Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
File:                     GR7jr4IFY0lGR1UaUgbvDEXPlck.mft (raw, json)
Hash identifier:          R9UqY3IkXbkITmAh4Xx41yW9a2lYO+NUakxLwHjQs3o=
Subject key identifier:   D1:AE:6F:C0:C1:EF:C1:FE:9F:6B:A1:23:B6:20:E2:6A:92:42:88:9C
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Certificate issuer:       /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial:       01984CD45C6132DBC155C3083C4FF740D51D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 17:00:42 +0000
Manifest this update:     Sun 27 Jul 2025 17:00:42 +0000
Manifest next update:     Mon 28 Jul 2025 17:00:42 +0000
Files and hashes:         1: BEsMLWTZET1iCxcF6Yr9DbU-sOY.roa (hash: lrX59TnlMsRdeVpivsyzgLMhZv4xei7A/LZNbKN1beE=)
                          2: GR7jr4IFY0lGR1UaUgbvDEXPlck.crl (hash: 9T/cw9HfcTC4DRTQiiyK/d554vRNZII+0159mLjsh7c=)
                          3: Ntv9RDyDnipoS4LeMeLEjPH2YeE.roa (hash: IEPnmuJHaBFNEPjVzbbu0LZ28Z15YinFb5L8V+9myGI=)
                          4: tSQQLL0kf6kwJJyAahpRS-4QjTQ.roa (hash: ROWhC0CwWY3GF+PkYJD3Eyf1AgXDuZrPy+fBil3clUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4c:d4:5c:61:32:db:c1:55:c3:08:3c:4f:f7:40:d5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
        Validity
            Not Before: Jul 27 17:00:42 2025 GMT
            Not After : Jul 28 17:00:42 2025 GMT
        Subject: CN=d1ae6fc0c1efc1fe9f6ba123b620e26a9242889c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:fa:52:79:99:b0:b4:84:fb:3a:3a:23:b3:
                    98:c8:c8:14:6a:5f:8e:78:33:72:34:fd:74:cf:8f:
                    d9:02:52:79:28:65:54:7f:9c:f1:c8:4a:45:18:52:
                    80:00:9c:54:82:ec:a5:fe:72:d5:49:15:42:40:d7:
                    7c:34:60:98:3b:22:b0:45:a1:e1:0e:61:e1:38:be:
                    d5:05:72:e6:78:c4:3e:8e:22:e6:e6:b2:11:1f:ea:
                    ac:ef:bf:4d:44:ef:d1:25:e3:f6:61:62:2b:c3:46:
                    21:a6:32:1a:96:8e:92:52:63:66:25:f1:4d:18:40:
                    77:42:76:6d:f6:9d:52:65:2c:21:4f:06:77:bb:48:
                    4e:35:3d:ab:7a:f6:a6:c3:9b:ad:1d:6e:cb:64:fc:
                    04:b2:03:b5:4c:93:e2:ce:bd:0e:2d:8e:f1:08:54:
                    da:d4:f2:3d:1e:59:95:74:dc:9f:b6:9c:f6:72:a3:
                    b8:7b:d6:c9:b8:eb:ff:f9:3c:e2:67:ff:04:50:c1:
                    05:9b:d2:31:8a:88:0f:89:bb:82:e1:bf:2e:3b:30:
                    57:29:2f:9c:93:ab:f4:26:80:15:f0:87:b3:e2:48:
                    06:30:3f:6e:93:8e:43:65:dd:a9:85:b4:1f:ef:83:
                    8a:05:44:13:49:2d:64:6f:c5:1b:3a:c0:3d:7e:5c:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AE:6F:C0:C1:EF:C1:FE:9F:6B:A1:23:B6:20:E2:6A:92:42:88:9C
            X509v3 Authority Key Identifier:
                keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:23:f0:ca:63:70:cf:ee:e9:1f:14:cf:ca:85:e5:37:b8:8b:
         1e:10:71:01:83:1b:13:8a:aa:05:e0:15:8a:4a:24:97:54:19:
         cb:c2:81:40:9e:6a:5a:68:8f:19:f2:e2:25:03:98:33:c9:50:
         65:53:eb:8b:a9:23:f5:44:fd:98:4e:3f:f6:57:1e:3b:1d:23:
         af:fb:e5:bf:7d:86:74:78:be:f6:48:39:ca:6b:91:57:e2:d9:
         96:7d:8d:77:30:25:b1:28:39:07:ab:2c:d2:c9:f6:45:fe:54:
         96:6b:ae:5c:99:93:3c:17:0c:a7:cb:91:c9:39:04:1a:0b:82:
         51:9c:83:8f:90:04:29:2a:ae:df:49:c4:ed:62:c0:94:eb:e1:
         95:5a:bc:53:b7:78:9d:50:9a:87:7b:3e:38:a4:3b:c2:7d:6f:
         ce:56:e7:b0:86:84:d4:81:3d:80:59:23:1d:d6:32:e3:fd:d4:
         a4:d4:6f:7a:b4:ee:6b:1d:e4:a5:2a:b7:fc:77:42:2e:9c:cb:
         5d:66:03:18:4f:37:83:50:bb:e5:89:16:e2:f4:60:01:9b:8c:
         c9:5d:ae:25:5d:02:a8:8c:21:2f:88:0a:75:ca:e5:f4:eb:25:
         94:54:da:85:91:c7:b1:ed:87:93:84:31:51:e2:e3:67:7c:8a:
         d2:d5:b8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 22:49:01 2025 by rpki-client