Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
File:                     GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json)
Hash identifier:          pv6mzjj8bT+aXkaA51TWtHQUT52wNHD2/VMgdRGGcJ8=
Subject key identifier:   A3:A6:54:70:F1:CE:A7:9B:85:0D:B4:98:9C:C7:37:0E:42:28:88:49
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Certificate issuer:       /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial:       01976403E9D8AD5C36B963B5BA8D3CCA174D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
Manifest number:          089C
Signing time:             Thu 12 Jun 2025 12:01:07 +0000
Manifest this update:     Thu 12 Jun 2025 12:01:07 +0000
Manifest next update:     Fri 13 Jun 2025 12:01:07 +0000
Files and hashes:         1: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: KfhJbyLGx7NgSzno5D4s5AkqPy7702vEK9YumSQgy84=)
                          2: Ni5vtm0M3bjCTeGdNSnDAVszYLE.roa (hash: OME01+LPKlOdHdZ6RncStdMa9nK9uQNDcVGUK02vlcM=)
                          3: UN74uc5YlLqW_undi6fagl4jLqE.roa (hash: T8wwQEk35bUytAqstSvFlsiKKzh4r6h8H/xSeUZvLig=)
                          4: YRiImFoNZVxU37wmm_1wL-_QqNY.roa (hash: xKbt/nH87U6XbMkmr2VvoP8n6E36rmfBqZRV+O9xVJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:03:e9:d8:ad:5c:36:b9:63:b5:ba:8d:3c:ca:17:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
        Validity
            Not Before: Jun 12 12:01:07 2025 GMT
            Not After : Jun 13 12:01:07 2025 GMT
        Subject: CN=a3a65470f1cea79b850db4989cc7370e42288849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:34:83:2a:77:1d:96:08:fd:27:a1:97:b8:
                    51:df:f6:b6:fa:a0:e6:6a:84:bb:5c:bd:4d:2a:08:
                    8e:fc:f0:cd:5e:68:7d:0e:a7:22:41:0c:28:26:02:
                    70:d3:b5:72:f5:fe:68:23:57:5e:2e:b9:97:df:f4:
                    14:3e:7d:26:c9:fd:46:a4:c3:9d:80:8e:05:be:70:
                    1c:4f:a7:35:87:aa:75:8c:6b:82:ea:4a:f2:a0:43:
                    98:4d:b9:40:64:b1:5a:d5:e1:95:74:45:26:20:d9:
                    e2:21:2a:19:99:6c:93:70:1b:bd:58:e2:ff:3a:97:
                    c1:61:0a:8a:72:e9:d7:8a:2c:0b:67:84:fe:9c:90:
                    91:18:a8:ca:0f:16:30:f7:d1:34:fd:93:2d:af:f8:
                    03:a6:9b:00:42:56:03:60:a7:da:e4:6f:d0:14:29:
                    47:eb:ce:f1:e6:02:59:a6:f5:e5:20:20:5f:b7:4b:
                    d2:15:9b:97:e0:e9:1e:6c:a8:a7:35:2c:1d:d8:92:
                    ce:51:79:e7:e1:18:8a:3a:5a:84:68:2c:61:b6:2b:
                    4f:7f:ea:e4:5d:08:d8:af:89:13:6f:5c:37:f8:71:
                    ce:8b:b9:cb:63:00:e2:4d:c5:8f:45:e0:53:3a:fe:
                    01:9b:7d:1b:3f:b4:6f:c5:d3:60:3c:db:a0:6f:1b:
                    00:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A6:54:70:F1:CE:A7:9B:85:0D:B4:98:9C:C7:37:0E:42:28:88:49
            X509v3 Authority Key Identifier:
                keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:01:0e:14:5b:16:e8:79:49:ac:05:34:04:6b:bb:73:e8:61:
         3e:87:c0:3c:76:a5:b6:3c:e1:4e:16:2a:a7:14:bd:0f:9f:87:
         b4:38:fe:05:b2:72:42:74:f1:ea:cb:72:3f:9a:aa:1f:f0:3e:
         e4:ed:d1:18:39:40:5c:7e:bf:c9:b3:b1:f7:9c:e3:04:96:0f:
         10:92:df:b9:cb:e0:92:f6:61:14:99:5a:5e:64:f3:d6:c7:d2:
         33:91:70:c7:e9:ad:60:23:71:66:43:10:4a:ab:b7:75:0d:23:
         19:06:c7:92:84:4f:7d:53:e6:a7:47:40:ad:64:fb:32:b5:89:
         11:db:ce:00:22:45:13:65:61:b4:5e:4e:30:cb:88:7b:06:af:
         56:73:b8:bf:a1:36:18:ec:d9:51:98:70:db:1a:15:fb:04:78:
         68:de:22:fc:dd:2a:e1:cf:7a:70:3c:b5:aa:bc:63:53:ce:6a:
         7d:50:c1:d4:a0:49:e5:84:ce:8c:b1:07:12:de:b3:74:c7:0e:
         9c:c2:8b:67:94:0d:af:8b:76:8c:69:ab:10:a2:68:70:20:42:
         22:66:42:12:fa:65:65:ec:8b:e2:0a:7a:f3:78:13:8b:2b:22:
         e4:01:c8:95:02:00:5c:d4:0b:b6:1c:dd:02:3e:9d:8b:26:71:
         35:19:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:37:00 2025 by rpki-client