Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
File:                     gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json)
Hash identifier:          xzl5T99sTfqtA+PXP6/A1uo0q+z8LIJosN+loIAqlg4=
Subject key identifier:   1C:C8:05:56:38:2C:20:8A:A4:27:F9:94:24:FD:B8:44:87:9F:1D:06
Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
Certificate issuer:       /CN=80255b64c96c010bda37df23d89268e8e4748dd3
Certificate serial:       01988BEA2D8E1241546D2EE48CE690FAC7B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
Manifest number:          080A
Signing time:             Fri 08 Aug 2025 23:00:36 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:36 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:36 +0000
Files and hashes:         1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: 7gHoJatZWU7x7oOfTr4WkxXKZdXuUb+kDq3fiXfgpT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:2d:8e:12:41:54:6d:2e:e4:8c:e6:90:fa:c7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3
        Validity
            Not Before: Aug  8 23:00:36 2025 GMT
            Not After : Aug  9 23:00:36 2025 GMT
        Subject: CN=1cc80556382c208aa427f99424fdb844879f1d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:9e:07:5e:18:cb:7f:9f:06:93:7b:e3:10:
                    3c:7c:80:94:0c:5d:f4:dd:14:09:be:2f:9b:49:02:
                    5a:60:84:57:8b:91:a4:54:3b:c5:1a:4d:14:09:5a:
                    ef:5f:27:22:0e:fd:1e:49:fc:cf:92:e6:8d:c4:11:
                    0b:d8:93:e1:90:a5:a7:74:e4:7a:ae:55:68:af:e2:
                    b4:78:43:b8:6a:df:99:29:87:3e:c1:40:a7:d4:97:
                    5d:63:64:90:d9:83:e1:22:4b:1b:50:14:0b:48:5b:
                    4c:6c:cf:cb:7f:21:6d:44:44:d8:c2:67:63:3a:37:
                    83:30:3a:bf:9d:21:3d:5b:e3:86:bc:1b:63:72:d0:
                    95:00:7f:7a:38:60:e9:2f:0a:0b:83:e8:a7:7f:64:
                    10:e2:06:ff:c9:26:51:4f:37:92:61:84:4e:20:4a:
                    27:0b:35:8d:5d:d3:68:8c:ec:59:27:80:1d:b0:5b:
                    ba:b5:69:14:f6:cd:5e:e8:4d:cf:e5:66:05:4e:75:
                    d6:33:a8:0c:50:88:d4:68:a2:27:53:60:98:4b:96:
                    11:ae:88:e5:d1:ce:7d:bd:a9:25:2a:40:6b:df:cf:
                    cf:9f:22:6d:e6:51:fb:17:94:b2:8b:cb:c9:e1:67:
                    47:87:fe:21:e6:b7:ef:7c:5f:eb:6f:e5:9d:c7:0c:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C8:05:56:38:2C:20:8A:A4:27:F9:94:24:FD:B8:44:87:9F:1D:06
            X509v3 Authority Key Identifier:
                keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:60:cc:12:bf:15:2c:d3:14:3a:ec:8b:80:10:35:ca:b8:00:
         7f:66:be:ce:19:33:d3:83:ea:f6:85:2c:3c:fe:c0:9e:b8:11:
         49:e6:48:1f:9a:3b:f0:b1:e0:44:d9:2f:24:cf:b6:5a:53:bb:
         ad:ca:5b:c5:c0:d2:e9:aa:2f:8f:54:e9:27:ea:60:32:e7:8a:
         19:df:c0:6c:44:7d:4e:9b:77:34:d6:f3:b9:26:cc:84:f3:41:
         78:49:e5:cc:5b:8a:b2:61:56:f9:ec:33:0c:6c:1d:82:7d:84:
         fd:7e:f2:e4:10:47:88:10:73:e5:c4:d2:a6:e2:df:0f:a9:24:
         12:0f:ab:8c:92:30:88:e6:6f:60:12:04:16:15:da:02:03:67:
         d9:d7:60:39:92:88:bd:01:78:01:3e:41:74:df:cc:db:a2:85:
         83:6c:94:05:40:d7:58:21:0b:41:7d:64:80:8c:bc:82:5e:68:
         a5:4b:49:d2:bf:e1:92:36:ec:e6:ba:26:15:32:73:69:42:61:
         6a:d1:4d:0d:00:34:85:06:22:6d:70:0a:47:fb:3f:37:d1:46:
         d4:8a:6b:ca:fc:d0:da:98:3c:05:f7:5d:30:d6:bc:34:31:dc:
         b2:9d:37:91:4d:0b:81:93:70:b8:69:f2:a3:48:30:86:a3:ad:
         5b:48:cc:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6i2OEkFUbS7kjOaQ+sewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMjU1YjY0Yzk2YzAxMGJkYTM3ZGYyM2Q4OTI2OGU4ZTQ3
NDhkZDMwHhcNMjUwODA4MjMwMDM2WhcNMjUwODA5MjMwMDM2WjAzMTEwLwYDVQQD
EygxY2M4MDU1NjM4MmMyMDhhYTQyN2Y5OTQyNGZkYjg0NDg3OWYxZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM+eB14Yy3+fBpN74xA8fICUDF30
3RQJvi+bSQJaYIRXi5GkVDvFGk0UCVrvXyciDv0eSfzPkuaNxBEL2JPhkKWndOR6
rlVor+K0eEO4at+ZKYc+wUCn1JddY2SQ2YPhIksbUBQLSFtMbM/LfyFtRETYwmdj
OjeDMDq/nSE9W+OGvBtjctCVAH96OGDpLwoLg+inf2QQ4gb/ySZRTzeSYYROIEon
CzWNXdNojOxZJ4AdsFu6tWkU9s1e6E3P5WYFTnXWM6gMUIjUaKInU2CYS5YRrojl
0c59vaklKkBr38/PnyJt5lH7F5Syi8vJ4WdHh/4h5rfvfF/rb+WdxwwnCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzIBVY4LCCKpCf5lCT9uESHnx0GMB8GA1UdIwQY
MBaAFIAlW2TJbAEL2jffI9iSaOjkdI3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xODc2MWUtMjU2NC00MjBlLWFmZjUt
NjM1ZTY1YjhiOTJlLzEvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8xODc2MWUtMjU2NC00MjBlLWFmZjUtNjM1ZTY1YjhiOTJl
LzEvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2DMEr8V
LNMUOuyLgBA1yrgAf2a+zhkz04Pq9oUsPP7AnrgRSeZIH5o78LHgRNkvJM+2WlO7
rcpbxcDS6aovj1TpJ+pgMueKGd/AbER9Tpt3NNbzuSbMhPNBeEnlzFuKsmFW+ewz
DGwdgn2E/X7y5BBHiBBz5cTSpuLfD6kkEg+rjJIwiOZvYBIEFhXaAgNn2ddgOZKI
vQF4AT5BdN/M26KFg2yUBUDXWCELQX1kgIy8gl5opUtJ0r/hkjbs5romFTJzaUJh
atFNDQA0hQYibXAKR/s/N9FG1IpryvzQ2pg8BfddMNa8NDHcsp03kU0LgZNwuGny
o0gwhqOtW0jMCg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:53:27 2025 by rpki-client