Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
File:                     GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json)
Hash identifier:          D4cR2fAUdgD2EvTwGowRA+Y95WL5T2k8esgvNP4I2JI=
Subject key identifier:   1F:E6:A6:39:68:F7:9B:94:6A:43:23:F0:A6:15:CF:00:5A:86:89:76
Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
Certificate issuer:       /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Certificate serial:       0197D9636FACE168DACBDD932DE11D2FCEFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
Manifest number:          04A6
Signing time:             Sat 05 Jul 2025 07:01:01 +0000
Manifest this update:     Sat 05 Jul 2025 07:01:01 +0000
Manifest next update:     Sun 06 Jul 2025 07:01:01 +0000
Files and hashes:         1: E9TifD1sfMQN679LyLG0hiwKeX4.roa (hash: 7SvhO02KqCz55FUneR+KgndNdPdJd/1FqEb2wmvkStA=)
                          2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: 0sJF23vCdHco/AWnlPCFFQA5Uyb8nvUwS4vNE9UvuVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d9:63:6f:ac:e1:68:da:cb:dd:93:2d:e1:1d:2f:ce:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
        Validity
            Not Before: Jul  5 07:01:01 2025 GMT
            Not After : Jul  6 07:01:01 2025 GMT
        Subject: CN=1fe6a63968f79b946a4323f0a615cf005a868976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:57:26:e1:43:a2:d4:0f:56:c4:52:82:0a:
                    91:c4:4f:58:c4:4c:fc:f8:19:28:fc:53:ad:49:f7:
                    ae:7e:b2:5b:c0:9d:3d:14:23:4c:7f:a2:5e:72:ca:
                    d2:d2:30:c2:f7:8e:bd:c4:87:73:b6:76:d3:a9:79:
                    8b:8f:85:ce:05:da:bb:96:97:22:aa:8f:eb:e2:95:
                    20:ab:d9:c5:76:f0:7d:05:1e:20:c8:66:cb:58:53:
                    e5:59:4c:c5:a7:8a:6a:f4:8d:16:f1:f6:f8:f2:c9:
                    c5:cb:18:64:8b:39:1b:16:4a:e3:45:f4:de:7b:f1:
                    c9:52:08:f4:37:d2:89:5b:11:e6:0a:b2:33:f2:3a:
                    a7:47:79:8e:04:c1:43:35:76:37:e5:9c:47:a2:fb:
                    cc:54:55:33:ab:66:dd:e9:d8:35:0c:86:36:bd:43:
                    5a:0f:cc:db:78:ce:70:ee:c0:91:8a:02:1a:b4:df:
                    8b:de:2d:13:f3:2d:7a:df:3d:e8:b2:bb:a6:64:c0:
                    76:b7:df:39:3a:7d:8f:eb:49:b8:47:37:9a:8a:72:
                    1e:45:15:ca:fd:4a:42:e5:7f:05:15:04:9a:8e:28:
                    6c:b1:ef:ad:ce:7f:16:26:65:29:dc:f1:e6:2c:96:
                    31:f8:7b:d2:03:bd:eb:ad:4c:93:cf:ce:cf:00:72:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E6:A6:39:68:F7:9B:94:6A:43:23:F0:A6:15:CF:00:5A:86:89:76
            X509v3 Authority Key Identifier:
                keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:02:7c:d7:2c:85:09:b0:81:15:3f:8d:d6:04:36:7d:4b:65:
         28:70:74:fa:79:e4:25:a3:30:de:72:d2:f9:d5:52:a4:98:5f:
         d7:be:d6:81:9e:d3:3d:21:20:1c:da:a9:d2:31:38:62:b5:bd:
         49:82:42:e5:fb:5b:ec:d0:82:4e:b1:a0:bc:eb:9e:a2:ef:70:
         84:ee:be:44:65:f8:ef:bc:fd:e3:d1:1f:f4:bc:f8:f5:f8:2a:
         27:78:9b:09:5c:e1:81:d1:4b:46:56:e7:0a:27:b5:e4:be:7b:
         77:ea:5a:71:3c:d6:fb:d7:7a:60:c9:24:28:02:89:74:14:c2:
         e1:f4:d0:69:05:e0:dd:89:2c:21:e4:13:53:c8:d5:7d:0f:4e:
         d7:3a:0c:42:dd:1b:0e:53:1b:fb:b9:3e:17:79:2b:01:31:32:
         a5:f1:ee:ef:5b:67:83:d2:02:0f:4f:63:d0:9e:11:f0:86:16:
         2f:35:7c:29:f0:a6:20:b3:2c:21:56:cf:c4:ed:66:99:06:51:
         ce:6f:17:19:64:d3:a9:7f:62:a9:d1:e1:05:9c:ad:41:be:7c:
         96:7b:85:3a:fd:81:70:a0:d2:cc:55:72:a7:60:aa:64:4e:80:
         56:cc:a4:f6:bb:16:66:b9:9d:50:a2:37:a7:88:10:fd:e8:5d:
         41:b3:44:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfZY2+s4Wjay92TLeEdL87+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjBhZTY2NmE2ODJiNDI0ZjZjOTk0YWIyZTAxNGRjM2M2
NGZiY2YwHhcNMjUwNzA1MDcwMTAxWhcNMjUwNzA2MDcwMTAxWjAzMTEwLwYDVQQD
EygxZmU2YTYzOTY4Zjc5Yjk0NmE0MzIzZjBhNjE1Y2YwMDVhODY4OTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxydXJuFDotQPVsRSggqRxE9YxEz8
+Bko/FOtSfeufrJbwJ09FCNMf6JecsrS0jDC9469xIdztnbTqXmLj4XOBdq7lpci
qo/r4pUgq9nFdvB9BR4gyGbLWFPlWUzFp4pq9I0W8fb48snFyxhkizkbFkrjRfTe
e/HJUgj0N9KJWxHmCrIz8jqnR3mOBMFDNXY35ZxHovvMVFUzq2bd6dg1DIY2vUNa
D8zbeM5w7sCRigIatN+L3i0T8y163z3osrumZMB2t985On2P60m4RzeainIeRRXK
/UpC5X8FFQSajihsse+tzn8WJmUp3PHmLJYx+HvSA73rrUyTz87PAHIdZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/mpjlo95uUakMj8KYVzwBahol2MB8GA1UdIwQY
MBaAFBlgrmZqaCtCT2yZSrLgFNw8ZPvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUt
NTIzZDIwOTI1ZGFkLzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUtNTIzZDIwOTI1ZGFk
LzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQJ81yyF
CbCBFT+N1gQ2fUtlKHB0+nnkJaMw3nLS+dVSpJhf177WgZ7TPSEgHNqp0jE4YrW9
SYJC5ftb7NCCTrGgvOueou9whO6+RGX477z949Ef9Lz49fgqJ3ibCVzhgdFLRlbn
Cie15L57d+pacTzW+9d6YMkkKAKJdBTC4fTQaQXg3YksIeQTU8jVfQ9O1zoMQt0b
DlMb+7k+F3krATEypfHu71tng9ICD09j0J4R8IYWLzV8KfCmILMsIVbPxO1mmQZR
zm8XGWTTqX9iqdHhBZytQb58lnuFOv2BcKDSzFVyp2CqZE6AVsyk9rsWZrmdUKI3
p4gQ/ehdQbNEmA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:20:48 2025 by rpki-client