Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File:                     GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier:          1+qXVCicJZmeQYDM3I0D2zXWWVPC3C0wU1EWB9nJNmI=
Subject key identifier:   F7:53:1C:0F:26:31:E3:7C:27:EF:80:81:05:48:09:60:B5:6D:2A:21
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       019845F663D7E91ABA775A19A2F8AE61155B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number:          1280
Signing time:             Sat 26 Jul 2025 09:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:31 +0000
Files and hashes:         1: 1TdnBIQpLOCBWH2mt28aivouF4I.roa (hash: OXerkvpTMgtDn41YlP30T5MtsanNBIBwFIzBvbUKvGE=)
                          2: 4wV3tNw8L-G2g-REyKg7rTv19xc.roa (hash: mlDNB6DLTguCsOh+3JJiKoaNz1XvyyZU+vhtwaeg1hU=)
                          3: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: sQlQlgyzzbmolBufNx92ngSK035gZ5hQvppdpWqCdUA=)
                          4: K4x7WnCPM92IfHKWVCrULIlUaVA.roa (hash: KVnqPoeOrxHfk6WulHu6MwITd97JNsKLMzaXFdfZRTU=)
                          5: L0erWF8zE1RnGBSaNfbAKYl2kd8.roa (hash: /zy+SS2a9gbTjEnXkpsItTqQEn8dlA3GKuajYSpZLoU=)
                          6: bGl-O1VWsJiqIgDexKk7dKheHQQ.roa (hash: 6KFHpVYSoKMAphsv2/6O6zAXDRyPyfaziYVLYjZHZ0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:63:d7:e9:1a:ba:77:5a:19:a2:f8:ae:61:15:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: Jul 26 09:00:31 2025 GMT
            Not After : Jul 27 09:00:31 2025 GMT
        Subject: CN=f7531c0f2631e37c27ef808105480960b56d2a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:7e:18:44:bd:b1:5e:97:f0:32:24:d5:c1:
                    7b:53:0b:7a:66:9c:12:b4:6d:89:e3:02:a9:0d:68:
                    13:55:75:49:84:f9:06:b1:d8:7f:06:bb:81:0c:d1:
                    e8:51:36:ff:1a:98:03:7b:2f:f1:09:88:f4:95:8b:
                    0f:8e:82:08:5c:e7:4d:13:a9:29:8a:d4:6a:e9:02:
                    b0:32:3e:5b:77:41:5d:a3:b9:9b:8e:ad:ce:d5:ac:
                    c0:c9:c2:3a:f1:a2:22:e0:a4:a5:82:c3:31:8d:89:
                    46:8d:32:3e:9b:92:e6:c8:76:4b:95:3a:24:34:f4:
                    f2:eb:a1:92:e9:7c:e4:ba:b3:f6:ef:7c:1f:cc:5b:
                    b3:51:45:89:e5:91:2c:53:ac:b6:24:f0:f0:07:10:
                    16:af:5f:93:ff:23:b0:70:b6:8f:ae:f4:02:6a:25:
                    0c:46:60:a6:e0:f0:7b:75:21:f9:4b:c9:41:c2:58:
                    6e:c8:40:d9:75:bc:d0:08:90:54:bc:0b:5d:10:d7:
                    d4:93:b5:78:3e:f9:2f:ce:3e:d6:e8:ec:1c:46:ca:
                    c5:97:5b:e6:62:40:b4:73:dd:19:b1:a0:7b:e8:5a:
                    56:14:16:33:d7:ab:95:22:ed:e0:63:ad:45:79:fd:
                    4b:0f:fd:3c:fa:b8:ee:11:64:27:1f:70:56:f4:d9:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:53:1C:0F:26:31:E3:7C:27:EF:80:81:05:48:09:60:B5:6D:2A:21
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:73:fd:a7:bd:c6:14:67:42:f6:74:c2:96:e7:90:98:15:1b:
         18:96:43:7f:65:03:14:ef:42:fd:3e:99:ad:70:f0:37:50:50:
         4f:d7:0c:85:4e:74:71:2b:22:75:7d:31:04:70:bb:7f:ab:e5:
         29:ae:6f:8e:c9:be:b7:b8:ca:d2:3d:71:29:75:a9:26:bd:bc:
         2f:d8:3c:91:10:ad:7b:0a:96:d8:be:b8:11:25:1c:52:a2:11:
         86:88:41:fc:0d:48:f8:8b:66:bc:2b:f4:32:8a:76:f5:86:2d:
         4c:4d:09:91:3b:77:88:70:b5:94:32:c7:eb:ca:6e:7f:8d:a2:
         5f:01:67:c1:2b:f9:61:b6:78:74:7c:42:7a:40:ac:74:f1:eb:
         7c:56:a4:09:b5:fe:df:bd:5b:b5:43:bb:c9:c7:b9:3e:b4:88:
         0e:76:eb:9f:e4:e7:cc:4b:ec:12:18:68:5e:eb:f1:f4:ca:15:
         cc:10:99:56:15:18:c8:b9:76:9a:8f:f3:c5:ec:26:9c:e2:f1:
         2d:96:2f:1c:86:fc:1e:1f:0f:5b:4b:93:8e:b2:ae:b6:68:5a:
         45:1c:9e:01:95:87:99:9f:e7:33:dc:ce:56:c3:7c:9c:03:63:
         72:65:96:ca:39:62:89:91:e3:6d:67:91:7f:d1:1a:ca:04:42:
         e0:43:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:54 2025 by rpki-client