Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
File:                     Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json)
Hash identifier:          b/pujOSIRIGen2i26+qfxYE/9bN3TtluGziFPgGBFmk=
Subject key identifier:   60:CD:80:0D:14:59:71:98:99:34:AE:49:2F:89:23:33:56:52:32:F2
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Certificate issuer:       /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial:       0197B745A0D56B40520402756CC8B1FB4E35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
Manifest number:          0339
Signing time:             Sat 28 Jun 2025 16:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:23 +0000
Files and hashes:         1: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: 3bHfvDI9pWL191k4DKmBI3P8e58vYeZx5YbwaSZiSiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:a0:d5:6b:40:52:04:02:75:6c:c8:b1:fb:4e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
        Validity
            Not Before: Jun 28 16:01:23 2025 GMT
            Not After : Jun 29 16:01:23 2025 GMT
        Subject: CN=60cd800d145971989934ae492f892333565232f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:29:df:34:8a:d6:cf:62:d6:fd:fc:e3:63:
                    02:84:fb:8b:b6:8b:49:90:01:38:a5:c9:30:fa:92:
                    f8:71:f8:22:d1:05:7a:0f:91:d1:ff:5d:b4:ee:0c:
                    e4:b6:57:43:a9:e4:c9:73:09:d8:95:f4:a0:69:57:
                    8e:3d:cb:5b:53:96:68:11:4e:1e:a8:f3:f2:4e:c7:
                    2e:03:94:12:cd:a1:66:14:92:73:66:f0:d1:65:81:
                    14:8c:2a:1f:63:96:d5:b9:fb:93:32:c3:ad:28:9c:
                    d9:40:b8:12:9e:84:a5:a8:41:1b:d9:44:e3:79:32:
                    4d:3f:74:fc:91:26:06:1a:9d:e8:18:c3:d7:be:58:
                    39:ea:3b:9d:5c:76:36:02:b9:57:aa:47:a1:82:a0:
                    d4:49:76:de:6c:a5:ed:e6:c5:74:08:c6:c0:f4:ae:
                    76:43:f1:49:41:34:65:73:95:1e:e9:2f:f0:eb:5e:
                    ac:97:a0:02:b9:c6:5f:24:57:ae:81:a0:ee:ba:2d:
                    65:3b:60:73:3b:5b:d0:bb:fa:7f:00:30:ee:66:01:
                    bd:b4:8e:2f:e2:12:31:28:8a:95:58:fa:8d:f5:a8:
                    71:1f:42:b1:c3:41:33:e1:00:88:08:6b:81:77:50:
                    9f:6e:67:4b:73:68:cb:38:ce:e1:9c:75:23:60:93:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CD:80:0D:14:59:71:98:99:34:AE:49:2F:89:23:33:56:52:32:F2
            X509v3 Authority Key Identifier:
                keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0c:f9:25:63:e8:b2:30:5a:07:0c:43:6e:e9:0b:af:3e:ae:
         b3:3e:19:4b:2f:a1:64:8f:a4:2d:12:1a:e3:47:09:3a:74:ec:
         63:d9:44:69:31:4a:d4:91:23:4f:f7:2e:14:ed:ed:73:0a:1e:
         1c:23:3e:d8:22:f1:d2:76:e5:6c:9d:e8:e6:ca:89:9b:51:99:
         90:ce:3c:3b:eb:1f:6f:a9:8e:4e:5f:46:27:48:34:60:04:d7:
         ec:ae:cf:f2:d9:a5:90:50:24:b5:d3:50:8b:11:31:84:0c:0b:
         9c:d3:13:ff:fc:af:cb:18:b7:c0:32:81:5c:eb:23:34:bb:82:
         5a:c5:80:26:b7:75:ef:bf:3a:b4:cb:46:80:87:30:4b:2b:33:
         27:b0:8f:66:a1:80:d0:cb:b1:2c:7d:1c:d6:4c:79:68:b1:27:
         74:6d:0d:54:97:42:d6:21:2e:a3:42:2d:64:1a:e2:05:1a:19:
         f4:73:0a:a8:0c:09:ca:cc:52:92:aa:6a:a1:e2:f7:8e:f4:9d:
         6c:96:4e:de:b5:4a:6b:48:50:f3:3e:cd:71:60:4c:f1:90:0d:
         c8:e1:66:06:c3:58:de:95:8f:c3:14:32:8c:e7:d8:15:1c:08:
         14:56:23:cb:39:ba:ae:f2:99:ac:28:a2:bd:82:7f:6a:29:d6:
         cb:5d:1b:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RaDVa0BSBAJ1bMix+041MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2M2M2YzYjM0ZjE3MDE4OWQwNzNjODhiN2Q2NTJmNzAz
M2ExZmMwHhcNMjUwNjI4MTYwMTIzWhcNMjUwNjI5MTYwMTIzWjAzMTEwLwYDVQQD
Eyg2MGNkODAwZDE0NTk3MTk4OTkzNGFlNDkyZjg5MjMzMzU2NTIzMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjcp3zSK1s9i1v3842MChPuLtotJ
kAE4pckw+pL4cfgi0QV6D5HR/1207gzktldDqeTJcwnYlfSgaVeOPctbU5ZoEU4e
qPPyTscuA5QSzaFmFJJzZvDRZYEUjCofY5bVufuTMsOtKJzZQLgSnoSlqEEb2UTj
eTJNP3T8kSYGGp3oGMPXvlg56judXHY2ArlXqkehgqDUSXbebKXt5sV0CMbA9K52
Q/FJQTRlc5Ue6S/w616sl6ACucZfJFeugaDuui1lO2BzO1vQu/p/ADDuZgG9tI4v
4hIxKIqVWPqN9ahxH0Kxw0Ez4QCICGuBd1CfbmdLc2jLOM7hnHUjYJPoqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDNgA0UWXGYmTSuSS+JIzNWUjLyMB8GA1UdIwQY
MBaAFBnMY/OzTxcBidBzyIt9ZS9wM6H8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2N4ajg3TlBGd0dKMEhQSWkzMWxMM0F6b2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82YmRlOWUtNmVkOC00N2Q1LTlkOWMt
NTRkNzg0ZWZiYjdhLzEvR2N4ajg3TlBGd0dKMEhQSWkzMWxMM0F6b2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS82YmRlOWUtNmVkOC00N2Q1LTlkOWMtNTRkNzg0ZWZiYjdh
LzEvR2N4ajg3TlBGd0dKMEhQSWkzMWxMM0F6b2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQz5JWPo
sjBaBwxDbukLrz6usz4ZSy+hZI+kLRIa40cJOnTsY9lEaTFK1JEjT/cuFO3tcwoe
HCM+2CLx0nblbJ3o5sqJm1GZkM48O+sfb6mOTl9GJ0g0YATX7K7P8tmlkFAktdNQ
ixExhAwLnNMT//yvyxi3wDKBXOsjNLuCWsWAJrd17786tMtGgIcwSyszJ7CPZqGA
0MuxLH0c1kx5aLEndG0NVJdC1iEuo0ItZBriBRoZ9HMKqAwJysxSkqpqoeL3jvSd
bJZO3rVKa0hQ8z7NcWBM8ZANyOFmBsNY3pWPwxQyjOfYFRwIFFYjyzm6rvKZrCii
vYJ/ainWy10bVA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:44 2025 by rpki-client