Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
File:                     GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json)
Hash identifier:          FtStNxDTYkhxBnA+A3Z8MDG3qoQa/4o+H+jqfj4QZ8k=
Subject key identifier:   32:E6:CA:15:83:4F:FA:81:81:3E:3E:9D:AD:D8:A8:43:1B:AA:98:37
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Certificate issuer:       /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial:       01984965AF7444F5F0A0E7DF868AC3021BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
Manifest number:          1517
Signing time:             Sun 27 Jul 2025 01:00:57 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:57 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:57 +0000
Files and hashes:         1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: hwtYd+l0W0LXm8cVHKrBX+T5GO8Nvq5Pn0d9LWAkZKU=)
                          2: NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa (hash: DjDvlZwqQlOEZrmGSn2/QarvAyBTsIXhSALa8HhYpv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:af:74:44:f5:f0:a0:e7:df:86:8a:c3:02:1b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
        Validity
            Not Before: Jul 27 01:00:57 2025 GMT
            Not After : Jul 28 01:00:57 2025 GMT
        Subject: CN=32e6ca15834ffa81813e3e9dadd8a8431baa9837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:14:17:fe:34:93:53:35:c3:ca:a3:1d:a4:
                    72:6f:34:90:43:40:73:e8:66:62:55:b4:f9:85:4e:
                    e5:a0:13:50:ec:70:8b:5d:24:45:f3:7e:a0:1b:0b:
                    0b:70:89:7a:a4:68:95:8f:57:05:2a:ef:91:80:3e:
                    fa:02:a4:23:0f:91:6a:16:12:96:3c:d5:9c:38:ae:
                    ba:64:83:47:02:e4:a0:36:e3:d5:d8:49:5a:80:8c:
                    1e:d1:ec:8d:06:47:51:62:a4:dd:7f:10:b3:77:2e:
                    e1:f6:8a:1c:3a:84:96:69:db:2a:0c:eb:41:42:05:
                    95:09:f3:98:09:05:d9:cc:7b:d5:fc:5e:46:be:9d:
                    aa:17:7c:28:41:d3:50:ca:91:dd:61:1a:ed:3b:86:
                    81:4a:77:5f:5b:3f:1b:67:31:33:be:de:ba:a2:d0:
                    80:aa:b5:5f:00:2f:32:f7:c0:fb:44:4e:f2:6f:a5:
                    07:7a:47:76:1c:d9:f8:05:4e:bf:47:55:1b:b2:6c:
                    e5:e9:c9:b2:d4:ca:b2:40:25:ac:db:43:ee:18:57:
                    0e:42:89:ae:9b:f3:87:ab:76:95:24:93:29:bb:d3:
                    5e:9e:53:9a:26:b5:54:ed:0e:85:56:27:91:8f:71:
                    10:28:f0:1a:e9:71:7c:a8:ad:fd:eb:4a:85:da:3b:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E6:CA:15:83:4F:FA:81:81:3E:3E:9D:AD:D8:A8:43:1B:AA:98:37
            X509v3 Authority Key Identifier:
                keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7d:a6:03:a8:bc:1f:5e:7c:d6:20:4d:b9:c7:20:b8:bc:12:
         69:80:2b:1a:64:87:e2:fb:cf:67:0e:42:24:45:23:e0:8f:c6:
         15:46:2c:8e:9b:75:79:e3:14:db:7a:e2:49:8c:7d:04:a8:87:
         dd:98:05:26:48:f5:13:5e:e3:7f:ff:25:99:56:31:a4:3f:d6:
         9d:4d:35:d8:ab:3b:c7:fa:1e:34:94:fd:0d:8f:5f:c8:6e:d8:
         c3:67:13:b4:54:21:92:24:06:27:c7:1d:8e:e4:88:4a:79:ef:
         df:b8:d9:ec:a5:3b:90:28:0b:35:f5:ac:33:f0:63:fe:34:52:
         58:9b:84:67:4b:a4:7e:bd:0c:c4:9f:a7:9e:7a:b8:69:52:58:
         a7:53:cf:50:76:0f:c2:0f:57:18:eb:d1:ac:aa:9a:5e:fe:9a:
         ca:7d:83:73:43:8e:b1:53:dd:30:9e:64:c5:cd:fd:a3:82:1f:
         88:6a:b8:06:c2:af:40:cc:84:59:09:c5:0c:39:cb:d6:24:28:
         aa:4a:38:1b:fe:1d:05:e4:2d:23:ca:bf:00:a1:78:0a:25:88:
         d8:26:ea:44:03:83:7f:f2:33:1d:51:cf:ac:95:53:c1:10:4e:
         80:60:89:40:58:af:66:49:2e:0b:67:03:00:8c:b0:de:71:ab:
         b1:0f:86:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:29 2025 by rpki-client