Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
File:                     GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json)
Hash identifier:          iak2N1dLtE2yPoryTWFoCnnY1GKydYY5y4ApbGcuBlM=
Subject key identifier:   D0:19:98:2B:F4:41:E3:0B:81:7C:FB:69:05:22:F3:BD:13:46:12:89
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Certificate issuer:       /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial:       019873748BB7237F7DE01217CBCC274DDA2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 05:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:14 +0000
Files and hashes:         1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: gPBbwFPJDm/soy++JMXljxb7JowEmMG4DWBakyfTONc=)
                          2: PgHBT14XbyMI_bDsD-5F89TwxvI.roa (hash: yY+dt31JYDSsLmacNs98NxKQjn/3/Xoq5ab4x7nUyV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:8b:b7:23:7f:7d:e0:12:17:cb:cc:27:4d:da:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
        Validity
            Not Before: Aug  4 05:01:14 2025 GMT
            Not After : Aug  5 05:01:14 2025 GMT
        Subject: CN=d019982bf441e30b817cfb690522f3bd13461289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c6:19:e2:1e:54:15:72:b0:5e:f3:77:26:4a:
                    3d:f4:7e:6c:60:29:2a:e2:42:3f:35:69:23:4d:93:
                    f5:26:05:cd:c9:9e:0e:8d:0b:0f:af:c5:eb:45:7d:
                    1b:bb:92:cd:fd:08:9f:53:6e:88:c1:50:1f:80:5d:
                    00:b8:b9:6b:c4:c9:be:be:fc:4e:5f:9b:36:71:c7:
                    25:d3:b8:60:1c:55:24:5e:0f:8d:fd:06:7b:88:7e:
                    3f:5c:07:7d:9f:95:df:32:87:62:dd:9f:b2:40:df:
                    eb:cb:19:89:2e:7d:a4:ad:b1:3f:2e:eb:23:03:1d:
                    a1:43:79:ac:9a:10:86:23:7f:20:1b:00:fb:0d:ec:
                    66:0a:c4:40:c0:99:99:9a:40:74:94:4d:49:36:a5:
                    74:c3:a1:01:4f:41:27:14:62:2d:ba:87:60:e4:fa:
                    f7:e5:13:05:57:8a:ac:fd:64:64:de:0f:ca:e1:94:
                    06:a4:3f:01:92:d9:13:91:41:69:96:80:ef:d6:d2:
                    df:33:ea:0f:1a:73:25:96:25:d6:8c:92:6e:03:37:
                    c1:50:d7:bf:1e:18:2f:e5:e4:3d:53:96:fd:30:a6:
                    e1:da:5c:e2:38:39:54:b1:56:a0:cd:23:34:da:87:
                    56:f6:02:bd:36:a0:9c:bf:9c:0d:0d:d0:25:bd:a6:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:19:98:2B:F4:41:E3:0B:81:7C:FB:69:05:22:F3:BD:13:46:12:89
            X509v3 Authority Key Identifier:
                keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:b7:8a:f1:b7:47:24:16:ae:b0:32:0a:5b:33:38:72:e8:a2:
         7e:70:b3:08:b7:f5:0d:00:25:66:e2:02:66:a0:b5:b5:69:15:
         f8:00:72:c8:e7:cf:78:4a:43:8c:8c:94:6a:bf:52:07:78:a9:
         ab:ee:df:83:71:0f:c3:a0:8e:0f:09:01:c9:a8:5d:cf:bd:7e:
         f8:5f:0e:df:b4:6a:a2:98:53:af:61:75:65:b7:97:ab:36:5e:
         85:c5:3b:d1:ef:bd:6c:02:44:c0:ab:2c:e8:46:67:ed:39:76:
         04:e0:33:be:be:7c:29:f3:c8:5f:39:2a:3f:2b:a0:a7:e3:b1:
         7c:52:7a:5e:8c:1d:9d:34:83:1c:f2:ee:9a:1e:08:fe:f1:6e:
         c1:12:c0:9f:5a:05:4d:f1:f9:98:1a:e7:a6:1c:d4:80:75:89:
         98:aa:50:ea:3c:5b:c0:38:d1:e7:b9:cf:50:08:2d:df:f4:cf:
         a2:86:62:a7:1e:71:86:01:71:48:d2:7f:43:e4:98:e3:bf:6f:
         2b:62:25:1c:2e:fe:c3:88:91:68:f6:eb:ba:1b:f8:fa:92:7d:
         e3:60:6b:48:0f:6f:d2:92:fa:d1:0d:0b:b8:f1:8f:8f:0e:92:
         1c:99:78:7d:66:40:4f:be:88:31:8c:f6:89:59:3f:a3:f7:84:
         28:06:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:29 2025 by rpki-client