Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
File:                     ggA1PrKBit3XElx4FCFDMUneb2I.mft (raw, json)
Hash identifier:          X5XnQ0bI/ycbhtYb3XURJS+woHLIYkXWUm2eBgIDLcw=
Subject key identifier:   72:D0:60:BA:53:97:4B:D5:DD:3B:7B:D2:57:68:7E:CE:78:DF:6A:B2
Authority key identifier: 82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62
Certificate issuer:       /CN=8200353eb2818addd7125c781421433149de6f62
Certificate serial:       0197B88F4A8065F2719E59E247A06C1ED2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
Manifest number:          052C
Signing time:             Sat 28 Jun 2025 22:01:27 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:27 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:27 +0000
Files and hashes:         1: ggA1PrKBit3XElx4FCFDMUneb2I.crl (hash: d1YhqLPhlF813mBDEa4umxIlnH3F1MNpzHZvkLYpwXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:4a:80:65:f2:71:9e:59:e2:47:a0:6c:1e:d2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8200353eb2818addd7125c781421433149de6f62
        Validity
            Not Before: Jun 28 22:01:27 2025 GMT
            Not After : Jun 29 22:01:27 2025 GMT
        Subject: CN=72d060ba53974bd5dd3b7bd257687ece78df6ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:b3:29:4e:45:4d:09:9a:03:22:85:89:da:
                    24:5e:c7:86:0f:58:53:6e:58:ee:f4:a3:7a:93:15:
                    9c:1e:72:f4:28:03:9f:f6:8f:66:bb:3f:19:14:68:
                    07:4a:2b:b6:ef:a2:9e:1e:5e:c4:5c:26:7a:2b:e6:
                    c0:7a:75:17:5b:8e:77:72:9e:47:4e:d3:30:14:bf:
                    92:15:95:85:26:ba:26:f9:cd:2c:05:aa:38:9f:1a:
                    a7:10:ba:68:bd:df:da:16:1c:d1:2c:be:7b:5a:8c:
                    7c:10:4d:c9:da:68:90:57:74:cb:fd:c8:cd:36:02:
                    2e:df:ab:00:70:35:91:eb:68:87:d5:13:79:d8:ea:
                    4e:4d:64:ce:61:2e:79:2c:7c:58:6d:28:de:98:b6:
                    04:ab:ac:74:cb:87:79:a0:14:fb:5e:c9:9d:ae:ae:
                    fe:37:c4:b7:b3:9f:ce:ef:83:64:49:89:42:11:d8:
                    4e:a2:f0:a7:69:91:6e:09:99:cf:c4:a4:3a:d2:7a:
                    9c:39:86:cc:93:46:ed:75:bb:ec:28:5a:77:4f:63:
                    cd:2a:16:f5:a3:d5:d1:ce:d1:16:55:e7:65:3e:26:
                    6b:c2:7b:c2:81:16:3a:1b:17:92:cf:35:52:ea:98:
                    7f:bf:ab:fa:44:a1:7a:99:79:00:84:9b:5e:72:d4:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D0:60:BA:53:97:4B:D5:DD:3B:7B:D2:57:68:7E:CE:78:DF:6A:B2
            X509v3 Authority Key Identifier:
                keyid:82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c1:78:25:ce:a6:cc:ea:89:c4:c3:28:a1:0b:07:16:cc:e0:
         4e:0b:60:7e:87:b8:7f:47:c2:bb:cf:b7:80:5f:64:41:77:08:
         bf:b5:e5:d9:93:37:96:85:0c:89:eb:78:7b:55:13:6c:ef:2f:
         fb:8f:ea:11:b7:5f:14:c1:11:d8:d5:60:93:b2:ee:c6:84:ab:
         e8:2d:60:f8:d8:49:0a:06:d7:29:8c:50:e7:9c:dc:d1:74:6c:
         a2:20:bc:07:27:8e:9d:3a:56:a2:a0:5b:0e:fb:cd:60:12:fa:
         8a:72:c7:9d:db:7c:bc:da:71:5c:43:a9:de:44:be:e4:64:dc:
         fd:75:9e:bf:e2:67:ea:1d:f5:79:1e:81:98:e5:3b:01:78:2e:
         24:dd:b4:4d:10:8b:b2:4a:bb:cb:74:07:2c:38:a9:d0:8c:98:
         f8:a7:a7:c2:35:5b:a9:21:d9:ca:e0:55:84:3e:93:4a:90:50:
         34:9a:bd:52:3a:bf:97:13:a0:c1:44:70:43:da:b1:2f:28:1b:
         d4:66:05:2e:c8:45:60:2f:a3:74:81:09:98:40:2e:cd:53:0e:
         7e:14:ee:21:4a:8f:a0:2c:b4:05:87:d0:90:22:c6:43:3d:a8:
         4f:16:0c:45:68:f1:06:21:7f:a8:6d:3f:cd:39:5e:f2:49:e9:
         1e:3e:be:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:12 2025 by rpki-client