Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
File:                     gyhvptp9JS54KPhJI_VZGRQrAH8.mft (raw, json)
Hash identifier:          iK8MUUbte8Esf3zksozDHHBqPpNMogsys8jaJFemh7Y=
Subject key identifier:   AD:83:4F:B8:73:4C:63:EB:27:52:2C:75:C9:D3:24:39:AA:80:45:7B
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Certificate issuer:       /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial:       01984C665EEE2B506F23151C09F23364C7C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
Manifest number:          1605
Signing time:             Sun 27 Jul 2025 15:00:34 +0000
Manifest this update:     Sun 27 Jul 2025 15:00:34 +0000
Manifest next update:     Mon 28 Jul 2025 15:00:34 +0000
Files and hashes:         1: 2Fa9I4eMPzfo939SHVylXbzPrz8.roa (hash: nGUhV51P4Xt7y4WWujwqar1e4qSQSqC/VceFTeZqU6Y=)
                          2: eXq8qqCVTUpurhrwMS76Ftfg2Xw.roa (hash: BYkfcjQqotFe4I9Ab8fvUQ8zQzC2L9Hl2RpFT9l1Q4M=)
                          3: gyhvptp9JS54KPhJI_VZGRQrAH8.crl (hash: X1AzvoTaAhiubjy4CCVfhktrygQSt5/ORAInb7nOOmo=)
                          4: zbHf3SPKUQqKlSY2p0HB9p9XL90.roa (hash: csBeTbNKWq57qRnNo/tNdPyrIrtIdDZKmu8r42Yia8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4c:66:5e:ee:2b:50:6f:23:15:1c:09:f2:33:64:c7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
        Validity
            Not Before: Jul 27 15:00:34 2025 GMT
            Not After : Jul 28 15:00:34 2025 GMT
        Subject: CN=ad834fb8734c63eb27522c75c9d32439aa80457b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:66:ec:d4:c8:ff:03:fc:69:da:c1:0a:6a:
                    e7:79:c9:aa:34:b9:31:9b:c6:a9:bf:d5:e2:e4:d6:
                    7e:85:3c:8d:6c:0b:e3:30:02:43:9a:b5:b3:07:4c:
                    e3:6e:de:a7:33:5d:9c:d4:41:49:0d:eb:67:34:03:
                    4c:8c:61:2d:8d:98:5d:67:8c:ac:2a:55:ae:14:e7:
                    d7:a2:bf:00:27:32:57:de:26:a1:98:05:c5:75:3c:
                    4c:38:ba:73:01:7b:ec:70:59:51:6f:92:2f:fd:df:
                    6a:ba:44:2e:9e:fd:b6:d9:d0:94:0e:12:7f:ce:68:
                    33:25:7d:6f:f9:ee:89:9e:23:77:f2:69:65:cb:4e:
                    48:84:15:1a:6f:c8:bc:60:73:44:22:be:eb:ca:8d:
                    c3:3c:c7:a1:c8:50:41:ef:3a:be:01:d1:a2:3a:ed:
                    50:14:fa:c0:e5:ba:e0:c4:af:cd:88:e3:7e:e1:f6:
                    79:de:a0:47:4e:ba:28:42:35:14:2c:b6:fe:ab:f3:
                    5c:d2:87:7c:e9:6a:17:ca:5a:a6:66:ce:e9:e1:f5:
                    ae:06:6b:c7:29:59:1b:fb:71:71:a9:5a:a3:6f:cd:
                    09:37:fc:5e:18:46:a2:2e:c9:d1:cf:4c:f2:53:99:
                    f3:09:7d:5c:59:66:f3:3d:8c:c8:49:76:b6:55:62:
                    cb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:83:4F:B8:73:4C:63:EB:27:52:2C:75:C9:D3:24:39:AA:80:45:7B
            X509v3 Authority Key Identifier:
                keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:63:2c:f4:14:0d:d1:03:e1:c4:ff:fa:f6:9c:67:d3:29:55:
         77:c2:53:8c:ab:62:f5:cb:16:dc:25:79:e4:00:3f:41:8f:00:
         9a:9b:27:98:7e:86:68:94:85:a1:45:b9:ed:f6:9b:4c:d8:ae:
         10:50:03:09:b2:7a:72:29:46:7a:e8:9d:2c:55:43:3a:eb:92:
         e6:21:0b:79:01:c9:73:16:b9:ca:1b:4e:cf:ab:87:8f:31:87:
         08:fb:20:e3:fb:59:b0:62:16:ff:1c:ae:81:a7:d3:68:ad:1d:
         fd:a5:8a:49:d6:82:7c:d6:11:da:0c:be:f6:b9:16:d5:65:d7:
         28:dd:77:26:9d:e4:18:0c:fd:39:f9:46:7b:b3:5a:ed:34:dc:
         6c:ca:2d:bb:89:c8:4d:e3:8a:07:f2:4a:36:58:c8:a4:63:e5:
         0a:3c:84:4a:5e:eb:f3:fd:13:3f:c8:9a:b8:32:98:b7:7b:ec:
         de:8f:91:f6:f3:1f:fa:6a:74:91:94:7e:4e:05:3e:4c:d7:69:
         35:30:12:52:48:2e:96:d5:72:bd:2e:4a:00:1b:f6:07:e1:e9:
         69:5c:84:0b:49:e0:1b:05:28:c1:02:e8:f9:0c:a9:18:19:21:
         ee:22:79:64:3d:dc:79:40:ce:f2:2a:2c:a1:04:72:f3:31:5c:
         81:03:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:58:01 2025 by rpki-client