Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File:                     GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier:          dlCVgDYuT3leGmYq2+HaQllrEsKO0ysO/Q3dnWA5O6U=
Subject key identifier:   C4:62:0B:59:6C:86:03:C8:8E:5F:C9:5D:15:8C:0F:BA:32:E3:00:04
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       01984AAF30467508552511EDA14479A48BAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number:          0DC7
Signing time:             Sun 27 Jul 2025 07:00:51 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:51 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:51 +0000
Files and hashes:         1: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: B8NotTIQPxVXWKA7kcaOrri+NdUpcvJV7x/N+xJhKbg=)
                          2: UJ4olMWApP7MwaE2AnHAAWvvURE.roa (hash: j8yhG+CkxtZBOA9heOK1DNmQYHzy/3/vJayn7f/Unnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:30:46:75:08:55:25:11:ed:a1:44:79:a4:8b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: Jul 27 07:00:51 2025 GMT
            Not After : Jul 28 07:00:51 2025 GMT
        Subject: CN=c4620b596c8603c88e5fc95d158c0fba32e30004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:ff:31:da:79:ac:f5:29:e2:9b:8d:5c:1f:
                    03:a7:db:63:df:d3:9c:2c:82:6c:ed:16:21:ee:06:
                    85:9c:64:66:aa:0a:f7:4a:fb:eb:77:04:5c:07:76:
                    0c:1a:d1:dc:76:79:f4:99:62:85:a3:16:37:8d:65:
                    de:9e:5b:db:da:a9:e2:a7:41:fc:fa:42:ba:93:1b:
                    59:bc:0b:8a:8f:b0:da:dc:e8:8b:f1:64:b9:02:34:
                    a9:7c:e6:34:f8:23:0e:13:04:19:24:b5:04:50:03:
                    87:53:dd:86:ad:e8:40:e0:b2:16:82:bd:76:64:22:
                    2c:f9:79:60:03:8e:aa:9c:ac:65:1f:1e:13:82:13:
                    8f:23:5f:9c:e5:11:a1:31:dc:b2:53:48:68:d6:9a:
                    90:2a:a2:a4:22:4e:82:95:93:c1:c9:a9:bd:07:bb:
                    eb:4e:45:b5:0d:40:8a:42:c5:cb:b9:e4:0f:de:28:
                    d2:76:7a:cf:a1:b8:14:0b:63:ad:d1:d5:46:eb:f1:
                    bb:c3:4b:db:bb:44:1b:59:22:49:57:2b:ba:d1:9c:
                    ea:97:b6:6c:76:17:fb:16:33:8c:18:fc:83:eb:4e:
                    d0:92:60:c6:d8:6e:a4:22:ef:17:44:4e:dc:b8:df:
                    d3:16:e3:96:9e:1b:eb:a7:fe:05:df:e8:dc:23:6b:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:62:0B:59:6C:86:03:C8:8E:5F:C9:5D:15:8C:0F:BA:32:E3:00:04
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bd:a0:05:f1:3a:5c:4e:30:ef:3f:98:5b:c7:83:2f:91:6d:
         80:45:b8:c7:a8:38:f8:1f:35:a3:62:b7:01:ae:3c:45:03:2d:
         cb:8d:09:8d:3f:f6:22:9a:bc:d8:7f:b9:9f:09:ce:0a:a7:8a:
         b9:62:a7:33:0a:ad:50:09:db:f3:17:ee:01:7c:2d:d5:e8:cc:
         78:a6:3e:5b:12:e5:d4:fa:88:cc:80:85:85:13:fa:33:e0:e5:
         db:bc:56:91:fd:3f:98:8f:ff:5b:8c:9a:b3:95:ce:4c:22:7b:
         6f:ac:ff:cc:ab:52:85:de:d2:88:39:1e:70:5b:da:9e:b6:01:
         89:55:ae:da:67:24:bf:81:c3:0a:3e:5a:74:f9:72:f2:3a:39:
         b5:3b:c3:f8:cd:fe:cd:fe:b9:e8:61:40:e3:e7:51:29:3b:9a:
         b6:28:dd:0c:91:83:c8:b5:d6:bb:a6:97:de:d0:f7:c7:77:04:
         a0:7b:69:ee:71:c7:d8:e6:a4:e5:72:32:31:e5:be:82:a8:9d:
         2b:c1:8e:ab:86:58:bd:59:39:d9:b1:05:5b:72:dd:bf:f2:e1:
         3f:12:d3:c8:82:0e:c1:29:da:13:d2:16:c2:26:fe:4f:e0:43:
         9a:34:5b:66:ba:d4:60:49:83:a6:55:34:8a:2d:82:55:cf:b4:
         2f:c1:99:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrzBGdQhVJRHtoUR5pIuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZGMwMDkzYzVhZjg5NGNmNTIwYjU5MzZlMzBiMjE1MDkw
ZGU5ZjgwHhcNMjUwNzI3MDcwMDUxWhcNMjUwNzI4MDcwMDUxWjAzMTEwLwYDVQQD
EyhjNDYyMGI1OTZjODYwM2M4OGU1ZmM5NWQxNThjMGZiYTMyZTMwMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR3/Mdp5rPUp4puNXB8Dp9tj39Oc
LIJs7RYh7gaFnGRmqgr3SvvrdwRcB3YMGtHcdnn0mWKFoxY3jWXenlvb2qnip0H8
+kK6kxtZvAuKj7Da3OiL8WS5AjSpfOY0+CMOEwQZJLUEUAOHU92GrehA4LIWgr12
ZCIs+XlgA46qnKxlHx4TghOPI1+c5RGhMdyyU0ho1pqQKqKkIk6ClZPByam9B7vr
TkW1DUCKQsXLueQP3ijSdnrPobgUC2Ot0dVG6/G7w0vbu0QbWSJJVyu60Zzql7Zs
dhf7FjOMGPyD607QkmDG2G6kIu8XRE7cuN/TFuOWnhvrp/4F3+jcI2sh9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRiC1lshgPIjl/JXRWMD7oy4wAEMB8GA1UdIwQY
MBaAFBrcAJPFr4lM9SC1k24wshUJDen4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUt
ZjU5NDhjNzE2ZTE2LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUtZjU5NDhjNzE2ZTE2
LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh72gBfE6
XE4w7z+YW8eDL5FtgEW4x6g4+B81o2K3Aa48RQMty40JjT/2Ipq82H+5nwnOCqeK
uWKnMwqtUAnb8xfuAXwt1ejMeKY+WxLl1PqIzICFhRP6M+Dl27xWkf0/mI//W4ya
s5XOTCJ7b6z/zKtShd7SiDkecFvanrYBiVWu2mckv4HDCj5adPly8jo5tTvD+M3+
zf656GFA4+dRKTuatijdDJGDyLXWu6aX3tD3x3cEoHtp7nHH2Oak5XIyMeW+gqid
K8GOq4ZYvVk52bEFW3Ldv/LhPxLTyIIOwSnaE9IWwib+T+BDmjRbZrrUYEmDplU0
ii2CVc+0L8GZ4g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:25 2025 by rpki-client