Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
File:                     gmvh-3GvSNazGFEKqL35qBXzPbg.mft (raw, json)
Hash identifier:          fh3DRJnBHKCS5j8dz+DfBWoCSgjEpnZw01FXKFp6sVU=
Subject key identifier:   F2:30:2E:F2:62:83:12:14:CD:EE:F0:35:04:0A:91:86:73:15:CC:FD
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Certificate issuer:       /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial:       01992C344146EB2DDAFC9DF6C140CA27D414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
Manifest number:          0D58
Signing time:             Tue 09 Sep 2025 02:00:45 +0000
Manifest this update:     Tue 09 Sep 2025 02:00:45 +0000
Manifest next update:     Wed 10 Sep 2025 02:00:45 +0000
Files and hashes:         1: ItDOSAPXP7fGwIUCyAUKyyhkB4Q.roa (hash: OWstEJSZcgCk402ChRTJkXohNTIeEApse64rKCImRuM=)
                          2: ckwFjtT2deecTIv0EBJffOzlHQ8.roa (hash: AfxLwGByDY21vrcsdo3k0yXW342fPqqOEbjPkEKPwyg=)
                          3: gmvh-3GvSNazGFEKqL35qBXzPbg.crl (hash: ZUY9C+PQdLO+g5ho3svfkxYmwRctqOpertTVe2c6+Lc=)
                          4: hSlAxKZnavSBFWLhMLPVbCueXS4.roa (hash: VFJXjLPeI3ZR1WorzKTvxcecT73zNWbWt4fU0UCHVzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:34:41:46:eb:2d:da:fc:9d:f6:c1:40:ca:27:d4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
        Validity
            Not Before: Sep  9 02:00:45 2025 GMT
            Not After : Sep 10 02:00:45 2025 GMT
        Subject: CN=f2302ef262831214cdeef035040a91867315ccfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:1e:54:9b:ba:26:c7:ae:22:23:04:29:86:
                    b3:83:e4:a7:00:ad:c5:ae:be:88:db:7a:ac:da:82:
                    9c:01:ef:45:b6:57:9f:61:2c:24:0b:c1:92:66:80:
                    40:45:1e:58:57:83:4b:ac:20:82:84:af:96:b8:ee:
                    8b:ca:a0:ae:f5:b0:f7:43:a2:72:3f:01:6a:64:bf:
                    c7:3c:12:b7:5a:05:22:f8:c8:38:39:52:9f:5c:94:
                    ee:4a:60:49:41:1d:08:33:5e:3e:7f:e7:ac:b3:5f:
                    37:d7:cc:7e:5b:57:99:26:dc:f7:64:eb:e0:22:04:
                    f8:f6:c5:bd:f1:da:31:fe:1b:72:cc:51:cb:42:f8:
                    70:9d:56:3d:2c:53:27:8b:00:8c:eb:ce:35:08:37:
                    7b:b5:e1:79:fe:1d:79:3a:45:40:1e:fc:d2:46:47:
                    ec:aa:c1:8f:8c:d0:88:a2:7b:2d:ce:de:e9:ef:9a:
                    d4:95:01:ae:12:44:0b:18:42:65:b8:22:25:8d:2a:
                    7e:53:b2:53:79:c1:b3:ef:7b:cb:26:30:fe:25:e3:
                    19:f1:66:01:c0:c9:cd:3e:12:cb:dc:e2:d7:69:9d:
                    71:fc:99:85:86:a5:f1:30:2f:e8:e9:20:4b:c8:62:
                    69:cd:28:46:ed:06:40:64:5e:a4:47:bd:ff:82:89:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:30:2E:F2:62:83:12:14:CD:EE:F0:35:04:0A:91:86:73:15:CC:FD
            X509v3 Authority Key Identifier:
                keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d0:b8:2c:fb:6f:9d:d9:e8:d2:e5:a8:56:b4:d4:7d:95:76:
         81:59:ab:68:e5:f6:e0:a4:a6:be:73:15:20:93:a8:44:cf:19:
         fe:52:70:53:11:2f:26:2a:29:ce:f3:23:2a:58:e6:45:a3:41:
         e4:00:d7:10:10:47:01:95:bc:f2:5a:a5:87:db:9a:34:4b:63:
         51:08:44:2d:8a:b6:9a:b0:af:96:4d:b5:29:1f:b7:4a:04:9f:
         03:65:68:8b:ce:76:50:f5:a4:08:a6:36:a3:da:17:55:5a:c2:
         40:4f:b6:ba:c6:6e:7c:f5:00:5c:ed:27:6c:27:e1:6f:0e:1c:
         41:04:aa:b3:b9:b4:48:df:24:18:2d:dd:f7:f6:61:3d:2e:2b:
         c5:d7:07:e0:e5:05:26:bb:68:bb:16:5f:8f:aa:81:85:fd:ef:
         d8:a2:b2:8f:dd:18:5c:c9:6e:b6:83:88:17:46:9f:7e:6e:27:
         6b:63:4a:7f:a0:85:28:d9:ac:75:6c:5e:c0:94:86:f1:62:13:
         97:cb:6e:49:ec:8d:e1:51:18:96:78:57:3a:dc:bc:29:aa:b8:
         95:ca:fe:65:ae:13:cf:14:63:95:37:82:68:86:d6:b1:c4:3c:
         52:4a:df:e0:25:4e:54:9f:6d:0a:b2:1f:2c:4a:18:02:53:ab:
         d9:13:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 11:37:28 2025 by rpki-client