Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
File:                     GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json)
Hash identifier:          +BUiHkiZrgrtZWmJcaeLSRrhJA370VNyNAC1cO4fYuI=
Subject key identifier:   94:9F:6D:42:2E:C5:C9:18:47:A4:D8:4D:0F:0C:B0:87:B4:95:60:60
Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
Certificate issuer:       /CN=186590ee4a796301c422e033f944d263d6adeebc
Certificate serial:       0197B6A2420614842237453539675B8D39F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
Manifest number:          10E4
Signing time:             Sat 28 Jun 2025 13:02:56 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:56 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:56 +0000
Files and hashes:         1: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: L+el5QbpvBJK8Wbj/0hAZsa1mG1vg1KphKo2RQNHpxg=)
                          2: xbbxTo9rn50nwhGlFUGMbwhSzbo.roa (hash: zFleJFRgd2evTBBfHWP3ENqdzORcbjMKg0D2r2qzukQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:42:06:14:84:22:37:45:35:39:67:5b:8d:39:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc
        Validity
            Not Before: Jun 28 13:02:56 2025 GMT
            Not After : Jun 29 13:02:56 2025 GMT
        Subject: CN=949f6d422ec5c91847a4d84d0f0cb087b4956060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:d9:c2:db:cb:c9:45:fe:b8:86:cf:64:bb:
                    0a:14:40:eb:c8:99:b5:42:de:fc:bc:43:37:35:b1:
                    cd:cc:d8:1e:99:7d:a1:9e:d4:30:08:57:3c:c0:a5:
                    1a:c5:88:1e:eb:76:d6:04:de:da:2d:4e:ad:dc:ce:
                    d7:4a:18:0c:0f:17:46:60:b1:20:1f:80:d2:d1:14:
                    f1:ca:05:50:18:3e:2c:fc:06:81:b6:c8:3d:48:45:
                    69:bd:37:64:8c:83:bb:6c:5b:14:c3:f0:76:74:59:
                    db:61:ad:c9:10:c8:7f:23:91:1e:a5:cd:97:28:f8:
                    a3:0b:ac:8d:93:88:7d:5d:21:9a:b3:f5:f1:fa:cb:
                    cb:84:69:e7:30:96:90:ca:c0:9e:b9:69:a9:47:e6:
                    f9:82:ab:01:25:c6:f9:6d:9e:82:27:2f:c9:f8:ac:
                    76:fb:58:ac:0a:fc:7c:92:80:ee:49:67:ca:c1:53:
                    b1:f5:3b:ab:5e:57:7e:0c:f7:df:56:fa:82:e0:de:
                    a7:06:23:97:e0:97:03:e1:89:18:30:be:da:12:ad:
                    02:59:4b:60:a2:e0:e9:dd:55:91:b5:cd:cc:f4:da:
                    f5:25:76:df:61:3d:59:25:83:c4:57:f8:39:c1:71:
                    39:a5:a0:15:c2:25:c9:bb:06:03:f4:74:2a:80:64:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9F:6D:42:2E:C5:C9:18:47:A4:D8:4D:0F:0C:B0:87:B4:95:60:60
            X509v3 Authority Key Identifier:
                keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:25:a0:28:29:c6:66:bc:4e:ad:dd:c1:f2:c3:5e:1a:59:
         1a:c4:a0:fa:d5:50:06:72:7c:d5:46:dd:ae:a2:65:7b:0c:b5:
         87:d3:17:6a:63:71:d7:7e:36:e1:34:cd:2c:e0:9c:36:4e:21:
         6c:19:ad:99:3d:4c:6c:18:f4:bd:06:20:7b:91:dd:3e:9f:48:
         fc:0c:61:1d:a3:3d:4b:8c:de:1f:1d:49:de:3b:50:4c:e5:cc:
         f5:02:d1:75:71:b2:c0:7b:f2:fb:33:29:67:92:0b:27:8d:cd:
         90:c9:28:a2:8a:3b:bf:bb:b9:9f:95:fd:ce:97:7a:a8:5e:9e:
         64:58:89:6e:17:5b:3a:05:bb:74:db:46:32:20:f2:1c:a0:c7:
         c7:4d:78:28:59:e4:80:af:68:3c:b2:4f:f2:12:fd:0f:3d:c1:
         3d:b2:f5:2b:f2:b6:48:e0:a3:4e:0e:e3:ac:50:9b:06:56:ed:
         53:51:e8:cb:9c:e5:f9:9a:37:7e:bd:55:3f:2b:aa:59:38:ee:
         b3:37:c1:5f:86:68:5d:1b:f5:0f:ea:67:b2:4d:06:91:f1:c0:
         dc:44:a3:77:47:63:14:85:49:e8:b6:a4:d7:65:b9:00:1d:2a:
         3f:90:79:db:76:e4:2e:ef:d6:90:df:ae:c7:57:ae:90:b5:3c:
         4d:b6:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:23 2025 by rpki-client