Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
File:                     Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json)
Hash identifier:          c94Q9pLbf7yD6VdweZrxJb3WyzdCr7avTYpNTBkr0so=
Subject key identifier:   2D:E0:39:C9:3B:46:F8:B6:83:40:FF:0E:B7:4B:EB:4A:20:72:60:92
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Certificate issuer:       /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial:       0198D705FF3E0F08520B9508342ED33925FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
Manifest number:          03CE
Signing time:             Sat 23 Aug 2025 13:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:31 +0000
Files and hashes:         1: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: kSqkcfEZX6CkusjkC/L5yS92Lm3saFRqqdr3fEvrXeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:ff:3e:0f:08:52:0b:95:08:34:2e:d3:39:25:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
        Validity
            Not Before: Aug 23 13:02:31 2025 GMT
            Not After : Aug 24 13:02:31 2025 GMT
        Subject: CN=2de039c93b46f8b68340ff0eb74beb4a20726092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:de:c8:90:01:70:ab:fd:fa:7a:67:e2:03:
                    ac:0c:d3:3d:b1:e2:aa:ff:af:02:df:6b:82:c5:ea:
                    4b:55:b4:6c:a5:b7:c9:70:84:6f:a1:17:44:bf:d9:
                    77:20:92:a7:a2:59:fc:4d:61:9f:41:83:9e:60:90:
                    3d:1e:ac:79:b3:02:d5:ba:8e:f1:f9:b0:6a:82:47:
                    fc:42:a2:82:b5:5d:14:12:6a:46:2c:29:a0:f5:c0:
                    46:46:59:58:55:4f:77:44:f9:2a:c4:ff:9d:e6:10:
                    26:fb:bb:83:f8:15:52:a1:61:9f:97:83:23:3c:13:
                    5f:91:f6:74:85:cc:57:36:a6:ea:de:72:c7:00:a3:
                    40:54:09:b0:4b:6d:da:b0:5a:41:a7:02:46:c3:41:
                    dc:49:b5:8a:51:75:50:18:5e:bc:5c:51:f9:78:81:
                    7d:1e:c2:77:aa:ea:6b:7e:48:45:fa:ca:85:83:d3:
                    07:2b:1e:f7:2f:6f:37:e9:6d:28:a1:6c:f7:bf:d4:
                    bc:46:3c:6a:6a:f0:6d:f0:5e:d6:06:f1:3b:c5:aa:
                    2f:90:b8:9e:64:b4:a1:e5:ca:7e:a6:12:3e:1d:28:
                    3e:e9:21:0d:fb:3c:24:1f:e1:ea:db:f5:d6:1b:8a:
                    ef:3a:12:2b:57:e4:64:1b:50:9b:a4:da:58:a7:9d:
                    aa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E0:39:C9:3B:46:F8:B6:83:40:FF:0E:B7:4B:EB:4A:20:72:60:92
            X509v3 Authority Key Identifier:
                keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8b:a7:86:96:c0:d6:81:a1:48:16:22:46:8b:b9:e8:2a:11:
         26:c2:b7:47:66:48:ee:0e:6f:bf:7d:14:6b:df:86:90:7f:0e:
         4d:4f:0e:45:d7:17:2c:b8:26:3a:20:5d:93:d6:c3:c4:b5:35:
         ad:c1:50:ca:7b:2f:45:11:af:31:43:c3:5a:a1:fe:fc:aa:d6:
         46:0c:26:7a:36:1f:58:e1:e2:68:f3:4a:34:63:79:f2:16:b3:
         53:eb:67:e9:aa:3a:c2:db:41:7c:97:ca:6e:7e:05:5f:ef:54:
         81:d9:19:14:74:42:4e:d8:39:d2:9b:ed:56:82:1b:85:94:f6:
         7b:88:b9:49:be:50:d7:ba:44:4a:18:84:54:fc:ec:1d:b2:bb:
         4d:3a:7b:e8:2f:b2:e9:06:57:99:1b:4e:06:2a:59:42:91:77:
         c3:db:20:47:2f:cf:6e:10:5f:c5:a7:be:04:8a:fa:60:52:71:
         77:5a:05:cf:71:4e:72:6f:ce:bd:fb:25:ed:9c:04:3b:cc:a8:
         56:80:4c:01:f0:83:0d:1d:29:c1:93:5a:36:8a:da:13:62:dc:
         85:48:cf:2b:ec:ef:02:ed:65:bb:0d:8b:61:32:a7:f6:74:74:
         0a:8c:42:e1:27:96:d1:c9:e0:71:53:b1:7b:38:00:6f:cf:c0:
         25:60:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:18:50 2025 by rpki-client