Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File:                     GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier:          15mSE0xnGrSCTb2OqUX6eztbvwEPiL45lgxiHKqGpko=
Subject key identifier:   8E:74:33:A6:68:43:EB:DD:AD:BC:32:0C:D6:5A:E6:8F:98:F2:CA:7D
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer:       /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial:       0197654D1BBF6991891EA6F8F550D105C3E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number:          0A40
Signing time:             Thu 12 Jun 2025 18:00:41 +0000
Manifest this update:     Thu 12 Jun 2025 18:00:41 +0000
Manifest next update:     Fri 13 Jun 2025 18:00:41 +0000
Files and hashes:         1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
                          2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: nZY3nw6J+b5IATRvN0Ex5ClkzVDQOwHD99UcLnicjmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:4d:1b:bf:69:91:89:1e:a6:f8:f5:50:d1:05:c3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
        Validity
            Not Before: Jun 12 18:00:41 2025 GMT
            Not After : Jun 13 18:00:41 2025 GMT
        Subject: CN=8e7433a66843ebddadbc320cd65ae68f98f2ca7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f2:56:2b:95:b8:3a:c1:e3:6f:58:c4:ab:79:
                    a4:28:55:a4:b3:50:9c:e5:e3:88:54:1a:e9:f1:fe:
                    98:34:d7:7c:ed:0c:c8:04:60:df:50:be:e7:e2:51:
                    97:42:67:9a:ca:22:ed:1d:4f:92:a5:03:3f:cb:ee:
                    59:bd:4c:fd:b4:9d:1f:09:6e:79:b6:86:9d:c6:4f:
                    17:dd:fb:34:16:2f:3c:17:4f:4e:91:ad:46:47:96:
                    24:cd:78:a1:71:8b:7e:65:30:b8:00:dd:6b:81:02:
                    46:84:b3:df:07:58:82:2b:ac:22:9a:84:c6:4d:b2:
                    3f:f2:4d:c1:27:3b:f7:50:45:02:9f:05:24:4e:7f:
                    bd:cf:69:b9:d8:16:0a:cd:72:76:f3:39:5b:d9:29:
                    15:26:24:ac:31:69:76:bd:6d:3b:27:4c:99:db:98:
                    32:17:c7:38:a7:16:43:fa:fa:0d:b7:1e:40:f7:dd:
                    2c:41:a6:70:d9:20:c9:cd:75:7f:6d:2a:88:fc:8f:
                    b7:ce:f4:06:4e:f9:a3:70:19:84:32:ae:63:2c:79:
                    8a:e3:b7:17:07:f1:44:89:c5:5b:3e:3f:bd:d6:f2:
                    d2:8a:3b:92:c1:07:22:de:06:7a:29:3f:11:7e:b4:
                    27:12:ec:70:19:b9:66:1d:a3:56:57:92:92:aa:df:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:74:33:A6:68:43:EB:DD:AD:BC:32:0C:D6:5A:E6:8F:98:F2:CA:7D
            X509v3 Authority Key Identifier:
                keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:70:bf:d3:2b:d6:bf:8c:fc:bb:9b:65:ca:22:b0:0c:4f:
         ae:8d:d8:59:44:08:72:1f:01:38:37:9d:1a:93:7d:08:ba:af:
         6d:aa:4c:bd:b6:65:d4:56:aa:90:24:7b:31:6c:f2:b2:73:a3:
         23:0b:d6:32:af:79:ac:ca:7d:a4:b9:80:0d:46:d0:4d:93:fe:
         94:7a:84:dd:15:84:b1:d6:39:a7:6f:a2:3d:69:1a:2b:63:dd:
         c8:a8:98:25:3a:6c:a9:12:3c:b5:4e:1e:b4:19:d0:30:20:94:
         f5:dd:1e:24:ac:98:6f:4f:80:99:18:9c:06:02:e1:a0:81:c8:
         98:0a:de:58:4a:55:41:a8:14:56:4a:96:58:13:18:a9:b0:69:
         7b:13:7f:60:04:e3:d5:6c:bb:66:8c:c5:3e:77:d1:47:b2:15:
         9e:5c:67:3f:20:fd:97:29:db:91:7f:59:dc:1c:dc:1a:37:9f:
         c5:0d:15:39:f4:9f:80:48:4b:6a:87:d1:2f:92:81:90:3f:7c:
         69:87:d2:75:c3:56:e9:60:55:80:02:53:e4:42:50:d5:25:f3:
         a0:8e:0e:cf:2c:5c:73:9b:0b:b5:f1:e0:12:ee:df:33:64:c0:
         a7:e8:d8:6f:1e:ad:a2:c9:22:71:fa:6d:3c:ac:f8:9d:52:a3:
         0a:89:fc:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdlTRu/aZGJHqb49VDRBcPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YzFhYzY4ODJkZTA4OTMwNjBmODA5MTdkN2I4NThjNWMz
MGYwNjEwHhcNMjUwNjEyMTgwMDQxWhcNMjUwNjEzMTgwMDQxWjAzMTEwLwYDVQQD
Eyg4ZTc0MzNhNjY4NDNlYmRkYWRiYzMyMGNkNjVhZTY4Zjk4ZjJjYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/JWK5W4OsHjb1jEq3mkKFWks1Cc
5eOIVBrp8f6YNNd87QzIBGDfUL7n4lGXQmeayiLtHU+SpQM/y+5ZvUz9tJ0fCW55
toadxk8X3fs0Fi88F09Oka1GR5YkzXihcYt+ZTC4AN1rgQJGhLPfB1iCK6wimoTG
TbI/8k3BJzv3UEUCnwUkTn+9z2m52BYKzXJ28zlb2SkVJiSsMWl2vW07J0yZ25gy
F8c4pxZD+voNtx5A990sQaZw2SDJzXV/bSqI/I+3zvQGTvmjcBmEMq5jLHmK47cX
B/FEicVbPj+91vLSijuSwQci3gZ6KT8RfrQnEuxwGblmHaNWV5KSqt8pmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI50M6ZoQ+vdrbwyDNZa5o+Y8sp9MB8GA1UdIwQY
MBaAFBjBrGiC3giTBg+AkX17hYxcMPBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYt
ZThkZTA1OTI3OGJkLzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYtZThkZTA1OTI3OGJk
LzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIpwv9Mr
1r+M/LubZcoisAxPro3YWUQIch8BODedGpN9CLqvbapMvbZl1FaqkCR7MWzysnOj
IwvWMq95rMp9pLmADUbQTZP+lHqE3RWEsdY5p2+iPWkaK2PdyKiYJTpsqRI8tU4e
tBnQMCCU9d0eJKyYb0+AmRicBgLhoIHImAreWEpVQagUVkqWWBMYqbBpexN/YATj
1Wy7ZozFPnfRR7IVnlxnPyD9lynbkX9Z3BzcGjefxQ0VOfSfgEhLaofRL5KBkD98
aYfSdcNW6WBVgAJT5EJQ1SXzoI4Ozyxcc5sLtfHgEu7fM2TAp+jYbx6toskicfpt
PKz4nVKjCon82w==
-----END CERTIFICATE-----
Generated at Thu Jun 12 20:54:48 2025 by rpki-client