Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
File:                     GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json)
Hash identifier:          X5hnKBrzUyoZSe2DTjAxxRIlUCF9xM4V0/0RoJzWZpA=
Subject key identifier:   B4:93:C8:BB:31:3F:BE:1E:A6:57:67:13:93:69:21:13:5F:83:6D:2F
Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
Certificate issuer:       /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Certificate serial:       019923A024111638130C06A46DC1A6DEBE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
Manifest number:          0551
Signing time:             Sun 07 Sep 2025 10:02:01 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:01 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:01 +0000
Files and hashes:         1: E9TifD1sfMQN679LyLG0hiwKeX4.roa (hash: 7SvhO02KqCz55FUneR+KgndNdPdJd/1FqEb2wmvkStA=)
                          2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: 85pbwrvj0GnQAchecLYR8ZdJIEYZ7Qin2xFUEDsgVyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:24:11:16:38:13:0c:06:a4:6d:c1:a6:de:be:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
        Validity
            Not Before: Sep  7 10:02:01 2025 GMT
            Not After : Sep  8 10:02:01 2025 GMT
        Subject: CN=b493c8bb313fbe1ea6576713936921135f836d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:ba:bc:f8:11:c1:67:c2:f8:36:c3:fd:74:
                    ec:7a:d1:4b:14:bf:63:81:04:51:7e:01:34:ea:23:
                    9b:bc:36:3a:53:a5:0a:fd:16:b6:7c:5b:26:06:4a:
                    ce:79:21:af:83:1f:03:68:54:0a:89:6f:2e:e1:ba:
                    ab:a3:39:0e:e3:d6:16:c7:1a:ac:0c:95:e8:7c:19:
                    40:ba:b6:54:46:d9:1c:75:aa:86:bd:0b:13:76:f6:
                    03:2e:b0:b4:d1:d7:0d:31:84:ac:58:2e:53:8f:76:
                    d5:f9:bf:7c:7c:9b:ca:02:1a:7e:06:8d:cb:54:ed:
                    6f:08:4d:dd:90:d7:9c:67:f6:db:24:8a:c3:57:19:
                    14:80:e0:fb:31:03:6f:99:bd:f2:78:33:04:fc:e2:
                    90:4c:62:38:43:db:eb:c3:5e:67:df:27:82:7e:43:
                    3e:e5:2f:5b:0b:a6:03:ad:42:0e:e3:80:45:f4:ed:
                    be:5f:92:28:a4:66:47:0b:97:d0:79:b0:5e:b5:e9:
                    c2:87:ac:f1:ea:9d:86:d1:db:e9:d8:22:23:af:df:
                    8f:f7:a1:ae:c4:2c:b9:eb:d5:1e:df:21:be:b4:87:
                    13:43:12:e0:6f:53:1e:b7:7a:8f:f3:c2:66:47:58:
                    5c:0b:16:93:b3:e0:44:21:eb:7d:a3:70:12:59:a0:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:93:C8:BB:31:3F:BE:1E:A6:57:67:13:93:69:21:13:5F:83:6D:2F
            X509v3 Authority Key Identifier:
                keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:d3:c7:02:ae:e3:ae:77:79:d7:02:90:0e:a1:29:7b:2c:
         2e:be:bc:28:ac:70:76:58:11:f0:ce:5a:6b:22:2a:0a:1f:65:
         04:4f:a5:4b:02:0a:54:f7:8b:8c:62:fe:77:e5:34:75:a9:1c:
         bf:bb:29:5b:0b:44:57:38:58:11:c1:01:61:12:1c:a1:ad:d7:
         3e:78:56:53:28:e5:1d:d5:40:3f:f7:5d:8b:6c:9e:f7:6a:42:
         fc:51:36:d4:d4:4e:f1:db:0a:6c:8d:b2:45:91:f7:a7:a1:7a:
         03:b1:b4:cd:98:71:f6:dc:0a:16:97:cc:f6:aa:e5:ba:18:d5:
         48:15:b5:4f:1e:df:20:85:65:d2:15:df:22:e1:1b:b7:ab:1c:
         ce:e4:04:31:7f:e6:44:51:6f:c6:5f:8b:51:41:f3:49:1b:b2:
         ed:fd:83:81:b2:f3:e3:eb:2b:37:85:51:32:6f:58:e9:8a:03:
         6a:5b:13:bb:61:18:04:d0:7a:62:12:e2:d7:7f:87:1a:7a:2e:
         7f:48:6c:76:ce:f9:1d:ab:2d:ce:77:c6:79:ef:47:1b:93:19:
         e2:8b:ae:56:88:07:f7:47:aa:7d:be:41:5e:c3:f1:84:e1:46:
         e0:d6:90:66:b5:fc:56:86:db:50:c7:fa:89:36:2a:92:98:52:
         38:d1:60:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:28 2025 by rpki-client