Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File:                     GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier:          6S08WviwRLC221Wi2VqDwFlWAQ6auQUe6C7evsoMuRk=
Subject key identifier:   4F:E3:3E:B4:F4:33:B1:5A:55:6B:6B:92:D1:57:99:65:38:CE:C4:C4
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer:       /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial:       01992FA30380270156853AA30567A143CD39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number:          0A79
Signing time:             Tue 09 Sep 2025 18:00:36 +0000
Manifest this update:     Tue 09 Sep 2025 18:00:36 +0000
Manifest next update:     Wed 10 Sep 2025 18:00:36 +0000
Files and hashes:         1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: RkgeuvQjNziOoRWhY39E8GOQOWoFPU4+fmK85VK7iHc=)
                          2: huPI6u_LRtdxxCntM6xWi8UILhs.roa (hash: dxaGNUPSqDMCpFu0jmftsWJq4vBwtQVy+FWsjciFptc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:a3:03:80:27:01:56:85:3a:a3:05:67:a1:43:cd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
        Validity
            Not Before: Sep  9 18:00:36 2025 GMT
            Not After : Sep 10 18:00:36 2025 GMT
        Subject: CN=4fe33eb4f433b15a556b6b92d157996538cec4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:c5:c3:d6:06:a2:df:5d:1f:63:21:f1:91:
                    c0:3c:8c:9e:8a:52:fd:b2:e7:e8:2a:84:01:48:1b:
                    59:0e:76:e1:c6:0e:ce:3d:c9:05:42:1e:cd:13:9e:
                    27:f7:fb:53:73:66:23:f5:23:f4:8b:7b:f4:c4:27:
                    b4:0f:70:4b:a8:ec:ec:68:fa:ed:03:8d:f1:97:f4:
                    1f:ec:2b:69:65:d4:b5:c9:20:6f:df:f5:fb:5b:75:
                    cc:f6:0d:03:04:3b:65:74:9d:3a:0f:f5:02:24:5b:
                    0f:c5:26:42:91:75:36:b2:f9:e6:20:aa:d2:47:99:
                    02:a8:e5:9d:51:38:76:bf:46:a0:b6:9e:5a:b1:d8:
                    2e:97:61:fd:d5:c1:c5:3c:7b:41:d7:ee:41:7a:91:
                    bf:f7:6f:cf:cf:a1:6b:38:0f:00:28:79:7b:4e:80:
                    c9:cc:c4:1d:0f:0f:0b:43:c3:d2:e3:e6:b0:df:35:
                    67:4a:89:8a:90:e7:4c:09:45:f1:66:95:07:e9:9f:
                    15:48:0e:19:a3:34:3a:43:6e:32:75:71:5a:92:20:
                    6c:e4:e8:19:ca:c2:da:d0:a2:cb:d9:24:30:ae:de:
                    cd:34:71:b6:13:89:bc:ca:5e:e4:98:38:57:26:be:
                    29:63:84:38:bd:99:d0:16:00:6b:1a:e3:e9:5e:c4:
                    b3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E3:3E:B4:F4:33:B1:5A:55:6B:6B:92:D1:57:99:65:38:CE:C4:C4
            X509v3 Authority Key Identifier:
                keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:7a:fe:b3:20:19:69:32:34:a6:c1:df:57:8a:51:3f:5d:bd:
         7b:22:7e:39:b5:42:5b:77:3e:64:6e:06:68:ab:d7:2a:2f:79:
         5e:36:d1:52:62:9e:d8:43:6c:53:2d:4b:32:18:69:c3:96:05:
         7f:96:23:2a:cd:f5:5c:e1:f3:77:ad:15:84:e8:a7:c9:92:43:
         e7:b1:a8:64:96:78:aa:d0:24:ac:ca:ad:3f:c4:ee:f0:1d:18:
         63:fa:82:63:fa:5b:ba:d3:fb:50:cf:f4:9a:f8:70:e6:21:98:
         f7:9c:24:6c:c4:56:8b:56:2e:33:a0:46:df:52:c3:98:dc:9d:
         5b:21:8b:a4:3d:81:6e:aa:f1:95:36:82:7f:20:46:d5:fe:b4:
         9d:1c:a5:b0:2b:96:85:3d:e0:2b:1e:32:00:23:af:83:c7:97:
         7e:76:73:0e:46:80:d8:cd:65:af:46:ff:5b:2e:12:1e:dc:2b:
         1f:38:fe:59:ae:58:31:a2:db:96:d1:a4:3f:67:89:bc:b4:4f:
         c9:a5:3a:91:a0:45:ce:11:fe:49:e0:d4:da:e2:06:7b:b8:8a:
         97:20:e8:61:17:05:03:f1:66:30:4f:2c:31:1d:01:c1:68:63:
         48:ad:32:b8:9a:16:c9:df:a6:27:a7:75:4b:ad:fc:38:e4:e1:
         c4:86:68:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:16:36 2025 by rpki-client