Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File:                     gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier:          nAdTsgtwr6l8icpYfqqpudHIAodAQdsiylFGyayDV/A=
Subject key identifier:   DA:84:BA:05:CF:73:42:9C:80:A0:D8:7A:61:13:77:01:DE:82:B4:E8
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer:       /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial:       01984966196DBABF90E99AF94708D029A484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number:          0CE7
Signing time:             Sun 27 Jul 2025 01:01:24 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:24 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:24 +0000
Files and hashes:         1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=)
                          2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: wT1MLCsbYpD3XjLZPPuw/ODREbo33n5z98Nrn2nPUu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:19:6d:ba:bf:90:e9:9a:f9:47:08:d0:29:a4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
        Validity
            Not Before: Jul 27 01:01:24 2025 GMT
            Not After : Jul 28 01:01:24 2025 GMT
        Subject: CN=da84ba05cf73429c80a0d87a61137701de82b4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b9:43:8f:8b:37:c9:57:a0:4a:a9:0e:1c:97:
                    0e:02:df:13:63:ed:f2:08:b6:ec:b0:d0:66:f7:96:
                    fe:ad:be:64:dd:41:15:38:4f:32:3e:ba:f8:b9:03:
                    91:45:92:ca:e5:d8:66:70:ab:ca:b7:91:db:93:e1:
                    11:12:47:c9:80:89:f7:56:32:7f:3a:c6:e2:8f:b9:
                    b7:a3:cf:1a:ed:02:ae:70:a5:fb:f3:a1:19:b4:72:
                    19:a1:86:8f:02:13:44:6f:c2:da:c5:a4:d9:68:f4:
                    3a:5a:38:3d:13:bb:b4:db:d3:63:a1:a4:07:cb:05:
                    b5:4d:e5:b2:24:58:1e:eb:2c:be:88:fe:df:1a:99:
                    3e:b1:bb:88:1d:a1:3b:5c:44:72:59:f2:cd:8a:1b:
                    cb:4f:33:3a:fc:55:e3:c8:e5:6d:dc:b1:06:9d:cc:
                    b9:97:ed:da:ba:cc:cc:41:25:0a:83:65:aa:5c:61:
                    81:f2:3e:7a:c8:26:37:25:08:9d:21:b7:37:9d:58:
                    2e:72:51:be:18:f7:e8:b5:b9:e2:f2:48:04:fb:5a:
                    7e:83:49:e9:1a:bf:11:60:5b:6e:94:dc:3f:19:dc:
                    62:e9:0f:64:9a:a2:a2:f6:55:7f:01:cb:b8:1f:e3:
                    aa:84:3e:0e:41:4c:ce:b5:b9:8b:51:df:41:c8:31:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:84:BA:05:CF:73:42:9C:80:A0:D8:7A:61:13:77:01:DE:82:B4:E8
            X509v3 Authority Key Identifier:
                keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9a:3b:aa:15:a6:50:60:ab:b3:84:e2:4f:48:9d:2e:9a:df:
         52:87:ef:65:ee:06:51:5b:3f:c7:08:4c:91:10:22:e6:32:08:
         7f:89:f4:53:ea:e2:ce:db:c8:fb:1b:d2:17:25:29:7d:54:77:
         39:70:5b:68:53:04:00:fe:96:7d:a4:c6:79:e8:f7:c9:dd:c3:
         d7:ed:ee:3a:6d:a6:aa:4f:84:b2:eb:b3:f8:98:5b:94:1a:0b:
         98:1d:c5:2b:4c:6b:7a:fd:28:c2:bd:38:ea:74:8d:ca:28:63:
         30:68:6c:d2:24:99:dd:26:50:74:2b:9f:b9:17:04:9f:93:f1:
         5b:f4:ff:78:d0:2e:87:b7:5e:89:e2:7c:5e:8e:1e:ec:f6:85:
         70:6a:89:e1:2e:66:7c:d2:eb:53:a9:db:ce:79:ad:a4:ba:10:
         cd:ff:11:a8:2a:61:25:3e:21:b7:52:4b:38:02:6a:96:f8:a3:
         a4:5e:93:f5:76:18:3c:cd:c3:8f:72:ac:f5:6c:e4:5b:34:21:
         92:33:34:f7:6e:a4:1c:ed:05:ba:b6:6b:d6:0f:f5:bd:28:a9:
         e4:d5:c6:98:27:7e:0e:7f:17:55:4f:e7:d6:7e:7b:64:e2:4d:
         6f:7f:22:1d:63:35:c1:bb:65:2e:9a:2a:57:79:a1:9b:77:8c:
         63:2f:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:03 2025 by rpki-client