Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File:                     GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier:          feOlXfeXSwcIci1mAsn+4ioawieUTUxXULTkyHSr60M=
Subject key identifier:   2C:4D:B5:DD:9C:16:B6:50:D6:F3:A3:2D:BC:A6:4E:28:55:C1:25:63
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer:       /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial:       019894123B579151E0684EF82F7AA0392A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number:          1177
Signing time:             Sun 10 Aug 2025 13:01:19 +0000
Manifest this update:     Sun 10 Aug 2025 13:01:19 +0000
Manifest next update:     Mon 11 Aug 2025 13:01:19 +0000
Files and hashes:         1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: 5xyF6IbI4vlkkDFT9mrpLa5WZfXC8UPafwMd0PuUNfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:12:3b:57:91:51:e0:68:4e:f8:2f:7a:a0:39:2a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
        Validity
            Not Before: Aug 10 13:01:19 2025 GMT
            Not After : Aug 11 13:01:19 2025 GMT
        Subject: CN=2c4db5dd9c16b650d6f3a32dbca64e2855c12563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:31:0a:40:ee:09:24:d5:07:59:10:d7:d6:
                    38:41:46:a7:c8:71:b9:c3:eb:33:28:93:fa:57:b7:
                    35:e4:7c:5c:5a:1e:d4:70:70:32:c9:fe:a4:a2:a7:
                    38:46:6f:d2:93:3f:e7:c2:80:98:52:8e:5d:a5:c4:
                    14:e8:b5:45:cc:43:a4:ee:35:dd:5d:05:30:51:37:
                    35:51:06:27:9f:a8:3e:9f:82:54:6a:2d:1e:19:8e:
                    2c:2d:38:d0:49:fe:01:81:7e:4d:4f:5e:61:fb:7c:
                    c1:87:56:e9:52:94:fe:41:e1:92:15:86:f3:d8:50:
                    9f:f6:ae:60:d5:c0:ca:db:a5:47:69:83:10:b8:bb:
                    dd:25:69:6d:29:65:96:54:98:81:93:ad:80:43:b0:
                    fe:af:3e:fc:70:dc:84:40:74:e2:3a:19:83:3e:ed:
                    a8:af:eb:46:7e:28:79:98:83:bc:a1:a3:0a:8a:91:
                    61:02:6d:db:aa:46:19:27:34:db:e3:95:fc:ee:a9:
                    7d:d6:82:91:c2:1e:fd:d6:c9:e2:22:9c:25:c6:c7:
                    a4:14:d4:df:06:c3:a0:18:75:d3:bc:99:b7:de:48:
                    97:3a:97:5d:bb:54:e5:e3:64:53:1e:97:de:80:93:
                    74:c8:9c:0d:49:90:da:d6:ce:39:31:cf:75:51:cc:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4D:B5:DD:9C:16:B6:50:D6:F3:A3:2D:BC:A6:4E:28:55:C1:25:63
            X509v3 Authority Key Identifier:
                keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b8:b8:b8:fa:02:63:6d:15:cb:be:38:3a:44:66:54:4d:90:
         87:2a:d3:2e:01:40:62:ab:71:c9:f2:94:ad:1d:e2:1c:9f:46:
         69:09:b0:f3:e1:25:83:ff:a7:d2:df:19:94:df:0b:27:d4:12:
         e8:95:a9:93:d7:8b:a9:aa:57:53:17:a0:05:d9:66:a3:6e:ac:
         a7:3c:66:ff:54:51:3d:34:1d:c8:02:63:f2:5a:9c:db:34:88:
         84:a6:86:f8:5a:01:ab:16:87:a5:9f:ce:85:f9:78:9b:24:8b:
         f8:b8:03:1a:99:f3:0e:76:95:e2:77:05:4f:44:bb:a0:75:df:
         32:f7:6d:be:41:c4:19:f3:2e:ed:aa:d1:cd:7b:d0:ef:81:86:
         e7:1a:66:ee:2c:89:41:de:3d:fe:ec:a7:d3:fa:24:09:5b:c5:
         eb:3a:9a:bc:d9:3d:c1:5b:91:02:0d:d9:bc:4c:64:e5:b3:40:
         f8:ca:ac:61:69:b8:45:60:b6:1b:a9:53:84:2a:df:d8:d0:47:
         e1:05:8d:81:e5:82:7b:d8:95:ad:f1:68:9d:51:5e:16:56:37:
         a1:14:55:70:b8:71:cd:5d:c0:cf:f9:06:4c:8e:c3:eb:78:d7:
         01:41:98:94:58:e9:82:50:71:37:0d:38:b1:d7:61:26:2f:eb:
         b4:77:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:53 2025 by rpki-client