Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
File:                     GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json)
Hash identifier:          emCO+CfJMLpkC7pSyptonxMeKVSGgYlotI2/i2Y2SCw=
Subject key identifier:   E2:BC:11:62:7B:4E:75:FE:57:8D:ED:D7:74:94:BC:FB:68:1C:E4:7B
Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
Certificate issuer:       /CN=186590ee4a796301c422e033f944d263d6adeebc
Certificate serial:       019921B1DB6A9E53BD04878D358C171050E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
Manifest number:          11A0
Signing time:             Sun 07 Sep 2025 01:02:08 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:08 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:08 +0000
Files and hashes:         1: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: TAgftnWC+pCDOQg3nnpNs19tEAJuZATUElamf8fIzt4=)
                          2: xbbxTo9rn50nwhGlFUGMbwhSzbo.roa (hash: zFleJFRgd2evTBBfHWP3ENqdzORcbjMKg0D2r2qzukQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:db:6a:9e:53:bd:04:87:8d:35:8c:17:10:50:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc
        Validity
            Not Before: Sep  7 01:02:08 2025 GMT
            Not After : Sep  8 01:02:08 2025 GMT
        Subject: CN=e2bc11627b4e75fe578dedd77494bcfb681ce47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:e1:95:34:6a:11:5e:a4:62:30:d4:92:6a:
                    2c:32:8c:7a:f1:c8:7d:c2:2e:16:9c:c8:67:f0:04:
                    ab:e8:4e:49:54:f2:5e:df:2a:ab:15:8c:08:f0:58:
                    fc:6e:26:00:88:f0:39:59:56:df:56:26:6f:98:0e:
                    de:bb:b8:20:2d:fe:83:b2:d5:a3:04:63:2f:e5:52:
                    d1:ce:91:c9:64:4f:17:95:92:8f:6e:6a:fc:b4:4a:
                    80:37:f9:60:32:74:6d:45:13:ae:68:15:4a:2f:f0:
                    c3:06:a0:eb:8f:bf:7a:94:8a:96:2e:ba:be:49:fc:
                    ff:53:b7:06:62:18:5e:ac:ee:12:59:60:63:10:ec:
                    85:d6:fb:16:da:3d:a5:b3:29:78:7c:ea:e1:79:0e:
                    71:d6:df:04:5f:4a:18:26:5f:12:3b:70:2a:99:0a:
                    c5:b5:a3:38:7e:05:82:05:67:51:13:53:3f:00:67:
                    20:e2:65:c6:f4:bf:e5:ec:d2:ed:59:9f:b6:40:98:
                    29:14:77:4e:6b:a0:18:81:e9:fd:71:b3:9b:20:85:
                    26:ef:89:da:bf:d4:03:9f:49:06:61:bc:50:0b:c8:
                    ea:0c:64:db:5b:17:00:d9:e3:87:1d:9e:e9:11:32:
                    dc:cf:db:f2:1f:05:03:d4:fe:6d:74:fe:67:41:de:
                    2e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BC:11:62:7B:4E:75:FE:57:8D:ED:D7:74:94:BC:FB:68:1C:E4:7B
            X509v3 Authority Key Identifier:
                keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:68:4b:2e:99:ad:13:e1:3a:41:b1:a5:35:aa:ec:33:bb:e7:
         73:05:a5:23:7b:8a:80:26:40:89:d0:17:94:e6:64:b5:a7:a7:
         25:8b:3e:58:bb:33:60:fc:13:f5:d6:e3:b2:89:4f:49:9b:a6:
         4a:4a:68:6d:7a:b9:15:51:da:56:88:9d:65:4c:4c:27:44:7f:
         65:2a:6a:a8:df:6c:5e:12:a2:3d:31:7e:b5:73:83:76:92:d9:
         01:ec:25:f8:52:e4:b3:b3:91:5f:70:30:68:6d:23:a2:92:61:
         52:b6:71:de:06:17:c6:d9:ce:fb:d0:71:e5:d4:37:88:fe:24:
         5c:15:f0:78:d4:b0:c4:7b:6d:36:1f:30:26:9a:1d:47:fe:f5:
         21:5b:07:7e:4b:57:45:05:85:75:23:4e:cf:b7:0e:18:70:d7:
         d2:3c:6c:2f:fd:6a:84:10:a5:8d:f2:42:bc:86:5a:59:e0:b7:
         6b:f9:30:4d:04:55:34:ac:a6:23:8d:16:bf:99:c9:53:77:5e:
         d0:ba:04:0c:f3:c3:ac:69:91:f2:b1:fb:e5:3d:8a:28:70:37:
         0d:7b:c7:b9:b2:3b:bd:01:fa:ce:e3:26:04:d3:30:93:8e:7f:
         e4:a6:4f:ed:ef:95:49:a0:29:ed:b2:3c:00:19:15:d2:fc:aa:
         e0:13:41:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:04 2025 by rpki-client