Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File:                     GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier:          V/BH/jQuF6zlM+hmZz4LBldt/wD7J4uSAtclQ040KTc=
Subject key identifier:   18:1B:9B:76:8D:82:D8:0E:70:C0:80:45:7B:BC:67:36:06:94:A6:1A
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer:       /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial:       0198D472CCB048251DEEB5F9D5937738AFAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number:          1319
Signing time:             Sat 23 Aug 2025 01:02:29 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:29 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:29 +0000
Files and hashes:         1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: ZcCuU2qmGEbX2sb3THczELeknR7UOyMhVJJauA4WFMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:cc:b0:48:25:1d:ee:b5:f9:d5:93:77:38:af:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
        Validity
            Not Before: Aug 23 01:02:29 2025 GMT
            Not After : Aug 24 01:02:29 2025 GMT
        Subject: CN=181b9b768d82d80e70c080457bbc67360694a61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:b4:8f:0c:dd:23:3a:cb:19:54:a3:08:16:
                    81:10:60:2f:6e:82:9d:bf:90:c6:1a:bc:b8:6d:ea:
                    a3:fd:c9:0d:0c:d4:77:54:e8:d2:04:9e:cb:a4:78:
                    b6:3d:e2:c4:30:dc:71:8b:15:60:2c:78:5e:9b:01:
                    0c:c4:fd:9a:a6:b4:96:2d:5a:12:8f:99:9c:f0:66:
                    88:29:30:bf:65:ac:92:b8:bc:67:57:00:ac:63:eb:
                    f9:c0:36:e6:8c:80:5d:68:68:8a:d4:e8:e4:d4:d9:
                    c5:8b:af:c9:9b:35:66:85:e6:73:65:e5:f7:54:01:
                    c7:75:59:31:d3:1f:f4:3c:0a:df:c1:5a:23:49:8c:
                    35:cc:7f:e8:1a:5d:c9:e3:ce:37:cc:a7:e8:ad:c2:
                    65:1d:02:49:27:58:d0:b3:fa:24:91:8a:85:34:de:
                    e4:ab:43:6a:16:93:35:3b:cb:46:ee:8f:73:93:1e:
                    4e:93:4a:88:d9:e2:9f:d5:bd:d0:45:60:09:ca:f2:
                    20:4d:c3:21:72:9c:0d:d2:65:5a:6f:13:17:c0:b4:
                    f1:a6:76:5f:7c:31:1b:df:c3:26:5e:4c:f5:fe:ce:
                    44:d6:71:7d:bd:e6:9b:5c:6b:e5:ab:fd:63:7b:e4:
                    83:c8:52:cc:7b:ad:2f:06:8d:5e:ba:6e:55:58:0b:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:9B:76:8D:82:D8:0E:70:C0:80:45:7B:BC:67:36:06:94:A6:1A
            X509v3 Authority Key Identifier:
                keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:37:88:58:d8:1a:18:44:9c:13:50:87:32:e4:80:25:6e:fe:
         de:8f:20:52:73:c8:8d:33:12:37:7d:8d:a1:d7:af:0a:ee:db:
         58:47:3c:70:d2:02:72:86:d8:ed:04:36:57:e3:ad:6c:90:67:
         14:f4:78:1e:01:47:9b:ac:d5:78:8b:d9:a5:a2:0a:72:8a:40:
         21:b8:3c:d5:b5:6c:da:f8:14:93:ff:77:ec:b3:81:22:f9:53:
         ef:59:78:bc:77:4e:e6:bb:d0:3a:ff:10:d9:95:0f:5b:7e:f6:
         b1:4d:7b:16:6a:c9:2c:8b:80:20:cb:44:85:8f:61:91:21:b3:
         ca:9b:49:ba:8e:81:af:3d:be:41:27:0d:a3:ad:bb:ef:8d:95:
         b7:c4:04:a2:74:20:fc:1f:3b:8c:c1:8e:3d:e2:a6:4f:93:c1:
         5b:8a:57:7f:66:a3:e0:aa:e0:75:48:ed:37:1f:d1:a3:90:85:
         bd:be:fd:82:a7:ea:7e:b4:56:77:af:58:a9:00:34:69:12:19:
         b9:a3:7a:28:0f:e9:05:57:c3:7a:e1:66:ea:4f:2f:9a:b5:33:
         a8:32:21:79:bf:bc:66:d7:a1:04:f2:e9:05:5a:a5:c2:7a:a0:
         e4:71:f7:0f:ef:da:14:0e:28:1a:50:0e:a8:64:c2:f8:d4:ce:
         88:3d:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:41 2025 by rpki-client