Manifest

$ rpki-client -vvf rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft
File:                     8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft (raw, json)
Hash identifier:          cSVE6rJx9fdl4RLKywPFZ3JbqDZaAXeTTWzVApTZhv8=
Subject key identifier:   C8:57:38:CC:A2:25:02:12:E6:58:3D:5A:20:0B:3D:11:28:A0:05:CD
Authority key identifier: 8D:77:2C:54:E3:D9:08:0E:A2:B7:8E:70:34:FD:84:1B:67:57:CD:44
Certificate issuer:       /CN=8d772c54e3d9080ea2b78e7034fd841b6757cd44
Certificate serial:       68620389C67926DDF2612AE1C57EA276D0D00152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXcsVOPZCA6it45wNP2EG2dXzUQ.cer
Subject info access:      rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft
Manifest number:          09
Signing time:             Tue 11 Nov 2025 09:30:25 +0000
Manifest this update:     Tue 11 Nov 2025 09:25:25 +0000
Manifest next update:     Wed 12 Nov 2025 10:29:25 +0000
Files and hashes:         1: 8D772C54E3D9080EA2B78E7034FD841B6757CD44.crl (hash: jocxev8qHBzdg3ZLiclHaiKyMkhkjCj4y88FRVG1plI=)
Validation:               OK
Signature path:           rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.crl
                          rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jXcsVOPZCA6it45wNP2EG2dXzUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:62:03:89:c6:79:26:dd:f2:61:2a:e1:c5:7e:a2:76:d0:d0:01:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d772c54e3d9080ea2b78e7034fd841b6757cd44
        Validity
            Not Before: Nov 11 09:25:25 2025 GMT
            Not After : Nov 12 10:29:25 2025 GMT
        Subject: CN=C85738CCA2250212E6583D5A200B3D1128A005CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2d:3a:51:f9:da:8e:03:95:8f:6a:64:25:b1:
                    6a:72:17:e2:16:60:82:e9:78:3e:ee:06:e2:64:3e:
                    b2:71:d3:fe:95:74:01:71:63:f9:69:77:2f:bb:65:
                    01:ac:51:cc:52:3b:8a:37:45:70:e9:be:a5:a2:79:
                    65:b2:60:1d:f3:54:1e:cb:45:bf:56:ba:cd:4c:e1:
                    a8:86:ed:b8:c8:e8:5b:65:14:32:2f:43:d9:4d:0b:
                    6b:26:ef:6d:f0:d2:e0:c0:8c:a8:73:9b:49:e9:ec:
                    e5:0f:50:11:13:e3:f4:be:b5:0b:41:c7:77:43:4d:
                    dc:4d:31:c6:80:29:df:31:d8:58:83:61:80:64:cd:
                    bb:b3:29:72:7f:46:c1:3e:df:f0:d6:57:47:f4:c7:
                    e9:3c:84:50:b0:aa:17:c5:1f:2a:fb:ef:45:d3:fd:
                    9a:8a:36:bc:49:4c:ee:3b:93:0d:e6:5d:50:25:61:
                    23:d0:01:17:11:f2:31:13:15:98:21:f2:db:ce:b1:
                    1c:bf:5f:b6:20:35:c1:af:3d:15:e7:f4:26:ba:15:
                    62:cb:57:44:1a:04:09:d6:f8:87:98:54:e4:f2:75:
                    f5:bc:ec:53:e3:ab:3c:f8:46:e0:07:fd:eb:ef:ae:
                    c9:48:1d:87:fc:4b:fd:9d:fb:20:37:6d:61:be:ce:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:57:38:CC:A2:25:02:12:E6:58:3D:5A:20:0B:3D:11:28:A0:05:CD
            X509v3 Authority Key Identifier:
                keyid:8D:77:2C:54:E3:D9:08:0E:A2:B7:8E:70:34:FD:84:1B:67:57:CD:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXcsVOPZCA6it45wNP2EG2dXzUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:54:98:f8:f5:76:52:dd:a5:c9:61:db:bf:0c:7e:77:9c:a4:
         7a:4f:c8:50:6a:3c:79:cc:ae:85:f8:52:7a:89:bd:34:71:cb:
         90:0c:58:90:b9:f1:37:ec:93:26:4d:a7:ea:3a:90:d8:3f:a2:
         06:66:a7:f8:52:dd:b6:d5:57:27:f3:5d:a0:2f:f4:8f:e7:c6:
         e5:e2:a2:81:9e:0e:ef:f3:ab:36:90:b9:b8:67:97:67:3e:56:
         d8:2e:d5:a5:ac:67:73:c4:c4:d9:8c:6b:7a:35:59:11:e3:b6:
         98:68:bb:a5:ef:b8:7a:4c:7f:81:d8:f3:69:cd:b7:eb:5e:04:
         64:cd:6d:6d:18:e8:e6:df:dd:a5:72:2f:7c:46:2f:20:e6:48:
         b2:6d:03:79:a3:79:e4:eb:34:ed:b0:03:0e:c4:9d:b6:57:25:
         5d:a2:48:29:21:af:54:1a:76:43:ff:1c:55:b4:a2:d1:a8:73:
         5d:88:9d:f0:45:73:df:d7:d6:e6:a4:0f:88:80:e8:ef:69:9e:
         cb:e7:a1:52:aa:79:f1:db:92:03:98:54:be:d8:ad:cf:46:55:
         de:f1:1a:d5:0a:ee:17:2b:19:92:51:81:49:ff:3d:a9:ef:59:
         c1:e0:fd:86:e9:ff:c8:68:27:17:2e:4e:dd:43:d3:9d:dd:aa:
         18:98:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:28 2025 by rpki-client