Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          yjYqwB6Da7i1ieK95rg3V2WEvxHqNaI+EvF8ZxO80hE=
Subject key identifier:   3B:5A:8C:63:5F:D0:89:45:93:15:BB:A6:71:22:99:7A:99:E7:A6:DA
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       0198752BB7B7040CE9D2373F374E6BF74864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          02FD
Signing time:             Mon 04 Aug 2025 13:00:56 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:56 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:56 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: tAlc26lBy1otgULnmtck+GNKO/RWLg9Ljs3gP6mhaJQ=)
                          2: _uaKTHKtfWhbGfsoaUqVE21BcaI.roa (hash: ZcgIbRy8eNOQQ+FS3+GJOt3y/shZQUFy7iI8KMgc4tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:b7:b7:04:0c:e9:d2:37:3f:37:4e:6b:f7:48:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: Aug  4 13:00:56 2025 GMT
            Not After : Aug  5 13:00:56 2025 GMT
        Subject: CN=3b5a8c635fd089459315bba67122997a99e7a6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:3d:a1:a3:fd:7e:f0:64:80:c3:dd:d0:34:
                    2c:17:34:8c:d5:4a:4f:eb:87:e7:8a:19:04:b9:1c:
                    63:34:5d:c3:ce:66:8f:51:28:9a:c5:34:e4:c3:ef:
                    b3:45:24:7a:65:a0:85:e5:f3:d0:24:d8:34:cf:9a:
                    f5:ff:a7:46:c1:92:b4:31:aa:f6:96:8c:c8:b2:12:
                    1c:94:9e:f1:ff:cf:98:8b:bb:b7:5b:dc:79:64:cc:
                    41:c4:e6:19:21:2c:db:d1:93:fc:1d:4b:59:60:f4:
                    29:79:40:42:cb:a2:ca:84:86:8d:1b:88:4c:62:f8:
                    67:ce:f3:44:4f:19:21:85:e7:bd:cc:58:36:93:78:
                    71:63:34:d0:85:55:b7:51:b9:41:13:50:99:96:82:
                    22:17:b4:fd:45:d0:47:13:af:40:9f:68:00:b3:c2:
                    4b:6b:15:57:1c:8a:c1:54:d8:2c:88:b7:21:e6:89:
                    ba:78:6c:b6:23:81:50:23:c2:32:ff:fd:d4:78:e0:
                    85:2b:35:41:7e:77:10:4c:f3:7e:f0:51:d5:08:4c:
                    3f:ea:72:4d:7a:e5:9e:83:1b:dd:dc:6e:6f:83:91:
                    f1:4d:93:fe:4a:bb:b1:c5:51:04:1d:93:c3:9b:89:
                    00:f9:34:c8:67:1f:37:7c:68:75:5f:6d:4c:02:a5:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5A:8C:63:5F:D0:89:45:93:15:BB:A6:71:22:99:7A:99:E7:A6:DA
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:f8:f7:80:5e:11:31:b9:ad:b2:22:aa:28:29:4d:72:e4:
         e3:40:12:6f:52:d6:15:23:6c:af:f5:fd:0e:f9:f3:4e:90:c8:
         f2:bd:54:6e:e6:ad:b4:9b:c8:a2:eb:fc:84:34:e6:14:09:7e:
         4f:47:65:1a:54:69:b7:b1:1b:fd:a1:e9:10:51:df:e3:d1:d2:
         a8:73:cb:d5:97:b3:23:a9:8f:6c:00:13:1f:2d:c1:07:2e:d6:
         64:29:91:84:59:f8:89:07:86:b7:f4:07:9f:af:70:a4:08:e8:
         08:47:f5:7e:93:df:b4:a7:fb:cf:d7:e1:0c:95:93:0a:3a:fd:
         47:9d:53:57:d3:5a:da:34:87:6a:cd:79:be:3d:b6:55:fe:b4:
         69:14:da:e7:09:2b:06:7e:38:1c:98:d2:e0:f0:f6:8d:d1:60:
         fa:23:2c:51:c9:64:a4:f0:61:02:e8:f7:ae:16:df:51:f3:51:
         75:88:57:5a:85:b2:46:1b:fd:5e:b1:1f:7c:dc:73:17:a8:e8:
         7a:4b:39:75:e7:aa:dd:0f:e9:3e:c1:4c:3e:9c:3e:02:94:a2:
         77:b7:86:bf:2d:a9:19:46:11:ea:3b:07:29:d4:35:3d:ea:a5:
         89:92:3e:3e:89:16:d8:29:e8:70:db:26:e1:49:29:2d:66:15:
         2a:4c:b2:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K7e3BAzp0jc/N05r90hkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjI0MWMyYTRjZDFiMDhiZjViYTU0MTJkNDkxYzQ5Yzhl
Yjg3OGQwHhcNMjUwODA0MTMwMDU2WhcNMjUwODA1MTMwMDU2WjAzMTEwLwYDVQQD
EygzYjVhOGM2MzVmZDA4OTQ1OTMxNWJiYTY3MTIyOTk3YTk5ZTdhNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz89oaP9fvBkgMPd0DQsFzSM1UpP
64fnihkEuRxjNF3DzmaPUSiaxTTkw++zRSR6ZaCF5fPQJNg0z5r1/6dGwZK0Mar2
lozIshIclJ7x/8+Yi7u3W9x5ZMxBxOYZISzb0ZP8HUtZYPQpeUBCy6LKhIaNG4hM
YvhnzvNETxkhhee9zFg2k3hxYzTQhVW3UblBE1CZloIiF7T9RdBHE69An2gAs8JL
axVXHIrBVNgsiLch5om6eGy2I4FQI8Iy//3UeOCFKzVBfncQTPN+8FHVCEw/6nJN
euWegxvd3G5vg5HxTZP+SruxxVEEHZPDm4kA+TTIZx83fGh1X21MAqUfqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtajGNf0IlFkxW7pnEimXqZ56baMB8GA1UdIwQY
MBaAFBgiQcKkzRsIv1ulQS1JHEnI64eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEt
YjJkMjY4ZTJjYjc4LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEtYjJkMjY4ZTJjYjc4
LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzv494Be
ETG5rbIiqigpTXLk40ASb1LWFSNsr/X9DvnzTpDI8r1UbuattJvIouv8hDTmFAl+
T0dlGlRpt7Eb/aHpEFHf49HSqHPL1ZezI6mPbAATHy3BBy7WZCmRhFn4iQeGt/QH
n69wpAjoCEf1fpPftKf7z9fhDJWTCjr9R51TV9Na2jSHas15vj22Vf60aRTa5wkr
Bn44HJjS4PD2jdFg+iMsUclkpPBhAuj3rhbfUfNRdYhXWoWyRhv9XrEffNxzF6jo
eks5deeq3Q/pPsFMPpw+ApSid7eGvy2pGUYR6jsHKdQ1PeqliZI+PokW2CnocNsm
4UkpLWYVKkyy8g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:22 2025 by rpki-client