Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File:                     gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier:          5lX4Ir8pOeMk92hUdu7KcI0LrrXqL5rqsqBrOJs95+w=
Subject key identifier:   6A:3B:35:DE:4F:F0:A4:7D:42:A6:1B:B5:E5:54:48:5A:2D:C8:1A:7D
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer:       /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial:       019874870691836E635BC32735CDAFC1969D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number:          052E
Signing time:             Mon 04 Aug 2025 10:01:02 +0000
Manifest this update:     Mon 04 Aug 2025 10:01:02 +0000
Manifest next update:     Tue 05 Aug 2025 10:01:02 +0000
Files and hashes:         1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: StJ0GLtrthhAOxhlWleSZzZ5WtlvfLJS6uNYpxi2KEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:87:06:91:83:6e:63:5b:c3:27:35:cd:af:c1:96:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
        Validity
            Not Before: Aug  4 10:01:02 2025 GMT
            Not After : Aug  5 10:01:02 2025 GMT
        Subject: CN=6a3b35de4ff0a47d42a61bb5e554485a2dc81a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:a4:cb:92:a6:1c:d4:05:d2:58:6f:07:6c:
                    41:41:f9:e6:c9:f2:3b:4e:60:23:4f:26:47:77:33:
                    12:93:b5:11:93:4d:56:cc:d5:ed:72:b4:7a:a0:5e:
                    fa:c2:ad:4e:46:12:28:9f:1a:fa:ce:84:ed:44:83:
                    0d:51:71:7e:8e:c2:d4:d2:27:21:b9:ef:28:7e:5c:
                    9f:a1:15:b1:b7:40:80:4c:17:62:fe:49:23:0a:7d:
                    20:2b:ab:56:45:3b:ab:11:fd:f4:ca:f3:dc:e3:2c:
                    07:21:7c:0e:27:87:90:d3:e2:7a:ae:0a:1c:32:1e:
                    cf:af:a1:47:f2:a1:97:96:b3:85:08:4f:f1:e6:44:
                    5a:e5:50:e8:63:4e:f6:40:b3:3b:c4:74:59:81:47:
                    94:11:34:17:0d:83:8b:8b:60:57:a7:44:a5:8a:89:
                    24:50:64:79:3d:76:92:79:2b:d5:a6:ed:53:41:13:
                    97:29:0d:16:c7:15:46:4c:2c:f8:2f:9b:eb:b5:a2:
                    b0:09:5d:c4:12:57:f6:21:a1:b7:8a:02:48:97:ca:
                    f9:d5:5e:58:52:a5:32:4a:41:58:de:7b:ba:47:da:
                    62:13:4b:6e:fe:ef:29:b2:7c:18:9a:21:e8:70:2e:
                    01:2e:86:0d:aa:3a:5a:ec:1c:e3:b8:a5:e9:51:f0:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3B:35:DE:4F:F0:A4:7D:42:A6:1B:B5:E5:54:48:5A:2D:C8:1A:7D
            X509v3 Authority Key Identifier:
                keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7c:e3:1e:3b:d1:1b:d2:11:bb:95:92:0b:f5:88:40:a5:44:
         a8:fd:25:70:4b:ee:8e:48:a2:33:cd:d9:c1:7f:80:71:dd:e5:
         da:61:6c:5e:5c:0c:de:4b:ff:e4:e7:90:dd:81:7d:cd:4d:45:
         83:d3:d1:3a:fd:b1:d1:78:43:aa:5b:77:42:42:ed:71:33:33:
         87:ba:08:b8:c0:3a:21:eb:18:e3:74:80:be:f1:09:9d:bc:48:
         0d:2f:26:88:0a:ca:43:0c:d9:9b:f6:ac:c5:a9:a0:ce:53:63:
         0e:9e:51:8a:81:c5:99:7e:e7:6b:dd:ef:40:83:0e:8f:fa:a6:
         35:0b:3d:c4:04:5e:38:3a:2b:fb:75:fc:a0:30:3c:94:1e:25:
         b1:38:d2:fc:06:9a:d1:dd:61:aa:85:de:73:e2:f5:3e:31:59:
         24:5b:91:0c:9a:11:55:ed:36:bb:83:85:e6:5f:58:1e:fe:20:
         c0:78:9a:5c:03:b1:24:bb:93:2c:0b:e2:dc:94:c7:95:2b:fe:
         1b:41:0f:ea:92:cd:a6:36:c9:f4:b3:72:28:a1:b5:03:5b:f2:
         9b:a2:9b:79:bc:93:8f:d1:6e:ca:74:04:25:03:60:6f:c4:ae:
         01:25:43:27:86:44:4b:65:50:a6:63:be:4c:34:d3:a7:e6:35:
         a1:27:37:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:50 2025 by rpki-client