Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File:                     gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier:          54t/B5/lOMV51p4EQlTY2q/ocB56dQm0zf2t7jHiMZU=
Subject key identifier:   44:6E:05:4C:58:84:C7:81:AC:E8:32:E5:F1:3D:EC:7F:E7:63:9C:B8
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer:       /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial:       0197499F5B5B17884499EC5160C163FB1217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number:          0BF9
Signing time:             Sat 07 Jun 2025 09:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:09 +0000
Files and hashes:         1: 8IUfLut7BygQV_kfUjYxZ6R1hWo.roa (hash: osXEgzEeRLXEDV95MIWOG4REHDOr18vMvAPD5SIJRo8=)
                          2: e906IBwj4MSiW-e8owQAWsQ_4Jo.roa (hash: P83ELX1oAyr6YQ0Ab0RC6iwmwrr6PxLhv5UjiehFQxc=)
                          3: eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa (hash: ytxhtvq1ezR1if4ipOboDxmwy8xQfyDHM3VrrrzA9pU=)
                          4: g2b35-nULZDfmdIQobQp625Nk-I.roa (hash: daDEnydg6U3m1GEZ8hWZT3NDMPEI2dbQkvddvsu4lNo=)
                          5: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: 9SXziKsHmGR8nJcsUGkJXc4LPMNL7E4iNTouFDPXgm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:5b:5b:17:88:44:99:ec:51:60:c1:63:fb:12:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
        Validity
            Not Before: Jun  7 09:01:09 2025 GMT
            Not After : Jun  8 09:01:09 2025 GMT
        Subject: CN=446e054c5884c781ace832e5f13dec7fe7639cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:0b:b0:e1:0d:27:a1:e5:88:5e:34:a8:32:
                    e2:26:c1:f2:8f:0c:3c:82:20:0a:d9:2c:9d:97:16:
                    8e:d7:72:07:78:85:81:0a:c9:59:5b:a6:72:ec:f5:
                    cd:7a:2b:cb:51:57:9f:28:fb:81:6c:3a:95:47:70:
                    e5:a9:1d:de:ad:e6:f2:9c:e5:71:04:8f:44:f2:91:
                    09:6a:fc:42:1b:df:29:06:64:bc:e2:c3:92:1e:0a:
                    f1:c9:bb:dd:19:f1:1b:dd:fe:52:8f:c9:01:9a:af:
                    0a:91:b7:d5:dd:8c:67:b4:c8:b1:d8:a4:be:f0:0e:
                    e6:04:3c:1a:f6:4d:5a:63:20:8d:dd:b7:2c:eb:62:
                    c7:b1:af:eb:25:a7:c5:5d:db:19:c4:01:99:dd:5f:
                    c4:fa:61:f8:e4:ce:17:d5:59:fb:59:c5:da:ff:13:
                    4e:af:91:b8:72:ed:9f:8c:6c:5f:15:94:a5:db:9f:
                    3d:e5:c3:58:11:4f:c8:85:ac:08:68:7a:c0:95:b4:
                    fd:e8:48:29:e4:e4:e8:5c:8f:b7:55:fd:7f:ce:69:
                    be:12:a8:39:3a:31:77:d3:b3:80:01:ef:27:e6:48:
                    0b:09:ba:e2:f0:78:8b:2b:c8:8f:c6:a2:83:56:1f:
                    a1:c4:9c:5c:50:54:99:64:b1:ac:36:80:3c:3f:75:
                    82:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6E:05:4C:58:84:C7:81:AC:E8:32:E5:F1:3D:EC:7F:E7:63:9C:B8
            X509v3 Authority Key Identifier:
                keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e0:23:b3:5d:dc:fe:14:5f:78:dc:0e:3a:ac:53:7e:a5:7f:
         6e:4d:d0:15:0d:90:e3:5e:dc:3c:86:06:85:81:54:af:d7:bb:
         b8:7a:29:4f:33:ad:15:4f:09:6d:6d:1f:c2:bb:f7:4f:74:39:
         4b:a0:34:1a:78:a3:ac:5d:9a:dd:76:e1:d2:d3:a0:97:92:57:
         3a:cd:54:bb:8e:dc:59:68:e3:30:d1:8a:a3:ae:de:96:a1:69:
         de:d8:cb:de:65:74:b8:7a:92:82:05:34:89:ff:00:9c:6d:8d:
         ec:db:e4:16:8a:25:80:a0:f7:84:91:b4:4f:5a:6d:4d:4a:bf:
         f6:8c:4a:4f:ec:e6:fe:53:fc:fc:d9:5d:9e:3e:df:6f:a0:31:
         db:64:9c:3a:24:6b:61:7b:49:dc:8c:9a:c7:67:64:a5:9a:36:
         61:51:96:c1:c3:49:c6:7e:f0:05:0a:b0:d4:a3:0d:77:f8:45:
         57:98:ab:fd:79:da:45:82:56:31:73:90:8e:c6:35:3c:7d:f7:
         e8:a9:f8:ea:59:26:e6:93:6f:5d:c0:7a:50:d2:e1:f9:3b:a0:
         3c:e8:57:9f:4a:50:06:24:d8:b8:a8:ff:11:0c:25:cd:5e:13:
         17:0c:80:d3:33:4d:48:2a:fa:af:11:c9:57:32:06:1e:eb:7f:
         61:68:2c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:03:59 2025 by rpki-client