Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          Lpc5CGZrwZPhxqlfXVIBk2l+6vtbLi45LAgh3UkCVyI=
Subject key identifier:   B2:5C:15:05:95:45:A6:24:90:91:70:AF:A8:5D:3C:DB:35:8E:4F:74
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       0198D5BBD725826B384B46F0599514AD340C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          032F
Signing time:             Sat 23 Aug 2025 07:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:53 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: TpcWAe2XdYhigq6z2YPBVrApk/pYLOyLu6iXyxD7EcE=)
                          2: _uaKTHKtfWhbGfsoaUqVE21BcaI.roa (hash: ZcgIbRy8eNOQQ+FS3+GJOt3y/shZQUFy7iI8KMgc4tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:d7:25:82:6b:38:4b:46:f0:59:95:14:ad:34:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: Aug 23 07:01:53 2025 GMT
            Not After : Aug 24 07:01:53 2025 GMT
        Subject: CN=b25c15059545a624909170afa85d3cdb358e4f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:02:5b:1f:4e:c4:f7:55:31:13:63:9e:77:
                    d4:ad:13:07:95:84:0b:73:03:81:94:4d:f0:7b:5a:
                    ea:85:05:40:2c:71:b0:53:9c:41:47:cf:38:0a:66:
                    a3:20:4f:cd:2f:7a:f4:f2:9d:06:87:e4:84:5b:1d:
                    8b:cc:88:07:a9:9d:05:f2:d6:49:1b:11:5a:23:eb:
                    4e:cd:d5:58:3c:17:5e:36:e3:21:95:7d:e0:61:5c:
                    83:21:6a:bf:7b:93:c7:1b:13:40:1d:5f:3c:15:03:
                    49:28:71:10:9b:48:bb:a7:fe:dc:b5:c4:3e:1d:5b:
                    4a:d3:ce:27:c9:8a:25:63:c9:96:25:3e:66:2e:d0:
                    34:61:00:59:f2:ab:12:16:a8:cc:84:15:18:7b:17:
                    24:63:cf:b7:c8:72:77:fb:37:2f:b7:b1:c3:8f:25:
                    6d:9c:55:4b:6a:14:86:04:44:ca:63:b3:6a:59:90:
                    3c:e7:1b:5f:00:92:da:f6:10:09:16:aa:d1:ec:db:
                    ad:e7:0d:21:b6:a0:19:3d:be:66:8b:6b:54:11:7b:
                    a0:95:40:46:0c:cc:8a:d9:5a:f0:b0:a5:fa:1a:f7:
                    d3:a3:81:be:78:68:8f:d2:f1:35:52:5f:7f:0a:03:
                    bc:70:18:f8:e0:72:99:1a:54:06:90:88:51:71:94:
                    d2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5C:15:05:95:45:A6:24:90:91:70:AF:A8:5D:3C:DB:35:8E:4F:74
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:79:4f:a0:32:73:0f:9d:a4:0a:ea:7f:e3:43:bc:71:74:79:
         7c:34:05:72:37:b8:d5:8e:26:59:8e:a1:1f:64:6e:42:22:fb:
         63:8d:96:65:01:53:d4:0a:c5:d2:9d:dc:17:66:e8:e7:a1:16:
         e5:2b:8b:88:fc:52:dd:d5:91:2b:3d:5c:be:e0:81:4f:ad:c5:
         d8:1c:85:ca:77:05:41:b6:b5:68:e9:d6:f5:39:dc:fd:b2:9e:
         f6:24:62:6e:54:7c:1a:43:a7:74:65:34:f6:13:dd:30:a1:c2:
         aa:8c:57:9d:be:7a:2e:35:dd:4f:52:68:64:56:30:60:6d:89:
         fb:70:65:59:ea:9d:04:96:66:22:ad:38:1c:1b:f2:6a:f5:c0:
         b0:06:7d:ce:bc:80:39:f3:75:ba:c5:79:ae:04:88:09:23:8e:
         b5:4f:7c:31:74:73:bb:75:9f:5a:90:e1:2c:40:36:3c:0a:7c:
         85:c8:49:b2:02:e8:f3:52:43:e1:fc:2f:2a:d3:d9:cb:90:5e:
         8e:a5:61:8f:e7:bd:cc:4c:8f:e8:3d:a4:b7:b7:e6:b8:1c:98:
         fe:01:6f:7a:57:1c:f3:17:4d:5a:72:e5:27:b3:c4:c9:07:09:
         dc:af:70:03:05:19:1f:77:45:ce:bb:ba:3d:e4:cc:d5:ec:f1:
         92:dc:9a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:22 2025 by rpki-client