Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File:                     GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier:          WezrBJ0B4LnfMq9V1nSTBLSG87C7JmIv+ywdRAr6IVo=
Subject key identifier:   03:DA:97:A1:4C:27:6D:3F:51:9F:E4:49:24:B7:04:64:7F:7C:B6:75
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer:       /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial:       019873E3AD16207FD324286B1A60DC98E4C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number:          07BD
Signing time:             Mon 04 Aug 2025 07:02:37 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:37 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:37 +0000
Files and hashes:         1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: wq1jd29FRtgu8COjbimdyU9AkL+YyMZ/45FWEAuIEPI=)
                          2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:ad:16:20:7f:d3:24:28:6b:1a:60:dc:98:e4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
        Validity
            Not Before: Aug  4 07:02:37 2025 GMT
            Not After : Aug  5 07:02:37 2025 GMT
        Subject: CN=03da97a14c276d3f519fe44924b704647f7cb675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:ec:c1:fd:cd:a9:7e:1a:08:b8:e4:d9:6c:
                    99:93:33:8d:f7:10:07:e6:84:e1:db:f2:34:cd:03:
                    10:0d:4a:53:2c:4e:fa:f6:b4:b1:22:8e:64:db:76:
                    4d:c9:82:34:47:1a:27:0d:15:a6:e3:d5:01:e3:bc:
                    85:d6:ad:5a:a9:ff:12:a7:01:24:76:ab:28:af:c3:
                    2b:44:ec:5c:84:22:e4:39:5c:bc:92:dd:01:3f:3c:
                    6e:08:f0:d6:e5:de:33:0d:96:b6:15:7e:64:8f:71:
                    2c:4c:49:b8:6b:6e:ee:8f:5e:9d:03:63:b5:b7:bb:
                    81:81:2f:91:23:b7:f4:a8:31:8b:56:49:c8:1d:1a:
                    ae:77:7b:80:91:72:3d:90:6a:13:b5:98:ad:4b:2a:
                    69:4a:e5:b0:99:a8:5a:21:d3:3f:f5:58:79:b9:09:
                    7a:7e:64:bf:d5:43:1e:ea:e0:4f:7e:fc:74:ee:7d:
                    98:4b:fd:71:c6:2e:84:82:f0:58:f7:f6:e1:d7:9c:
                    5b:5f:d5:a6:f9:42:66:18:f5:98:13:ae:cf:ac:bf:
                    c6:cf:c4:60:62:f7:85:67:00:c8:8a:d1:74:e2:1e:
                    4b:07:74:ee:b2:d8:9d:b5:1c:a6:ad:ef:c3:86:f2:
                    cf:31:87:a9:22:d2:cb:5e:48:e2:ab:f8:15:3b:57:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DA:97:A1:4C:27:6D:3F:51:9F:E4:49:24:B7:04:64:7F:7C:B6:75
            X509v3 Authority Key Identifier:
                keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3e:f8:85:a8:22:bd:37:8b:3d:50:f1:88:b8:71:7d:a2:e3:
         62:93:6e:81:88:f5:f0:3c:65:91:69:7a:50:ba:b6:50:4e:5f:
         c4:84:38:56:93:91:d9:67:4a:4c:fd:1f:54:65:ba:19:5f:f2:
         d1:a7:98:cc:c1:4b:28:a4:19:2c:f7:21:78:12:f1:f9:21:e8:
         dc:13:0e:a8:a0:d2:2d:eb:16:99:ce:e7:65:53:8f:78:b8:bb:
         21:14:62:31:f8:e6:8b:6a:22:99:9e:27:9a:48:69:05:5f:cc:
         c5:9d:c1:49:1c:d6:45:30:83:9d:c3:3c:2e:8d:eb:3e:b6:93:
         77:8a:b8:f2:92:d0:61:92:5f:8f:12:bd:f7:49:9d:8e:c2:89:
         05:a5:3c:95:df:81:ff:fd:da:21:a8:19:36:51:bb:8a:db:27:
         9b:1f:3a:3c:22:e2:41:b6:2f:98:70:42:25:13:8a:9a:d9:91:
         f5:13:24:27:2a:f1:c1:b1:3f:18:56:03:92:6b:bb:73:ce:3f:
         31:9c:bc:8a:cf:34:69:45:61:99:70:ac:83:48:67:9c:3c:f1:
         3f:2c:72:6f:b7:7c:93:c6:c0:f6:7c:e2:3c:5a:90:da:38:3f:
         08:02:85:48:83:dd:0e:51:6e:b4:01:f3:6f:9a:92:8e:06:10:
         d5:42:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:24 2025 by rpki-client