Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File:                     GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier:          54qmQKtB5JRuoRcDIH28EY0QWDb2l050WGz0EqG3Y2M=
Subject key identifier:   6C:CC:02:43:D7:78:12:7A:71:73:23:D8:F7:6B:B9:83:83:5E:20:3E
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer:       /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial:       019849D37B1481DC62AEBE9A46D32F420644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number:          15D6
Signing time:             Sun 27 Jul 2025 03:00:52 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:52 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:52 +0000
Files and hashes:         1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=)
                          2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: 1VGVncMDoaLWBXvyyK5Eu/TG+L+jaASDyotV/jZH4qM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:7b:14:81:dc:62:ae:be:9a:46:d3:2f:42:06:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
        Validity
            Not Before: Jul 27 03:00:52 2025 GMT
            Not After : Jul 28 03:00:52 2025 GMT
        Subject: CN=6ccc0243d778127a717323d8f76bb983835e203e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:49:d1:f6:1a:c7:12:2b:33:d3:9a:bb:94:
                    f3:57:76:8a:7b:aa:89:88:42:d7:ae:8e:70:f4:cd:
                    d6:9a:76:61:b5:1b:eb:ae:d2:f9:5c:71:91:38:0e:
                    35:d1:36:db:78:6b:28:09:8a:a9:32:f4:e6:c0:48:
                    9b:d8:36:3f:92:7a:de:2c:56:1f:09:a1:ee:92:20:
                    88:92:dd:d3:e7:a9:da:88:72:82:df:af:6b:0f:47:
                    e8:7b:d8:a7:a0:04:62:0c:56:3b:bf:dc:50:0a:15:
                    01:8e:cd:32:b0:dc:b6:64:cb:ed:1d:6a:c3:ef:af:
                    15:36:39:cd:58:a7:e8:2a:48:e8:db:da:4a:17:0e:
                    17:d7:26:ac:2c:d3:77:aa:70:34:91:bf:f3:75:84:
                    09:fa:b0:af:bb:d2:95:5d:23:60:be:c5:9e:ee:52:
                    61:34:4e:48:f1:fe:e3:13:4f:9b:52:7e:fb:d9:bd:
                    1c:2a:6f:18:81:16:1f:87:3c:34:73:39:61:b9:2e:
                    d8:14:6f:1d:3c:75:a5:e3:bd:e7:b6:a4:c0:eb:45:
                    80:b5:d1:4b:d0:05:dc:ca:dd:c0:00:ae:e3:88:90:
                    fc:ab:e2:e7:ae:20:63:11:c9:cc:1a:fa:42:93:2d:
                    9e:ef:89:8a:f0:ac:14:65:df:80:0c:ca:7d:aa:ab:
                    64:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CC:02:43:D7:78:12:7A:71:73:23:D8:F7:6B:B9:83:83:5E:20:3E
            X509v3 Authority Key Identifier:
                keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:26:05:50:31:67:e8:9c:e7:a9:02:f1:17:2d:54:05:7c:67:
         fa:96:bb:a7:c0:c0:7e:ab:9f:33:24:2f:5d:de:eb:68:65:eb:
         02:5a:24:6d:c8:f0:c9:1d:f9:d4:5d:f0:40:80:74:a3:29:c8:
         38:1c:37:89:5c:3a:f8:43:3d:ad:15:1b:42:f1:55:9c:d6:77:
         24:ec:5a:1d:09:9f:ae:95:ad:17:32:9c:94:53:12:14:d7:1a:
         26:c2:01:4f:cf:8d:12:f1:75:a2:da:d9:55:bc:f6:68:e5:c0:
         4c:46:90:14:5b:30:5d:a4:32:6c:bf:36:75:a5:fe:84:83:8f:
         ff:0e:aa:0b:b2:e9:37:83:8f:94:09:46:c8:f8:34:c0:9a:e7:
         12:0c:10:5c:c5:47:dd:e5:0d:f1:f5:23:59:e2:be:41:51:ed:
         ec:f4:21:e6:0b:aa:d1:d4:65:1f:5e:68:df:5a:79:0a:41:f5:
         b1:15:e0:fc:e6:95:15:3a:55:c4:6f:bd:b0:6f:8a:64:59:4f:
         3f:1a:7d:39:19:92:ba:08:03:d7:95:99:64:e8:b9:2a:0d:16:
         e0:db:43:24:c9:04:6b:2f:86:df:f8:af:cc:20:5f:94:4b:b0:
         33:d9:27:25:cb:ba:6f:0b:9d:c7:a9:c4:7a:34:4f:46:25:be:
         31:d8:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:35 2025 by rpki-client