Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          CdUY23NEPgbwaqXn+7Y1W7TjRrAOArIl+aeT3ueSumA=
Subject key identifier:   C4:3B:5A:16:BF:40:30:44:D4:9E:74:9E:0E:4A:7F:5B:CA:2D:4E:39
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       019849658BE3B61CCF420812898B59AB7D2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          0922
Signing time:             Sun 27 Jul 2025 01:00:48 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:48 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:48 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: /UZmHQFS6Bp8yJd4ETj4r6duNaCikH8jHq7x4F4499I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:8b:e3:b6:1c:cf:42:08:12:89:8b:59:ab:7d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: Jul 27 01:00:48 2025 GMT
            Not After : Jul 28 01:00:48 2025 GMT
        Subject: CN=c43b5a16bf403044d49e749e0e4a7f5bca2d4e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:41:4c:46:71:f7:ed:47:38:bd:59:89:25:
                    6c:99:d0:c4:fa:6c:f1:e2:10:35:dd:3f:86:b4:ac:
                    8a:e5:74:e9:f1:b6:b4:7e:5a:f1:29:54:fc:bc:73:
                    f9:99:2b:0a:e4:a6:a4:9d:d0:71:53:69:88:a9:e5:
                    4b:0a:7a:9d:4b:e2:a3:6a:7d:87:19:16:d3:2d:91:
                    b8:7d:37:53:0d:6e:7b:33:35:2c:70:24:d1:69:37:
                    89:97:0b:df:fd:5a:82:20:78:12:ef:26:d0:8f:0a:
                    d5:75:33:6c:0a:2c:fd:d7:d4:a8:c5:4a:d7:e1:bb:
                    e7:16:32:36:82:66:de:cb:b0:24:54:52:05:26:04:
                    c3:8b:37:2a:90:d2:56:68:db:b8:eb:7e:d9:8b:4f:
                    4a:7b:1a:2d:70:4f:8a:f8:53:4d:4a:5e:72:06:40:
                    66:14:8f:9f:2d:49:fb:7a:26:2c:e8:43:76:b6:18:
                    21:b8:4e:75:30:a1:e4:d9:80:ab:c5:74:ec:85:15:
                    fc:bf:a5:31:63:b7:88:2e:3a:67:da:8b:7e:c4:21:
                    cc:65:fd:0a:af:1d:71:3a:3e:b9:ab:27:7a:6b:d4:
                    a3:d0:1f:fd:9c:37:f9:54:3f:28:2d:93:f3:f1:aa:
                    4e:90:f0:13:7f:d6:e2:4f:ae:af:32:7a:17:a7:ee:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3B:5A:16:BF:40:30:44:D4:9E:74:9E:0E:4A:7F:5B:CA:2D:4E:39
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5c:a2:9c:31:10:ea:94:40:79:27:0d:e1:b8:36:87:6d:44:
         ac:3c:d6:22:28:e2:bd:b5:e5:11:53:67:84:cf:95:7f:97:3d:
         e2:61:9c:d4:86:ce:9d:22:54:2a:d3:bd:17:63:bc:68:3d:5d:
         76:9a:a0:59:55:d5:ce:53:14:1c:86:98:9e:bc:d2:d6:41:1d:
         de:73:75:97:f8:c1:50:14:52:1f:7a:7e:47:3e:02:97:e0:2c:
         6e:74:34:e0:ce:17:5a:40:de:e8:ad:9c:2a:1d:90:bf:e0:f7:
         7b:fa:c8:0c:a6:01:79:71:2c:b2:77:d4:a2:88:aa:3c:9b:8e:
         85:4f:66:0a:67:bd:10:d6:0f:cc:61:4b:04:58:b6:93:8f:ea:
         af:02:d1:85:e5:a7:39:c0:93:dc:2b:26:dc:2e:83:7d:6d:1c:
         38:7e:ac:82:59:81:46:61:4a:7d:4b:03:ba:b9:f1:59:8e:7b:
         74:43:f1:1c:19:55:cb:81:10:f5:ed:b9:1b:c0:34:64:c1:ee:
         18:39:ef:fd:05:eb:8c:80:1a:16:ba:d9:cc:19:c9:d7:86:85:
         0c:8a:d3:0d:8b:b3:21:c7:6d:7d:4d:b1:bb:8a:57:d6:1c:95:
         5b:78:7d:68:e5:83:f8:73:48:ad:fc:5e:d7:a5:9d:e7:62:5b:
         ee:0d:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:47 2025 by rpki-client