Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
File:                     gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json)
Hash identifier:          vmsms9wrwYHxXk0ofA1waPPJtgwJSwwlw0hID2IDc4c=
Subject key identifier:   84:56:13:44:47:B5:4E:8F:33:82:48:C7:03:EA:44:92:C5:3F:2B:1F
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Certificate issuer:       /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial:       0198391659BFE934483CEF5A68E3DC7C9342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
Manifest number:          155B
Signing time:             Wed 23 Jul 2025 21:00:22 +0000
Manifest this update:     Wed 23 Jul 2025 21:00:22 +0000
Manifest next update:     Thu 24 Jul 2025 21:00:22 +0000
Files and hashes:         1: 1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa (hash: WJKUvuV0JjUpEwzD0WN1y14bM/NihUUNvR+FCbd/Y2g=)
                          2: 5_qbUTNJTKmDx-VPoCyg5GiF_44.roa (hash: upLH1FeLhYFLc3B1AG7zDO/VAd2waobao5HIF19Yrvo=)
                          3: InIRujvheMSnuntsvHJjTs5su2U.roa (hash: IqMDfUGWehH9FGcRRehcGH1gUKY9FO7UHo3vHht1RFY=)
                          4: YYbT8lbyVWv6yQ3daL3nywYGpE0.roa (hash: H/Qcg0aplqNTHmTWbVVGR+IQ4V4ag89xamHIQ20iGuk=)
                          5: dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa (hash: vHyoYTb8eVOfU/syk4YrhtN9pnkC2H/rIICxrgnsNBI=)
                          6: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: YyhhDEetpxSUEumwf7uM0lFBVdQ2lnrlK7eRLf854X8=)
                          7: gio6F55GO42GZsRq8FQUo7P8nrk.roa (hash: 80TfPfy6fsm8Hf2Ac1l9Gq3x9An3ECfANZIa/nM0IVY=)
                          8: hPi3Yz-IQfnghVcK_tG22EcMbZk.roa (hash: eBUVvaZgDfjhvtgjU9lOaAKzUUmY7IXYS3AoPIKzIbQ=)
                          9: ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa (hash: jwUnq34H3x2DDYiun7O3jFMVM618SNic53iAmXCX+Z4=)
                          10: lWJoF_swBr2Lu5mO-Q5os-z2oAU.roa (hash: GwiPt4R6jhk5qWspCacWYlKa/6jGmdnZmiVjiKnYhHQ=)
                          11: pocLo2IUa96EYAO9rbTb3m68VAo.roa (hash: Z7HB26uR5mWKPIqwiHiyjqm7+3tugkPZzITbgrY+cl4=)
                          12: sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa (hash: tTSTzWjgCJKHY0qcH5mPggHS+UBYeFmuuzH6UrgFPas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:16:59:bf:e9:34:48:3c:ef:5a:68:e3:dc:7c:93:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
        Validity
            Not Before: Jul 23 21:00:22 2025 GMT
            Not After : Jul 24 21:00:22 2025 GMT
        Subject: CN=8456134447b54e8f338248c703ea4492c53f2b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:db:96:9a:6b:c7:2c:8f:45:3f:c1:06:84:
                    13:34:ac:7c:ff:41:0a:63:b9:6e:7f:1e:d7:5f:e3:
                    3f:f6:c2:2a:fa:76:c9:aa:65:1d:c5:76:cd:39:80:
                    1a:10:9e:1d:a6:40:3a:45:ec:65:9c:94:40:19:7d:
                    88:5f:e7:de:1a:56:c3:54:3d:f6:65:f6:a2:28:a7:
                    ae:97:f3:7d:a1:44:c6:6e:97:13:f9:ba:f9:9e:3a:
                    43:dc:77:3b:66:00:bb:1f:c8:0b:c9:89:64:aa:4d:
                    09:a0:08:19:b9:23:45:09:20:85:1e:7c:e0:9c:0b:
                    93:05:dc:8c:a5:ee:89:9b:e4:1b:4c:32:ae:d4:20:
                    02:71:49:ae:30:20:b3:39:17:db:56:ea:cd:37:49:
                    17:18:87:14:e4:8c:6f:b0:aa:07:a8:fb:3a:a8:6a:
                    fe:fd:0a:e8:16:49:b0:7b:6b:10:ba:f3:3f:35:1f:
                    62:f0:14:88:2d:bc:88:05:2a:46:f0:07:03:e2:c4:
                    35:2a:14:fc:5c:bf:e5:71:91:72:70:fe:24:44:52:
                    1b:40:9e:88:18:a1:7b:41:63:c7:5f:63:36:59:a7:
                    95:06:ed:3d:4d:f4:3d:25:06:1f:85:41:f8:45:3b:
                    cc:a6:ed:c4:b1:f2:e0:69:50:cc:be:b4:c6:27:60:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:56:13:44:47:B5:4E:8F:33:82:48:C7:03:EA:44:92:C5:3F:2B:1F
            X509v3 Authority Key Identifier:
                keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:64:20:8e:c7:47:82:7a:4c:94:2a:1f:ec:4c:db:97:08:b3:
         89:1f:0f:ff:48:82:c7:96:5c:12:49:38:b7:3f:50:b1:a6:a0:
         23:83:96:82:3a:56:eb:e1:71:9b:50:c8:14:1d:74:a6:b5:65:
         9c:f8:c3:ce:9c:89:c5:5d:14:14:e9:3c:df:47:7a:23:d7:f0:
         72:05:70:64:c0:06:dc:93:2d:ca:58:ce:a1:3f:08:09:4d:9c:
         f1:b5:00:5f:32:dc:0e:78:a5:3c:4c:b9:d3:72:7d:95:b1:f1:
         64:9b:b5:f4:2e:27:87:5c:32:8b:91:40:48:f4:29:00:b1:3d:
         8b:18:96:4c:a3:78:d3:36:a0:31:b1:37:ad:b7:99:99:c8:51:
         ac:4e:76:6b:cb:df:39:f7:6c:75:3d:d2:c5:6c:8b:a0:e2:f1:
         a5:0a:f6:ed:51:0a:56:84:b2:1e:88:79:99:cc:9f:b0:1a:f9:
         a0:0a:2e:68:21:15:79:7a:3b:49:23:9c:b5:64:26:42:86:3a:
         29:3c:ed:09:ac:55:3f:50:6f:02:69:05:bb:81:54:4b:15:7e:
         1d:87:0d:dd:97:9e:00:88:06:59:dd:44:3f:29:92:53:2a:c0:
         a3:ec:ad:c1:c4:8b:d4:2a:ad:16:99:07:61:2c:86:45:39:91:
         22:e2:d3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 22:37:42 2025 by rpki-client