Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
File:                     gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft (raw, json)
Hash identifier:          j2a/cr7/sNqoMPfXLukWx3deoAz6YktQRvhqPx3+RHw=
Subject key identifier:   89:45:03:6F:8C:00:10:9B:24:32:D9:1D:BC:C2:29:AF:55:1C:DF:D1
Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77
Certificate issuer:       /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
Certificate serial:       0197493124E7A09AFB49DC36F436D8C8C446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 07:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:46 +0000
Files and hashes:         1: C5Qw-UH6XV_4ro5rbdk-3jWZdWA.roa (hash: aPq4TUMBz8klCiNKwnIuLbD4QdlJvKpZ22r6ylx0Jvs=)
                          2: gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl (hash: ZKMZ+L9pNevYDFaGjTks8i33J1fPALQDrlJ5MBfh9jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:24:e7:a0:9a:fb:49:dc:36:f4:36:d8:c8:c4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
        Validity
            Not Before: Jun  7 07:00:46 2025 GMT
            Not After : Jun  8 07:00:46 2025 GMT
        Subject: CN=8945036f8c00109b2432d91dbcc229af551cdfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:8e:b4:1e:32:53:9b:76:0c:2c:fa:00:11:
                    b1:a3:fb:34:23:7a:e9:8b:ff:41:54:0d:7c:a0:e3:
                    e0:06:ff:d8:e3:bf:ec:45:6c:47:52:8d:83:21:05:
                    09:8d:eb:30:cc:ed:64:52:39:25:6b:f4:ea:98:da:
                    e1:b7:0d:92:8f:f9:f6:1d:a4:9f:30:0f:44:2d:65:
                    13:e8:74:fa:3a:60:bb:ba:1d:09:c4:70:5e:bb:35:
                    b1:dc:c7:34:9a:38:58:c3:2e:ae:6e:a7:f0:8e:86:
                    0a:ee:aa:d1:6f:06:aa:fa:e3:b6:23:52:95:d0:6d:
                    bb:32:b8:8b:32:84:64:91:f6:70:2e:24:08:42:f7:
                    4f:eb:dc:46:5f:5d:c2:63:b0:4b:fa:67:7d:e0:50:
                    ad:94:9c:db:1e:fa:05:d0:14:c9:95:2a:85:95:c1:
                    f5:b5:14:05:d9:fd:18:49:1e:af:6c:74:88:25:c1:
                    13:3e:b5:d5:c1:36:25:b8:2b:0e:e9:d4:e0:45:eb:
                    fb:07:82:f0:40:1c:42:6d:e5:ab:b7:1b:24:94:8d:
                    d4:5a:78:85:bb:c0:86:ec:58:35:fe:20:1a:9b:26:
                    8a:0d:8f:55:e2:32:00:1b:09:6c:c5:ac:2d:9a:d3:
                    02:8c:b2:66:99:80:e8:ca:63:65:97:46:57:f4:9e:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:45:03:6F:8C:00:10:9B:24:32:D9:1D:BC:C2:29:AF:55:1C:DF:D1
            X509v3 Authority Key Identifier:
                keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c8:f5:3b:aa:ba:89:6e:36:0f:80:87:c4:29:de:0f:4f:99:
         3b:d5:cb:e3:53:83:67:ef:f1:65:b5:fb:68:6a:1e:19:fe:7d:
         f5:65:c5:93:61:ab:7c:f1:6b:3c:04:8a:f9:0d:21:cb:97:a8:
         13:c9:7b:b2:e2:24:0a:4d:4d:74:c4:74:b4:0b:ff:15:bb:5c:
         1b:3e:5c:43:39:67:38:50:6b:f8:dd:b9:86:30:70:0c:09:25:
         27:28:f7:26:3d:4d:f5:0d:35:0f:66:93:26:61:92:80:ad:12:
         12:d5:20:01:d9:16:40:c1:58:9b:f6:dc:3b:68:d8:5f:64:ed:
         3e:5f:46:50:d7:f8:e4:38:f5:c0:61:b6:e5:6b:25:01:f1:a0:
         26:76:f2:cd:ca:17:56:0c:4c:f3:40:64:a2:fd:b6:a0:18:aa:
         cc:22:f8:7d:39:a1:6d:31:1d:75:00:73:56:43:40:32:c1:ca:
         a9:4f:ab:fa:e7:94:db:fe:2f:68:74:45:bf:60:42:ab:fe:8c:
         e3:0b:9d:fc:a8:9d:a0:6a:46:2b:fc:99:96:14:3d:cc:4f:a9:
         d6:53:e7:72:77:92:ce:22:ad:fb:f5:d0:9d:1c:2b:5a:06:f3:
         d1:f8:0e:cf:fa:59:9e:90:ca:da:01:7d:97:01:7f:ea:30:f6:
         3d:d2:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:35 2025 by rpki-client