Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File:                     GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier:          be9YoA9NZ+nNfM4Cv6MZkABIOh5/3OUB96cNM/b26e4=
Subject key identifier:   46:0C:66:5C:E4:15:0A:C2:07:F6:A6:72:CA:38:4F:63:7B:A1:6A:1E
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer:       /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial:       01984099841BFB41883F7433C9FB6B35EC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number:          15FA
Signing time:             Fri 25 Jul 2025 08:00:59 +0000
Manifest this update:     Fri 25 Jul 2025 08:00:59 +0000
Manifest next update:     Sat 26 Jul 2025 08:00:59 +0000
Files and hashes:         1: BegdDrTAjfq3QF_xE0SFA-JsmmY.roa (hash: UdhM2lVwgozCDdJmvHRy0hTuIS1j9lD7X7Mun/eqHgw=)
                          2: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: x8gi/GuZjAtQ/sdvpAG+ZQwLcBma27sNveas8ZSNubg=)
                          3: Q-JTW2pMbNHJuQzQ3GB1MFwgWco.roa (hash: Lazq6w2zk0BI/gQTS7LpUxVn4e7nb0oKSy4DjZT1z9U=)
                          4: czVnbZc92doWqy2gBGIdv1iBjnw.roa (hash: FGIHMIe1fM4M87IQciBzvSamGa61S/MPL+xAE/AMTyI=)
                          5: h31D8UJNE_u1sTKbKP1SFsGVcFY.roa (hash: kwansroYJJGhl0jfhBp7y2GRUoE1YU2JrM6J/UDWiVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:99:84:1b:fb:41:88:3f:74:33:c9:fb:6b:35:ec:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
        Validity
            Not Before: Jul 25 08:00:59 2025 GMT
            Not After : Jul 26 08:00:59 2025 GMT
        Subject: CN=460c665ce4150ac207f6a672ca384f637ba16a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:65:c2:c6:bd:69:31:da:39:c5:60:fb:12:
                    69:91:7d:53:9c:2d:a6:c9:df:bb:c9:59:e6:a0:9f:
                    44:d6:14:82:f5:4a:2e:7e:80:3a:dc:ce:42:aa:a9:
                    e5:f9:5d:f4:21:fc:cb:95:02:3e:f0:68:a1:26:6f:
                    95:90:c4:49:19:67:8f:d4:a7:86:f9:f0:61:9b:c7:
                    d9:43:49:b9:5c:08:ab:3e:81:a0:68:e2:dd:dd:6d:
                    ef:16:8c:d1:84:54:84:f3:b1:65:46:4a:19:65:39:
                    3a:7b:38:02:74:a7:29:e4:d5:85:ff:51:72:01:14:
                    ef:58:e4:74:53:c3:7c:75:13:60:15:b7:46:77:5d:
                    6c:6a:3c:60:77:96:ea:68:72:e6:07:13:72:3a:1e:
                    58:0a:bf:f8:7b:07:06:d6:41:f6:ab:64:0c:2e:18:
                    59:e3:b9:74:45:82:a3:49:ad:0c:63:2f:e9:04:57:
                    3c:b1:32:0f:ff:00:27:5c:9a:a9:c2:9e:9e:85:4f:
                    f8:00:d6:6c:00:6c:81:b5:8b:bd:e5:10:3d:ff:a1:
                    f9:04:14:b7:e7:c2:6d:14:27:d3:6e:02:f3:c9:60:
                    fe:0c:5a:45:0f:b7:89:3c:ea:b9:7f:8f:7b:f6:06:
                    22:e5:69:bf:30:80:f4:5d:cf:be:16:36:ca:ef:21:
                    cd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0C:66:5C:E4:15:0A:C2:07:F6:A6:72:CA:38:4F:63:7B:A1:6A:1E
            X509v3 Authority Key Identifier:
                keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:f7:21:40:81:5e:a5:37:15:69:1b:db:65:2f:b8:c4:37:
         2f:97:be:a7:63:a9:03:ec:b7:ed:ae:b2:da:0d:aa:7f:f3:53:
         c5:25:bc:ed:d0:91:92:e5:09:f0:a7:88:6b:3e:93:80:70:f9:
         90:cf:0c:42:48:1c:b4:bd:8e:21:b6:82:47:33:3a:fd:b6:7e:
         49:d8:15:b7:60:7b:36:fd:8d:32:2a:27:73:11:40:c4:fc:08:
         89:09:88:87:a5:80:34:17:a4:7a:91:16:99:6b:44:d0:11:01:
         c9:8b:e5:cc:75:03:96:7f:fe:ee:ad:e2:8d:cb:1f:59:6f:48:
         cd:8b:d9:a3:dd:bb:a3:61:50:f7:ea:54:80:56:46:0e:35:84:
         10:82:8c:f7:f1:3f:aa:0c:33:c9:60:cd:60:c3:d0:cd:07:ac:
         41:d9:2e:20:12:73:86:f4:7a:b2:41:8d:df:56:7c:d9:b2:bf:
         db:eb:3a:8b:39:60:6a:6f:aa:98:cc:4f:f1:aa:11:14:c6:83:
         fb:d9:5a:68:79:03:e2:5e:57:b0:c1:09:5c:ab:85:45:fc:fd:
         eb:2c:50:97:3a:a9:51:08:42:8d:28:ec:1b:bf:42:3c:47:18:
         78:0c:cb:5a:65:92:9d:47:c9:b8:5d:bf:46:f0:4b:b0:61:3f:
         be:b5:1c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:00:22 2025 by rpki-client