Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          Kmn6LRy+Zlz2TEoyez5YbpZ8YBf9l3olvYyBGiQuJ0Q=
Subject key identifier:   66:58:A7:66:40:69:59:34:1E:37:45:A8:7F:79:61:0F:BF:AB:2D:B8
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       01974F6A9176B0A1BC01C6892555E5E3D9E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          039C
Signing time:             Sun 08 Jun 2025 12:01:13 +0000
Manifest this update:     Sun 08 Jun 2025 12:01:13 +0000
Manifest next update:     Mon 09 Jun 2025 12:01:13 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: j5TW4jX2GpRNJzABfFr7b6E9y8PQMRPafLSjKktAn0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:6a:91:76:b0:a1:bc:01:c6:89:25:55:e5:e3:d9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Jun  8 12:01:13 2025 GMT
            Not After : Jun  9 12:01:13 2025 GMT
        Subject: CN=6658a766406959341e3745a87f79610fbfab2db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:a4:f2:ca:d1:d5:0f:bb:5d:c4:17:1f:3e:
                    b1:3d:b9:55:5e:28:db:d0:f1:16:22:96:04:f7:e6:
                    1f:26:40:a4:2b:ee:d9:31:f3:82:ee:93:15:03:f8:
                    eb:57:f7:db:be:9d:2d:1c:f2:69:a2:21:15:42:ff:
                    0e:ec:38:78:e3:52:3f:db:24:b6:f9:cb:ba:fa:78:
                    7e:b7:ba:09:79:6a:82:a6:32:55:7b:f3:d2:c0:a9:
                    05:37:0b:94:d8:a5:d1:f4:1c:b9:cf:41:81:ca:79:
                    5f:fa:97:32:80:df:55:06:51:b9:df:ca:58:d6:9a:
                    d5:62:ed:b0:7e:74:68:0f:4a:32:62:24:b2:ca:1d:
                    42:f3:33:e7:55:2c:d5:06:28:a1:fc:e6:63:8c:3e:
                    28:2f:28:05:41:f6:81:94:d0:5d:75:ab:ed:48:45:
                    68:b1:c5:a3:3a:8a:34:8e:aa:be:3b:02:41:72:0b:
                    5b:62:64:3c:16:92:0b:9e:f6:04:28:26:8a:67:50:
                    59:78:84:f1:14:63:e5:bf:72:e8:4e:21:13:db:9a:
                    00:a6:b4:f5:9a:25:22:fc:1d:92:f3:25:d2:41:b8:
                    7d:8c:8b:fc:ed:ed:f4:26:e2:26:d3:3a:c3:f7:d6:
                    92:a6:5e:ee:ff:17:f5:22:fa:d7:6d:54:d8:38:ae:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:58:A7:66:40:69:59:34:1E:37:45:A8:7F:79:61:0F:BF:AB:2D:B8
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bd:1e:62:c7:e8:7a:b9:3e:56:9b:0b:67:61:d6:31:a6:a0:
         19:12:fc:5a:27:37:e2:8c:9f:f3:5e:b4:56:47:c6:c9:8a:54:
         d1:7c:ac:40:d4:35:60:ed:f9:ec:a8:87:42:0c:fb:b6:28:da:
         e5:1d:29:96:10:7d:6a:85:49:71:5b:f6:ea:14:40:bb:82:62:
         fa:81:31:6c:61:fc:3b:a8:db:a9:55:2d:b6:66:d7:15:5c:84:
         c1:35:58:54:04:3a:8f:ee:a4:7e:07:ea:4a:ef:3b:c2:43:f7:
         28:26:52:13:27:2d:7b:4a:2a:b2:39:5e:16:e8:3b:2a:1e:28:
         6f:8d:21:85:36:77:9c:e4:bd:27:31:a7:69:bf:58:70:5e:5e:
         60:99:44:40:fd:4d:ee:be:d4:69:4d:65:9d:59:2d:3d:97:28:
         59:7c:b8:4c:a7:df:44:be:be:0d:4c:32:22:07:db:b5:8b:62:
         f5:05:71:f3:4a:06:b5:2e:d4:0a:66:86:48:90:90:3b:fa:90:
         35:02:b6:1c:f0:04:a3:79:d0:8b:c4:59:f3:24:81:35:8e:59:
         48:a5:7f:a8:22:df:ce:4a:18:fb:43:a8:37:c4:f6:86:35:13:
         41:cb:6e:0b:fa:44:d6:99:be:c7:84:c7:d6:8e:68:8e:6d:89:
         82:e8:c6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:38:56 2025 by rpki-client