Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          f2go4yH/aAv+lZpZQLnzp2wKuIZ3iQG7PUJqZHwU6ko=
Subject key identifier:   ED:A9:94:B4:1D:C5:D9:3F:84:F9:00:AC:A6:0F:0C:B7:91:5D:63:C8
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       019A70DC1DC90DC4E925DCE2084141013B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          053B
Signing time:             Tue 11 Nov 2025 03:01:04 +0000
Manifest this update:     Tue 11 Nov 2025 03:01:04 +0000
Manifest next update:     Wed 12 Nov 2025 03:01:04 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: /U78Mhxa6hAmDrC8WmMJUyfUfhhNVJ8a6MpjfT6t1uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:dc:1d:c9:0d:c4:e9:25:dc:e2:08:41:41:01:3b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Nov 11 03:01:04 2025 GMT
            Not After : Nov 12 03:01:04 2025 GMT
        Subject: CN=eda994b41dc5d93f84f900aca60f0cb7915d63c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:b9:26:c9:9b:b0:68:e0:d2:62:23:12:fe:
                    85:d8:ff:6a:9f:5c:cc:ab:c6:ce:5f:fc:40:67:af:
                    a4:12:3c:2a:60:64:e7:73:1f:03:24:96:5a:f0:ef:
                    84:4a:d9:17:69:a5:2d:92:8b:a0:0e:94:30:41:5f:
                    22:ef:4d:5c:8a:ed:03:ea:e7:9d:03:13:e1:43:65:
                    e5:4e:53:ae:fe:37:4b:58:d9:22:13:23:38:05:cf:
                    cb:f1:dd:6f:d2:37:d3:7d:43:70:6f:58:e7:3a:c9:
                    e5:67:7d:48:d2:55:93:cb:96:1c:0f:f2:fe:6f:d8:
                    40:ca:e5:2f:3a:8a:f8:8e:9c:52:37:5f:3e:d3:45:
                    9b:ff:00:14:b4:3d:84:8c:3d:d1:fa:75:85:dc:a2:
                    05:0a:2a:8e:c6:58:8f:93:e7:f9:1c:3e:ef:36:5e:
                    2b:10:4e:4a:4b:4d:34:6c:e8:65:87:48:61:dc:b4:
                    4d:c1:96:37:03:88:c8:9b:c5:2a:93:9b:62:2a:2e:
                    2a:fd:50:62:8b:53:5b:52:22:a5:b2:2e:db:17:55:
                    ec:69:aa:a9:25:98:1a:46:14:d1:04:b7:ff:13:ae:
                    e7:35:d1:12:e8:be:db:fe:60:ac:a8:4b:83:87:f3:
                    84:90:18:2d:ff:24:50:15:6f:f6:ca:b3:42:cc:83:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A9:94:B4:1D:C5:D9:3F:84:F9:00:AC:A6:0F:0C:B7:91:5D:63:C8
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:08:f3:1a:93:75:07:55:73:48:43:49:1e:90:93:7e:e5:d0:
         fc:59:9f:f4:f6:92:b8:42:50:26:ef:f5:ec:92:07:7a:8a:3b:
         4f:e5:aa:66:e6:4e:3b:34:d2:5b:0d:67:d3:8e:1c:9b:73:b4:
         10:c4:e5:53:57:d0:c2:e8:35:95:d9:ee:22:60:0d:72:a4:b7:
         fe:97:0f:1a:67:21:c0:a6:6c:fb:dd:da:a9:37:d5:c8:49:e1:
         10:68:05:af:66:95:ba:03:95:20:5b:cb:a9:b7:46:84:89:95:
         db:0a:69:4d:ee:18:a2:74:30:0b:be:a3:33:79:1e:1c:64:f9:
         33:d3:9a:e8:b8:4e:e0:56:4a:34:26:3f:c4:f6:06:a6:6d:0a:
         0e:98:d1:9b:7f:80:d8:a6:16:b9:a8:4b:7c:0e:5d:46:c9:b5:
         0c:70:ff:39:be:54:4f:9e:ee:ea:ec:71:39:87:cf:4a:43:3f:
         90:62:04:c6:7c:c7:6b:76:a2:47:f4:03:03:c7:02:30:16:f8:
         d7:c1:de:57:9b:37:2f:09:59:25:00:be:c9:b1:ae:1c:aa:27:
         5d:48:e6:c1:19:37:b7:1f:1b:8d:42:12:7d:93:5b:6b:63:fd:
         71:3a:23:d0:ee:b6:8e:7d:cf:3a:04:5d:13:83:a4:54:cd:57:
         4d:7f:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:32 2025 by rpki-client