azk6Y
NF40wqCsE27uT3V0Z9rdgq2GXJbTnW0H/C4BVKeDfKLQO1AkwOaxz0pYe7u6UW7J
NexLq4zx+vBm1KTtdBDizBwNu918+/i92PHGdb8FR44wKfn++S4OsVsNIdjlCqOP
LNFxHJkXf0Od/SxJkpuPORaa4WlaOLsvyddytghhI7/LuYUlBlUGBFMEYWP+ABHh
kq+Lziek7K+2KlJI0JZMKNGvHM3Ml4ZTArELRBA9tlNYVtlwpQjYQ765YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqQONo/oeX/p6822KyrLgXIfgMcMB8GA1UdIwQY
MBaAFBsJhBLJhLib44ARpyo8Rxl1/EeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYt
NzBkMTMzMDZjZDFjLzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYtNzBkMTMzMDZjZDFj
LzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWyf69jD
E1YYT9bJAUpN9jZcm70dT93IYBc/+lBbxkD4WVllviprfmWexO9oq04yIqQctdAd
A2jm3ezD1AgT6LEnwPcwc8SGiNr2VMlj07mPxjSuQa4DxQGuFN7U59tnHucONgJg
WDdvrnB1og3xAt+WWQLVmF0HrpP2UEeyVxG3lKL26tLri3RVd9iChOrF+JBTEznT
PFZ6ilEALGmMhxt1qoIMcri3I//hA0BeDMG8gbsrd9MwqcrCYJ+BXsDwe2tYYxUv
VCgDo+PV9y87c9Ws/PGmirO44Vmt/nstqACxbS1BCbVcZBq74JYhtP8YD6L4Qrp/
WKgXCeexmB9y+Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:42:33 2025 by rpki-client