Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File:                     gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier:          jAPMYnrB+x2asOpWGlax6jjUupxZj7NWcSK0nuqmGTU=
Subject key identifier:   0A:2E:8D:3F:DB:5C:D6:17:67:E2:18:77:B5:13:B1:A9:54:6D:26:80
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer:       /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial:       01984A09F3CD46D8EFCAA1EA472EBFC68DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number:          089F
Signing time:             Sun 27 Jul 2025 04:00:22 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:22 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:22 +0000
Files and hashes:         1: MVRm2B27-mtawpjQijtz-fTQOKU.roa (hash: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=)
                          2: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: 9AUkb7Q5xWbPsWEUVAsB9AC/jg39J1ZL06BjJVa/MdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:f3:cd:46:d8:ef:ca:a1:ea:47:2e:bf:c6:8d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
        Validity
            Not Before: Jul 27 04:00:22 2025 GMT
            Not After : Jul 28 04:00:22 2025 GMT
        Subject: CN=0a2e8d3fdb5cd61767e21877b513b1a9546d2680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:08:68:b3:f7:4a:0c:73:a6:7f:24:de:a2:
                    d9:33:cc:95:ca:36:5e:95:5a:a5:20:50:df:19:8c:
                    07:6b:98:9b:3a:8d:34:85:2d:df:17:a4:c9:f9:d8:
                    70:13:b8:e6:91:d1:a3:7a:3a:e9:58:1e:16:38:cf:
                    43:7a:4f:86:c5:d8:16:f1:5e:44:c3:65:7d:01:38:
                    5f:17:7c:44:a1:56:8f:f9:93:cf:88:e1:1b:bf:f9:
                    f4:b2:fc:53:35:41:ec:b2:8e:bc:a3:99:0f:65:59:
                    5c:fb:6a:62:6f:5e:c6:6d:79:a7:a4:4b:ce:91:72:
                    b5:18:16:88:1f:38:f4:fb:5b:24:6c:00:cd:92:de:
                    f7:25:ac:e2:40:98:6a:a1:98:3a:d7:0b:c0:16:da:
                    3a:78:ad:ef:44:8a:53:d1:3d:31:44:42:43:dd:ce:
                    31:b7:f8:0d:1c:6c:5a:ce:cb:f9:e4:9e:fc:9b:7b:
                    36:92:8b:e1:5d:83:74:cd:10:e3:f9:ce:68:46:22:
                    a2:ce:dc:a8:aa:51:d6:d8:4a:04:33:0c:b9:46:61:
                    a0:ef:35:8a:c4:ae:20:35:34:3e:76:67:5e:fd:cb:
                    3b:ae:e1:25:6f:df:70:bd:8b:d4:74:b4:71:d9:27:
                    3b:a7:a4:20:64:af:38:2f:ed:b1:2c:87:f3:54:72:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2E:8D:3F:DB:5C:D6:17:67:E2:18:77:B5:13:B1:A9:54:6D:26:80
            X509v3 Authority Key Identifier:
                keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b3:24:f5:e2:69:6f:ce:0b:d5:d0:d2:3e:8d:7a:82:d0:b3:
         c6:a3:41:5f:91:7b:7c:80:1a:cb:a2:6f:77:37:3c:6f:52:32:
         2e:03:fe:a9:fc:9e:e9:fd:11:b9:7a:d8:0e:aa:8d:26:42:64:
         f6:87:7e:f5:7b:1f:f0:93:ff:74:77:db:77:86:ff:f9:ab:06:
         20:fd:db:94:ff:85:95:04:15:a9:90:2c:47:83:f2:da:65:d4:
         28:e2:04:72:a2:b4:af:fb:5f:65:5b:9a:a8:96:1a:18:2c:8c:
         3a:7a:79:b0:c8:19:f1:47:4e:f5:28:64:3a:68:76:33:1c:a0:
         c2:1d:c7:93:e6:05:2e:ef:35:7a:2d:bb:80:b4:ee:58:3f:af:
         9a:64:93:83:98:73:23:62:9a:9a:fa:dd:c8:31:2d:b4:09:ad:
         3b:e9:5f:d1:91:17:2e:4b:79:46:44:4c:99:9b:30:39:70:7d:
         13:0a:5c:90:37:71:05:fb:9e:12:de:6d:f9:3d:2f:63:94:f6:
         27:1a:b5:5d:b7:08:2d:63:13:3b:30:b1:ac:b9:98:47:dc:5d:
         b0:09:84:23:95:da:b7:39:a4:cf:b7:20:a2:47:08:1c:29:85:
         19:a6:1a:55:58:46:00:87:38:32:e1:07:28:51:ee:8d:95:af:
         ea:67:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:38:30 2025 by rpki-client