Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
File:                     GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json)
Hash identifier:          +7OAjhzTRkCB8mhzWqqjMnRI19mamYTmDv+p5FjGBzU=
Subject key identifier:   E9:30:12:AF:B7:F4:C8:0E:69:87:12:F8:49:B6:C1:D0:73:2C:9F:4B
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Certificate issuer:       /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial:       019765F250951070881C93FFEEB700EAF917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
Manifest number:          089D
Signing time:             Thu 12 Jun 2025 21:01:08 +0000
Manifest this update:     Thu 12 Jun 2025 21:01:08 +0000
Manifest next update:     Fri 13 Jun 2025 21:01:08 +0000
Files and hashes:         1: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: 7tqtLmSfWDi4EXdynDOk+Eb1GEeVBzgvWj9kysXcGcI=)
                          2: Ni5vtm0M3bjCTeGdNSnDAVszYLE.roa (hash: OME01+LPKlOdHdZ6RncStdMa9nK9uQNDcVGUK02vlcM=)
                          3: UN74uc5YlLqW_undi6fagl4jLqE.roa (hash: T8wwQEk35bUytAqstSvFlsiKKzh4r6h8H/xSeUZvLig=)
                          4: YRiImFoNZVxU37wmm_1wL-_QqNY.roa (hash: xKbt/nH87U6XbMkmr2VvoP8n6E36rmfBqZRV+O9xVJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f2:50:95:10:70:88:1c:93:ff:ee:b7:00:ea:f9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
        Validity
            Not Before: Jun 12 21:01:08 2025 GMT
            Not After : Jun 13 21:01:08 2025 GMT
        Subject: CN=e93012afb7f4c80e698712f849b6c1d0732c9f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:7f:47:82:b1:58:55:26:f7:38:65:04:70:
                    6f:05:0f:29:46:9b:33:07:e4:79:af:8c:6f:75:6b:
                    a2:13:c3:1c:f7:3c:0c:4d:f5:18:f3:73:ca:a2:cb:
                    b4:6c:a8:7e:29:00:3a:f3:b5:87:e0:0a:20:ae:19:
                    4f:18:0d:93:3d:52:1b:1c:c0:39:9f:68:3d:fd:5a:
                    76:9f:35:f8:ef:39:35:f4:00:d0:16:fe:28:f5:27:
                    8b:19:21:b1:61:a3:a7:9e:4f:e4:38:79:35:ec:00:
                    8c:13:1f:93:09:17:63:24:5b:63:8f:9a:57:17:57:
                    9d:39:93:28:f0:a8:89:5f:10:82:02:9c:3a:ae:22:
                    2a:65:05:59:4a:87:4c:1f:a2:7f:80:8e:33:f7:01:
                    d7:fc:ec:20:a9:76:21:4f:97:e9:26:d8:2d:09:14:
                    1e:37:00:8d:14:ce:88:df:1a:87:c3:cf:06:8a:15:
                    1f:33:45:7a:2e:55:36:42:50:60:9e:6e:74:74:f9:
                    92:58:a1:7c:09:d8:1a:07:22:d2:47:57:af:07:86:
                    74:63:24:5d:fa:f4:09:04:89:a7:3e:39:85:24:35:
                    12:35:13:e0:0b:ae:0e:31:79:7f:2b:1a:c7:c1:88:
                    05:77:6a:19:84:03:21:e3:91:ea:38:d1:e1:db:29:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:12:AF:B7:F4:C8:0E:69:87:12:F8:49:B6:C1:D0:73:2C:9F:4B
            X509v3 Authority Key Identifier:
                keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:3f:6e:21:08:06:42:b8:19:44:ad:e9:48:2b:43:a2:40:
         bf:a1:e4:c3:72:6a:60:5b:a8:20:53:48:2e:d3:7e:ba:c2:d7:
         fe:c7:25:60:da:1b:81:e5:fc:39:e8:af:12:b9:98:2e:ea:3e:
         e0:c1:30:28:4c:58:82:6b:2c:21:ca:0c:4b:a8:60:de:b7:cf:
         42:8e:df:7d:3d:c6:f7:9c:d4:4f:97:55:d6:5a:bb:52:6b:44:
         85:d9:a3:17:62:3d:ea:d7:b9:7a:37:de:4c:67:de:1b:91:64:
         1e:5b:aa:cd:bf:ba:b5:42:bc:79:7d:01:cc:96:8d:0b:e9:d8:
         07:32:06:53:4a:aa:5c:84:1c:93:bf:8e:2c:08:9e:98:92:be:
         c6:aa:31:62:66:e3:88:4b:d3:8e:a3:15:15:58:6e:b6:53:4a:
         73:2c:f1:43:92:92:5f:79:79:ab:48:14:72:c8:71:9e:97:22:
         46:af:36:5d:b4:2e:3d:0a:e0:8b:19:97:be:52:fb:e3:44:52:
         37:81:f7:c0:95:1f:af:ca:e9:47:5d:30:e0:ea:53:07:da:7e:
         dc:a4:65:7b:16:e4:34:07:1d:8f:d6:59:c2:6e:fd:80:ca:5d:
         d2:7e:5d:ba:5f:8f:76:40:6b:ba:42:3f:36:8e:56:97:76:67:
         07:6e:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:37:28 2025 by rpki-client