Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File:                     gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier:          ugl/fLnRuNtX0COSIZUQU6ZMV1Zat17RmCHWi+GZlPo=
Subject key identifier:   5F:6C:32:2A:E3:3F:0B:87:EA:70:A5:6C:93:D6:B0:D0:D0:31:51:66
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer:       /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial:       01989E5FD5AC70EEC498AD0930569B7A275A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number:          1446
Signing time:             Tue 12 Aug 2025 13:02:17 +0000
Manifest this update:     Tue 12 Aug 2025 13:02:17 +0000
Manifest next update:     Wed 13 Aug 2025 13:02:17 +0000
Files and hashes:         1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: I4Kg1dUMvNFvHrHOk0ivoFTBKyJVTjIHst4c5GjjBqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:5f:d5:ac:70:ee:c4:98:ad:09:30:56:9b:7a:27:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
        Validity
            Not Before: Aug 12 13:02:17 2025 GMT
            Not After : Aug 13 13:02:17 2025 GMT
        Subject: CN=5f6c322ae33f0b87ea70a56c93d6b0d0d0315166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:f7:53:75:fc:8f:ee:02:26:73:c2:fe:9c:
                    b8:ff:ce:40:d2:41:e8:45:01:15:a8:08:26:df:37:
                    7a:c1:8c:13:ff:e6:05:f3:c2:9d:fb:d2:a8:e4:2a:
                    44:cf:50:84:09:3d:70:b1:52:39:e9:8e:3d:a2:d0:
                    65:53:b3:f5:e8:2a:81:ea:43:8f:8b:30:45:b4:f4:
                    d7:4c:d0:52:26:e8:29:fa:99:f0:05:4b:fb:e6:3b:
                    4c:f5:63:0a:d7:f6:a5:85:e0:60:c1:7e:61:89:68:
                    96:e6:79:df:74:a1:d3:c6:25:15:a4:55:13:02:cf:
                    e2:2b:b8:ed:41:2d:98:7c:40:3a:9a:f3:20:49:b2:
                    1a:73:d7:0f:ea:71:33:35:04:ef:9d:59:0b:bf:ab:
                    71:3b:c5:57:29:51:49:0f:0d:44:5f:b0:0e:f8:4c:
                    ac:0b:b4:ad:1c:9e:ae:91:dc:50:46:74:68:20:e2:
                    13:f0:7e:df:54:3a:d8:a9:12:d9:0e:08:60:26:f7:
                    ca:11:8b:dd:6d:d3:6a:5b:fd:7d:0e:91:0a:8b:2d:
                    94:5f:e2:cf:0a:a3:ed:75:ec:9d:3b:cd:c0:d3:57:
                    c0:d1:b0:a8:b3:5d:13:2e:28:7a:85:7f:66:33:c4:
                    0d:46:89:9f:cd:43:48:2e:85:7e:d3:b3:c7:e7:88:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6C:32:2A:E3:3F:0B:87:EA:70:A5:6C:93:D6:B0:D0:D0:31:51:66
            X509v3 Authority Key Identifier:
                keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:76:81:bd:1c:dc:96:f1:6a:3f:5f:b7:aa:21:7a:4f:b7:0f:
         6f:5a:eb:92:67:a1:e5:c1:da:6b:98:d9:f0:44:b6:2e:18:c7:
         6b:0d:7f:bb:4d:7a:4a:99:02:de:df:bb:b5:46:db:d4:b7:73:
         d9:3f:82:7a:46:bc:15:ae:5c:c4:fd:fb:01:8f:88:0f:00:28:
         ca:c6:97:9f:f5:b8:00:1a:33:75:ac:d5:00:7d:51:61:af:e0:
         13:99:bc:f2:55:c9:83:f3:ca:7e:ca:b0:b8:aa:02:b3:4a:b2:
         94:4c:f2:16:b1:ff:00:9a:b9:de:f7:c0:6f:71:e6:ec:db:bb:
         36:56:5c:8d:0a:43:59:14:ac:96:b2:2c:b5:0f:73:cf:85:16:
         6d:f2:6b:b3:98:25:77:22:08:ee:6d:11:65:8e:aa:3a:c0:4d:
         0e:50:b7:81:4e:c5:68:52:47:bb:5c:74:d2:43:0f:e9:f8:68:
         a1:86:12:fb:cb:46:61:ba:2e:6d:e0:47:9d:92:2c:0a:21:a7:
         91:67:18:61:25:4d:84:fb:c8:39:51:40:2c:5e:26:be:1f:1e:
         44:d9:15:4a:55:13:87:c8:73:8f:5b:b5:cd:3c:25:c1:7d:ec:
         84:9f:7d:a2:c7:21:f0:e8:63:7e:b3:88:93:14:eb:48:36:87:
         39:b1:dd:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieX9WscO7EmK0JMFabeidaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZDU1N2E4ODY4ZTZkMjYxNmFkMzY3NTRkYzZkYzkxMmI3
Y2Q3ZDYwHhcNMjUwODEyMTMwMjE3WhcNMjUwODEzMTMwMjE3WjAzMTEwLwYDVQQD
Eyg1ZjZjMzIyYWUzM2YwYjg3ZWE3MGE1NmM5M2Q2YjBkMGQwMzE1MTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5b3U3X8j+4CJnPC/py4/85A0kHo
RQEVqAgm3zd6wYwT/+YF88Kd+9Ko5CpEz1CECT1wsVI56Y49otBlU7P16CqB6kOP
izBFtPTXTNBSJugp+pnwBUv75jtM9WMK1/alheBgwX5hiWiW5nnfdKHTxiUVpFUT
As/iK7jtQS2YfEA6mvMgSbIac9cP6nEzNQTvnVkLv6txO8VXKVFJDw1EX7AO+Eys
C7StHJ6ukdxQRnRoIOIT8H7fVDrYqRLZDghgJvfKEYvdbdNqW/19DpEKiy2UX+LP
CqPtdeydO83A01fA0bCos10TLih6hX9mM8QNRomfzUNILoV+07PH54iqHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9sMirjPwuH6nClbJPWsNDQMVFmMB8GA1UdIwQY
MBaAFIHVV6iGjm0mFq02dU3G3JErfNfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jOTIzM2MtMTI1Yi00YzU1LTkyNjgt
ZGZiYTE1ZTRiN2E1LzEvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jOTIzM2MtMTI1Yi00YzU1LTkyNjgtZGZiYTE1ZTRiN2E1
LzEvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHaBvRzc
lvFqP1+3qiF6T7cPb1rrkmeh5cHaa5jZ8ES2LhjHaw1/u016SpkC3t+7tUbb1Ldz
2T+Ceka8Fa5cxP37AY+IDwAoysaXn/W4ABozdazVAH1RYa/gE5m88lXJg/PKfsqw
uKoCs0qylEzyFrH/AJq53vfAb3Hm7Nu7NlZcjQpDWRSslrIstQ9zz4UWbfJrs5gl
dyII7m0RZY6qOsBNDlC3gU7FaFJHu1x00kMP6fhooYYS+8tGYboubeBHnZIsCiGn
kWcYYSVNhPvIOVFALF4mvh8eRNkVSlUTh8hzj1u1zTwlwX3shJ99osch8OhjfrOI
kxTrSDaHObHdGQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:57:46 2025 by rpki-client