Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
File:                     GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json)
Hash identifier:          IquuKSLbhIqEnifEKefPbiYyPw9cKBQImZpJoQBjZ0w=
Subject key identifier:   93:2C:60:05:3D:0D:A3:CA:FF:1A:DA:7B:8D:99:A9:00:52:34:A4:42
Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
Certificate issuer:       /CN=186590ee4a796301c422e033f944d263d6adeebc
Certificate serial:       0198D66106E275FA31F3CF30ECB9FE7C0B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
Manifest number:          1179
Signing time:             Sat 23 Aug 2025 10:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:19 +0000
Files and hashes:         1: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: m9kvTK84cQt4r+G/+GSUpyPw0+se2DpHKSOEDEsk6zw=)
                          2: xbbxTo9rn50nwhGlFUGMbwhSzbo.roa (hash: zFleJFRgd2evTBBfHWP3ENqdzORcbjMKg0D2r2qzukQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:06:e2:75:fa:31:f3:cf:30:ec:b9:fe:7c:0b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc
        Validity
            Not Before: Aug 23 10:02:19 2025 GMT
            Not After : Aug 24 10:02:19 2025 GMT
        Subject: CN=932c60053d0da3caff1ada7b8d99a9005234a442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:be:3d:fc:b4:87:9d:14:e6:8f:c1:7b:a8:
                    87:f3:0e:d5:fd:0e:d8:b8:ee:0a:ef:96:ef:c5:87:
                    9c:2f:55:3a:d9:6f:1c:5a:07:cd:11:13:b2:5f:fc:
                    d0:40:7f:97:8c:a6:fc:43:4a:7c:7a:45:62:18:d0:
                    d8:5d:57:a7:78:0f:13:1d:94:20:7f:0a:cc:12:16:
                    ce:af:e5:6d:fe:16:2c:3b:86:8a:0a:7a:62:82:51:
                    5f:1d:af:89:d5:f4:d7:22:25:d7:cd:40:e0:e4:42:
                    e4:85:b3:78:d4:56:e8:b9:e0:41:d3:1d:55:27:c0:
                    29:0e:e6:2b:a7:72:47:ca:2d:ec:fc:6e:cf:9f:e1:
                    c1:ce:4f:c2:9e:7c:91:fb:03:c9:fd:9b:41:d0:6e:
                    6b:a6:15:b1:b0:49:17:20:15:78:b3:81:5a:04:ab:
                    6f:a8:6e:d3:24:7e:3c:32:72:b8:0b:29:a6:2a:f7:
                    67:67:34:ea:42:a6:d0:2f:48:65:2a:87:54:28:24:
                    92:2e:90:70:34:53:b1:d2:8d:8f:54:a9:eb:1b:cf:
                    1b:1c:6b:07:4b:92:40:f3:bb:d4:28:08:e7:b5:c2:
                    6e:d1:15:33:97:82:71:69:06:05:a0:f6:b0:aa:93:
                    9c:ff:56:e0:d4:17:38:3a:c9:81:b5:1f:da:46:06:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2C:60:05:3D:0D:A3:CA:FF:1A:DA:7B:8D:99:A9:00:52:34:A4:42
            X509v3 Authority Key Identifier:
                keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:48:a4:0a:f0:99:b1:26:ca:08:b3:6b:db:b0:ec:6f:6d:c4:
         67:36:cc:7d:ef:e4:f5:13:1c:49:fc:49:a0:b9:50:12:1b:b7:
         d8:a1:51:a4:7c:48:6d:31:58:43:dd:05:97:a9:7b:10:25:02:
         9d:d4:f6:97:cb:5c:3e:ed:29:f7:31:a2:54:3e:e7:fd:0d:2d:
         ff:fa:2b:1d:d4:4e:83:a7:42:90:9e:39:e6:fa:b8:42:97:92:
         7b:58:83:03:9e:23:ac:60:b7:96:c6:fa:f0:f3:f6:bb:63:6f:
         c8:71:a2:5d:09:fb:33:67:eb:e3:62:cf:f6:eb:f5:1d:da:6b:
         96:b7:93:03:96:13:6b:a3:0e:c0:5b:5a:a3:30:2f:c7:99:36:
         5e:94:e0:74:d8:0f:32:7f:45:44:19:35:f2:12:c5:9b:5b:2a:
         1e:e6:8d:47:40:94:82:87:56:25:c2:bf:61:af:40:17:e0:4c:
         17:f7:f2:d8:c6:4c:9c:00:af:7e:ac:a2:e2:f5:b9:98:b6:be:
         44:f6:37:22:0b:fa:62:3b:38:3d:46:7d:8d:87:58:39:64:ff:
         89:2b:01:88:9c:d2:0d:f9:83:79:8f:59:46:c6:2c:69:bd:6e:
         ac:19:7d:9e:50:cd:4b:94:2f:b1:af:ed:a9:d9:57:12:4c:47:
         19:f0:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:49 2025 by rpki-client