Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File:                     gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier:          JGztNxz6AgUimxNbIbQxfiGZi3ClQCEdAfmfQx5P8Pk=
Subject key identifier:   88:A1:39:EF:9F:48:17:9B:AD:6F:73:97:43:7D:DC:71:72:5B:29:A5
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer:       /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial:       01984852BEE50AC7F935C125106599286CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 20:00:39 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:39 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:39 +0000
Files and hashes:         1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=)
                          2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: /5yAbkv/7wFJh5W3zRC//JYW88i30s7wWllrScgUCbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:be:e5:0a:c7:f9:35:c1:25:10:65:99:28:6c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
        Validity
            Not Before: Jul 26 20:00:39 2025 GMT
            Not After : Jul 27 20:00:39 2025 GMT
        Subject: CN=88a139ef9f48179bad6f7397437ddc71725b29a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:65:64:f2:ba:90:13:1b:84:cd:05:84:20:
                    54:f7:db:ee:25:b0:6a:a7:ba:bf:fc:c7:e3:cc:32:
                    cc:d5:37:e9:e3:60:75:08:b9:1a:56:cc:0f:71:d3:
                    bd:4a:0c:a5:76:34:89:95:44:a0:e2:3f:5b:c2:79:
                    f3:35:fc:a8:61:a4:e7:71:89:7a:47:56:ac:e6:62:
                    7e:da:d4:68:df:c2:b2:2f:f5:48:46:1c:80:74:ab:
                    da:18:f9:97:11:40:4c:43:fa:d5:be:ad:d2:89:d2:
                    7f:f0:be:83:0c:27:5c:79:00:cb:98:6f:d1:84:b6:
                    2d:f5:27:4b:c4:a5:68:fe:9f:ad:38:cc:af:f6:72:
                    64:c2:8c:ac:58:79:fa:55:38:c3:b9:88:17:9b:ba:
                    d1:94:fd:64:6a:42:a1:b3:76:31:2f:76:d3:a7:71:
                    2e:ed:6b:e1:bd:57:b4:91:54:b0:e2:7f:b7:5a:fa:
                    b3:03:1e:d9:a7:cc:63:c0:b8:51:f1:d1:81:9e:b0:
                    e5:e3:02:47:f3:40:59:99:a6:a5:92:76:ba:35:83:
                    55:16:46:81:a8:d2:87:90:8c:2c:2f:66:0d:8a:10:
                    d1:1a:3e:3d:09:bd:fb:d0:d1:a8:16:53:e5:d7:41:
                    75:d6:14:11:40:c7:52:c4:4c:80:0d:87:a4:9a:87:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A1:39:EF:9F:48:17:9B:AD:6F:73:97:43:7D:DC:71:72:5B:29:A5
            X509v3 Authority Key Identifier:
                keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:03:6b:2c:de:b1:27:17:9c:da:55:7b:7c:68:9e:ef:3a:
         29:87:d4:3b:9e:26:7f:49:a5:7e:37:4b:35:d3:ee:b5:98:11:
         4d:76:51:c1:69:30:5c:6b:eb:f2:9b:24:ec:f5:54:94:f5:c9:
         a7:d0:9b:26:b0:82:b5:26:70:4c:0e:f8:32:f5:e4:7d:54:2a:
         d7:b9:ad:1b:cf:e2:39:12:73:8f:5d:dd:a9:a6:a4:24:c4:ab:
         d8:e2:68:da:ec:d2:0d:bf:f6:0a:5b:bf:c7:fd:a4:b2:0d:b6:
         c0:2b:ec:e7:c0:00:f4:29:fd:6a:1a:c1:60:7e:4a:1a:d5:46:
         2b:f1:fe:e2:03:cc:5c:5b:32:94:93:cf:d5:ed:14:23:c7:ce:
         35:33:0c:ef:24:06:23:07:58:3d:59:3e:8a:51:7e:11:7b:82:
         8f:81:6a:06:ac:e9:4c:a3:22:81:1e:25:d1:79:8f:de:31:4c:
         7a:b1:4a:d0:b8:ca:b8:00:53:46:41:3b:30:ea:3a:61:59:4c:
         02:4b:2a:0c:ed:0e:10:32:76:7b:bf:0b:ce:42:bc:fb:6c:76:
         13:41:60:73:6c:80:cc:f3:e1:c0:21:e1:db:ab:ea:a6:f1:3b:
         d4:5f:83:aa:a9:e7:fe:37:7a:a6:75:e6:ba:f8:78:6e:88:4f:
         f0:c8:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:16 2025 by rpki-client