Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft
File:                     GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft (raw, json)
Hash identifier:          gCUGkG503i/Zv0qj8deNjFJVtyGgkblSeoxKrwyT5RM=
Subject key identifier:   56:F0:DB:C2:6E:14:72:9E:7A:E8:2C:BE:15:F6:49:24:A0:8F:C7:61
Authority key identifier: 18:2D:69:63:F8:F8:04:58:D8:41:CA:AE:F1:58:B9:92:AB:40:59:C7
Certificate issuer:       /CN=182d6963f8f80458d841caaef158b992ab4059c7
Certificate serial:       019847782E286049AA433CCA013CF0F3F047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft
Manifest number:          15FC
Signing time:             Sat 26 Jul 2025 16:01:55 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:55 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:55 +0000
Files and hashes:         1: GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl (hash: gKTCYPQ2UESE0g/IBC9R2Khz2mF3TUPnfYUpmydoblE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:2e:28:60:49:aa:43:3c:ca:01:3c:f0:f3:f0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182d6963f8f80458d841caaef158b992ab4059c7
        Validity
            Not Before: Jul 26 16:01:55 2025 GMT
            Not After : Jul 27 16:01:55 2025 GMT
        Subject: CN=56f0dbc26e14729e7ae82cbe15f64924a08fc761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:7f:b9:ae:b2:78:2c:3d:eb:cc:b7:4a:fc:
                    5f:fb:18:de:64:f0:9d:18:a1:c7:34:5b:83:3a:b3:
                    39:83:f4:97:11:db:8a:f7:fe:d4:5f:52:fc:c1:21:
                    a0:3d:d7:6c:98:bc:8f:08:d3:38:e4:ec:0c:a6:e3:
                    9a:8c:8a:33:06:b4:99:d1:f8:5e:b5:32:55:c4:bb:
                    19:65:32:a6:44:aa:08:cc:f3:16:34:d0:fd:0b:0e:
                    cb:c0:52:85:a2:5b:6e:7b:79:eb:3c:b4:5b:b8:7d:
                    79:a2:44:0e:ba:e2:b8:86:0f:7f:78:8f:d9:1d:af:
                    28:59:82:28:2a:d3:88:8c:15:bc:67:d7:44:97:d4:
                    48:ed:4e:43:8f:4a:60:c1:50:0a:72:48:b1:58:ed:
                    4d:57:e9:40:90:99:12:69:6a:c9:ae:81:e8:60:fe:
                    fc:68:6b:30:5c:35:12:4f:e8:f3:cd:56:5c:41:70:
                    69:41:61:7d:dd:9a:53:de:b0:9e:2f:3a:f4:5c:10:
                    3e:ef:ec:d4:0a:c1:f4:dc:8d:23:2e:e9:39:07:90:
                    57:2c:78:f7:fb:1c:44:c0:dc:ff:fa:21:c0:59:7d:
                    ff:9b:ca:09:10:e0:fd:fe:2b:48:89:b5:45:27:dd:
                    2e:34:d1:70:1c:cf:7a:28:48:9c:98:13:de:0e:7a:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F0:DB:C2:6E:14:72:9E:7A:E8:2C:BE:15:F6:49:24:A0:8F:C7:61
            X509v3 Authority Key Identifier:
                keyid:18:2D:69:63:F8:F8:04:58:D8:41:CA:AE:F1:58:B9:92:AB:40:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c3:97:2d:b6:a5:7d:f6:45:24:01:05:56:d2:8a:2c:fc:64:
         5a:8a:2c:6e:15:27:64:ae:76:a1:6a:2a:ca:d8:c9:ad:66:3c:
         e4:69:35:4c:41:d6:74:c7:c6:04:c4:98:09:da:81:eb:00:54:
         7e:e0:2d:df:ee:bb:c0:cf:c9:ac:ce:d2:a4:b1:1b:7f:cf:9f:
         bf:cd:28:85:12:73:ea:81:3e:ad:92:ad:2f:d3:c3:21:1c:a3:
         04:29:89:ac:07:16:42:0b:b7:ca:03:03:08:9b:d5:03:02:86:
         ac:2d:e9:09:e4:20:50:66:73:c8:91:d9:2f:d0:ee:14:f7:d4:
         6d:a3:68:df:09:2c:a5:6c:f7:10:99:92:97:6b:7f:e3:2b:b4:
         6c:ce:d9:fa:9f:3c:e6:ab:20:44:27:d6:bf:ee:af:56:33:bb:
         0c:42:cb:a0:70:4c:b9:4e:72:2a:62:50:fd:c0:aa:d8:d6:04:
         1f:cd:26:93:fc:7b:77:4e:12:52:d7:79:fd:3f:36:ac:7a:4b:
         c6:d3:1e:51:89:fb:4c:a0:df:2e:60:a9:54:96:50:0a:f3:01:
         b9:74:b6:e6:58:30:04:79:50:13:ed:86:58:ad:07:1d:f6:64:
         6b:90:30:ed:65:85:ad:00:94:f9:5c:f3:61:eb:87:b0:b1:e2:
         d2:c2:19:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:40 2025 by rpki-client