Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
File:                     GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json)
Hash identifier:          /zdBw4kJwE4xb9rHThwVML2cf1+C0KocN3flTLqTxg0=
Subject key identifier:   CF:F2:7A:93:B3:5E:B5:05:B2:B1:34:59:DF:DD:33:6E:50:25:D4:42
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Certificate issuer:       /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial:       019921E74934B000B8A1D4100352726F1AE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
Manifest number:          1673
Signing time:             Sun 07 Sep 2025 02:00:29 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:29 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:29 +0000
Files and hashes:         1: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: Pkt0FBID5Men7/8yPDZfkE825YogouLa9gixvypNLD0=)
                          2: vIkXi13duBYnSxCNLM5pa4ja5hM.roa (hash: AZhzU1QaQiAy9JJdY72EUz3F5Q2aGcy4usPFgiaTx0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:49:34:b0:00:b8:a1:d4:10:03:52:72:6f:1a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
        Validity
            Not Before: Sep  7 02:00:29 2025 GMT
            Not After : Sep  8 02:00:29 2025 GMT
        Subject: CN=cff27a93b35eb505b2b13459dfdd336e5025d442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:5f:a3:48:72:e1:2a:c9:f1:08:ce:07:44:
                    7c:f3:ff:ff:51:5e:34:a9:e1:a4:9e:4f:62:a5:ca:
                    08:60:6c:5d:98:26:fc:d2:c3:a9:54:99:67:a6:8d:
                    98:3a:20:53:fa:07:9b:3b:eb:b0:a3:f9:ab:29:9d:
                    80:6c:5c:3a:dd:e6:bd:a7:4d:78:3f:b2:39:87:92:
                    68:13:13:28:86:aa:1f:50:95:4c:4b:00:a6:4d:e5:
                    f9:b4:6f:3d:3c:ee:21:65:f2:72:04:f5:3f:e3:02:
                    e1:11:7d:b8:16:22:ee:f4:75:f2:d0:6e:20:c7:43:
                    bc:3a:3f:8f:36:74:8b:18:9a:75:4d:41:59:04:2d:
                    82:5e:11:b2:f6:d1:4b:58:06:61:84:f9:f6:87:80:
                    fa:dc:52:c0:50:98:54:6b:ce:e9:31:cf:d2:41:56:
                    f3:3a:64:78:b8:5d:57:7f:59:f7:46:fd:14:3e:7a:
                    77:7b:e3:39:da:26:4e:00:78:15:cd:a6:e5:3b:fa:
                    eb:6c:33:6c:ca:a8:66:78:c9:13:ec:fc:07:51:81:
                    aa:73:d4:2a:4c:a1:f0:66:69:af:04:a5:3f:25:1b:
                    5a:a5:7b:af:3b:38:03:76:5a:6b:3b:3e:67:f1:5c:
                    d7:7d:ce:08:a6:a1:65:93:2e:03:5e:93:07:7f:3b:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F2:7A:93:B3:5E:B5:05:B2:B1:34:59:DF:DD:33:6E:50:25:D4:42
            X509v3 Authority Key Identifier:
                keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:54:ab:6d:18:af:76:b5:dd:da:8f:50:d7:b9:f3:89:cd:
         27:2f:e0:1d:96:f6:79:e7:26:d2:0a:17:09:71:17:67:e5:26:
         f7:e2:aa:08:b2:cc:03:55:0b:33:08:99:ea:37:c2:12:c5:b6:
         4e:c9:0a:21:82:61:b4:56:3e:c6:87:1f:59:6c:9f:2f:89:98:
         9a:e6:f5:12:1c:e3:cf:62:2c:ef:a8:87:2f:5c:b6:f3:b5:00:
         94:ee:4f:66:1c:f2:0b:63:5f:4d:d6:69:f4:3a:bc:6d:f5:aa:
         6a:22:de:2a:a9:d5:b7:14:55:ef:e9:22:1a:74:17:c2:ce:e6:
         23:db:2c:2b:4d:b3:7b:20:3d:90:ba:53:bb:dd:26:a2:b4:e8:
         aa:44:9a:8c:7e:4a:9d:d3:e0:a9:4c:d8:8e:c8:5a:58:2c:d6:
         6f:10:85:03:f5:c0:40:e6:17:ce:b5:a4:de:6d:c7:9e:90:b5:
         54:5c:28:35:f4:c0:49:c0:cd:b1:7e:53:7f:90:95:05:0d:a0:
         af:b8:fe:09:58:e7:47:a0:b6:a6:51:67:96:19:57:06:ec:ae:
         69:af:b4:c7:e4:10:be:0f:b2:a7:fa:cd:5d:68:c2:ba:4a:9d:
         b7:70:6d:ab:ec:4e:9a:30:d5:d6:59:cc:ff:cf:38:2e:85:be:
         81:b4:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:56 2025 by rpki-client