Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
File:                     ggA1PrKBit3XElx4FCFDMUneb2I.mft (raw, json)
Hash identifier:          u4WfuHLkC9l4k/Vy5rSFGnh2auwwMC7Fhto123TNqkY=
Subject key identifier:   D0:7A:43:54:32:A0:AD:9C:DF:32:D6:6B:A5:70:94:F7:F7:2B:F3:2D
Authority key identifier: 82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62
Certificate issuer:       /CN=8200353eb2818addd7125c781421433149de6f62
Certificate serial:       019873E3AAF4ADFE888EC001845D48D98051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
Manifest number:          058D
Signing time:             Mon 04 Aug 2025 07:02:36 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:36 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:36 +0000
Files and hashes:         1: ggA1PrKBit3XElx4FCFDMUneb2I.crl (hash: H/kh90cHOQcezEpGcei/VxIJkkzeNHsxSZ07VZQhCp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:aa:f4:ad:fe:88:8e:c0:01:84:5d:48:d9:80:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8200353eb2818addd7125c781421433149de6f62
        Validity
            Not Before: Aug  4 07:02:36 2025 GMT
            Not After : Aug  5 07:02:36 2025 GMT
        Subject: CN=d07a435432a0ad9cdf32d66ba57094f7f72bf32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:01:11:7b:a8:7f:64:1c:0b:37:d5:8c:44:0b:
                    8b:6c:6f:d5:21:1f:e6:ae:2c:33:f8:48:ff:eb:2b:
                    d1:ea:b1:42:94:0d:7d:65:b4:d7:25:d4:35:8b:38:
                    f1:58:03:7a:39:80:69:52:c7:56:11:9d:be:d4:7d:
                    e2:6d:2a:2d:c9:a4:97:1b:4c:05:12:cb:cd:bf:ec:
                    5e:8c:ce:60:5b:1e:62:c5:67:eb:3a:bc:dd:95:20:
                    b4:e6:84:2d:3f:6e:34:51:2e:54:9f:6b:12:71:e1:
                    a1:9b:83:83:21:61:ab:6b:7a:d8:55:68:c2:fa:54:
                    2b:df:1f:2c:a2:7b:40:9b:7d:76:bf:7a:b8:f8:ce:
                    4a:4b:fa:a3:ce:06:75:8f:04:40:54:b3:db:52:89:
                    ff:05:49:6d:58:48:8d:c4:87:59:94:ff:c4:6e:a6:
                    ee:37:e0:2c:6d:5a:47:99:32:d3:2f:87:6a:15:44:
                    e0:4c:a4:89:c2:b5:f4:4e:5f:ef:7a:13:45:f8:2d:
                    7b:f2:94:a2:d1:09:67:12:ad:d5:62:a4:76:fb:fe:
                    83:3a:b5:44:be:81:ed:f7:68:79:d5:96:33:7d:50:
                    6a:05:45:74:60:32:18:fb:64:e5:8c:c9:12:84:c4:
                    4c:24:b1:c7:c3:5e:af:13:3e:5a:7c:61:92:c6:3f:
                    c7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7A:43:54:32:A0:AD:9C:DF:32:D6:6B:A5:70:94:F7:F7:2B:F3:2D
            X509v3 Authority Key Identifier:
                keyid:82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:45:31:db:6d:f7:4f:ca:18:9d:ff:25:eb:0e:85:7d:99:b6:
         29:36:17:06:04:32:af:96:c7:7e:d0:af:6d:1a:64:dd:0a:ca:
         14:96:64:f6:6c:2e:5c:0e:b7:63:eb:59:03:64:8d:e8:90:21:
         7f:9d:79:4b:86:01:10:b0:b4:e0:72:9b:c4:f1:de:2d:cb:43:
         70:8c:18:93:be:c3:9d:e9:8e:83:b3:a5:4e:aa:a5:30:aa:f0:
         fc:0a:2a:79:bd:26:cf:8e:ff:e2:71:2f:e1:1f:ae:95:62:04:
         10:b5:74:4c:4d:a1:d5:49:f0:36:a4:dd:b3:48:81:bb:bf:c1:
         28:01:13:3e:bd:ac:53:f2:82:15:91:63:05:37:1e:eb:72:49:
         9f:ab:10:e4:18:01:5a:78:24:ea:bf:0f:cc:b8:7b:76:97:40:
         b4:f4:ce:61:f1:3c:fa:b7:f2:df:e6:d3:64:00:db:5a:c0:40:
         49:8a:82:53:a6:3e:f4:59:12:b6:11:08:4c:dc:72:6e:29:08:
         9a:1b:71:c1:5e:65:28:2c:54:5f:60:06:ec:c0:94:e0:a6:b4:
         1a:f8:6f:cd:93:8e:e7:41:75:45:c2:d7:4b:c9:15:bb:53:b5:
         a9:0f:01:b8:73:c7:aa:b1:09:b5:c4:9b:29:81:9e:97:3e:06:
         cf:8a:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:13 2025 by rpki-client