Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File:                     GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier:          fWWGK4LKv6Cy7JbVrrlXKTxRV8wvlnDiLe09XGYb4Fs=
Subject key identifier:   0B:05:D9:05:96:41:69:02:72:F7:76:5C:31:01:21:88:40:F4:2E:41
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer:       /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial:       0198481B4C3F5A6562936B066DDE77BC93A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number:          0EBD
Signing time:             Sat 26 Jul 2025 19:00:05 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:05 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:05 +0000
Files and hashes:         1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: VUBXDAVV3IXA3mY1fytVUZfqXXfIV/CKJSG1N4In0Fw=)
                          2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:4c:3f:5a:65:62:93:6b:06:6d:de:77:bc:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
        Validity
            Not Before: Jul 26 19:00:05 2025 GMT
            Not After : Jul 27 19:00:05 2025 GMT
        Subject: CN=0b05d9059641690272f7765c3101218840f42e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:fa:41:f5:20:2c:b6:b7:3f:9e:74:20:3f:
                    b4:2f:a3:81:bd:36:81:60:b4:62:f3:e6:e9:18:41:
                    45:aa:22:44:c6:37:21:8d:5d:a4:ca:85:f4:b6:ea:
                    ca:f5:ac:4a:de:d0:5b:79:15:15:e0:54:85:dc:fd:
                    d7:2b:08:bc:e7:94:ef:47:69:b6:c6:a3:bc:1c:90:
                    b4:ba:55:20:40:22:b9:2e:5c:9d:a6:32:56:38:75:
                    bb:bd:be:05:93:24:63:d5:7b:8c:5b:ea:2a:14:85:
                    ff:7e:ca:94:16:c2:1c:a7:b6:70:73:56:3f:01:30:
                    40:02:25:62:be:e3:5d:5b:49:6b:84:0f:de:6f:a7:
                    f5:db:6f:8a:c6:07:06:93:ef:18:98:d0:29:45:96:
                    0a:88:4d:59:b4:f5:9a:6d:35:d9:99:d9:a9:06:3b:
                    20:22:4a:75:07:eb:54:a4:d0:d3:44:86:30:01:07:
                    82:51:40:6f:f6:ca:50:4b:9d:33:de:67:13:1e:be:
                    09:36:3d:30:59:a3:35:80:bd:e3:1c:5a:66:f2:20:
                    cd:03:46:02:a5:5e:48:32:7f:85:ce:8d:e8:fa:de:
                    9e:78:e0:48:a2:7f:00:4f:c3:06:d7:82:9e:00:56:
                    fa:3e:ac:af:ed:c5:cd:c5:cf:29:26:f2:25:cb:97:
                    7c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:05:D9:05:96:41:69:02:72:F7:76:5C:31:01:21:88:40:F4:2E:41
            X509v3 Authority Key Identifier:
                keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:47:7e:3a:65:95:17:b2:ae:cd:70:97:eb:95:cd:a0:6f:fd:
         a7:6a:d3:4e:9e:d1:d7:f8:eb:b4:7f:78:8e:64:e2:20:55:f1:
         2c:b7:34:16:2d:2a:48:b4:d4:b9:65:6c:ba:a1:37:e8:bf:46:
         73:df:0a:92:bb:80:b9:b7:28:71:6f:2d:f0:9d:63:a6:30:0e:
         50:fa:42:1c:c6:ba:99:5e:6e:74:76:48:cb:15:02:b2:e8:75:
         c0:4f:d9:0f:6f:69:b9:3f:5e:6d:c7:c3:ae:05:21:37:e5:ba:
         c0:46:54:3d:0d:8e:e4:b3:0f:0f:90:d0:61:f2:0c:b4:ce:18:
         1a:d6:08:2b:7c:bb:bc:cd:30:7b:0e:97:97:6c:e4:ed:73:25:
         b0:53:a1:2f:b6:65:b0:26:11:43:fe:ff:36:d9:93:44:3d:10:
         2c:19:b7:41:fe:ca:28:09:cb:84:4a:3f:82:79:df:c7:cf:2f:
         f1:ee:44:08:38:a5:67:2a:57:71:f0:37:ed:d4:c5:49:4e:f2:
         a8:49:a7:2e:1b:03:e3:91:cb:6f:49:ce:3f:d9:82:85:ad:9b:
         1a:7a:35:b7:4d:11:0b:e8:34:98:93:32:76:1d:af:8a:12:1e:
         89:4c:13:25:66:a6:42:1f:9b:ab:55:e7:74:e7:c7:13:14:7d:
         4d:c7:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:15 2025 by rpki-client