Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
File:                     GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft (raw, json)
Hash identifier:          B144uFQQIVeN1NR8mJ9Lp0+9e4hm6DkIck1Xznl58Y8=
Subject key identifier:   31:46:14:D7:B6:0A:33:76:E5:2F:D4:4E:24:EA:7A:6B:4D:B3:EA:8D
Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Certificate issuer:       /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Certificate serial:       0198D51588AC0EAA23395DD694250F8CA718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 04:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:14 +0000
Files and hashes:         1: 2nLsQqPE5llC17hwQkkSOMH6bAs.roa (hash: bh0+wwwfSzTifnsB5Zplv4YF5NGG3Z0ysixgx0plOO8=)
                          2: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl (hash: c6umYbnkPu3wOorb5zADmZupwD8aF6jQMtn87wXtqsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:88:ac:0e:aa:23:39:5d:d6:94:25:0f:8c:a7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
        Validity
            Not Before: Aug 23 04:00:14 2025 GMT
            Not After : Aug 24 04:00:14 2025 GMT
        Subject: CN=314614d7b60a3376e52fd44e24ea7a6b4db3ea8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1c:04:ec:70:ab:0a:7f:bb:38:26:05:dd:05:
                    e8:68:7d:92:bb:6f:f7:21:6a:66:0c:88:0a:65:b5:
                    1e:1a:80:bf:cd:90:7f:6d:c3:6f:19:4d:56:3c:8c:
                    40:b5:89:2a:7d:6e:a1:a4:4a:92:30:6f:10:f6:89:
                    f7:97:e9:9c:2f:62:5b:d2:35:ba:6d:a4:c1:12:4f:
                    24:2f:0d:26:51:01:fb:53:c4:48:b3:93:2a:f9:7b:
                    f0:ae:82:33:44:ce:df:d2:c4:d1:c3:bd:c7:8d:d0:
                    23:b6:c2:eb:4c:9c:b8:df:39:b4:26:ac:17:ac:7c:
                    6f:d1:ec:7f:b3:99:a3:12:43:70:5c:0f:28:65:87:
                    98:4f:20:ab:c6:93:87:62:13:b0:78:87:61:45:e3:
                    56:29:d8:b7:32:7f:5e:fe:8f:c3:0a:4c:91:c6:ad:
                    17:29:96:d9:bc:ad:84:6b:a6:54:d2:70:99:49:ef:
                    43:a3:92:f8:de:69:b2:8b:8f:1c:18:2a:db:e7:58:
                    a2:55:08:ce:35:d8:1b:f5:d3:c4:38:4f:36:64:11:
                    ee:e5:b6:00:b6:49:c0:38:50:b6:50:19:cf:0a:92:
                    dd:f8:80:c3:fa:f5:81:66:b0:d5:45:a5:18:19:c5:
                    11:05:4a:68:fa:b1:64:f2:07:08:52:74:29:a8:16:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:46:14:D7:B6:0A:33:76:E5:2F:D4:4E:24:EA:7A:6B:4D:B3:EA:8D
            X509v3 Authority Key Identifier:
                keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ed:27:f3:5c:d5:fd:a8:b8:0f:e6:6b:11:95:b5:01:d9:e6:
         e7:76:ee:17:bf:22:0e:18:ad:9c:91:6f:68:48:9b:19:b9:c0:
         16:d6:49:ae:cf:4a:31:05:a0:91:b9:dc:f1:58:9b:2c:01:2a:
         b7:39:f3:8b:42:34:cc:00:57:e4:7f:c0:b4:80:29:01:4c:95:
         4d:eb:dc:e4:10:2a:3c:e5:f9:44:5f:fd:2a:4d:16:ee:b4:2c:
         7c:b9:c8:5a:49:8b:36:6f:a3:6e:f5:75:8f:59:51:12:87:93:
         52:c2:d2:1b:00:82:da:c6:02:1f:25:43:b3:6c:98:f6:32:ff:
         20:59:d5:45:57:22:21:83:0e:5f:ee:bc:c8:18:28:1a:4d:22:
         b9:fd:34:c5:83:da:8b:0f:11:f7:18:6c:f9:55:63:d8:b9:e0:
         bf:d4:06:bf:ed:aa:2b:a7:67:31:3b:b5:61:c8:d9:93:13:6b:
         85:c8:26:ab:82:e3:e5:1c:c7:4a:d5:be:47:5d:2f:8b:29:76:
         5c:67:dd:d8:c1:86:63:8e:20:87:2c:4f:db:2a:dc:7a:54:f5:
         27:82:36:7b:6f:60:2c:09:21:08:ce:79:f9:81:88:fe:c7:63:
         29:69:91:6f:a0:da:ca:3f:76:4d:ee:23:4f:63:44:fa:66:40:
         fe:b5:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:15 2025 by rpki-client