Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          wUI0LfJZRIJDJAi4re7hMDWVoAi+dX2Rscbk3O/08dY=
Subject key identifier:   1F:76:24:CA:35:AA:3A:B1:A8:92:48:78:99:0D:E1:3B:BC:B1:73:C1
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       0199FBEBB4C9A445A891626467058AC6BE43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          0A03
Signing time:             Sun 19 Oct 2025 10:02:32 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:32 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:32 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: hQZqQYfxdktYYzjNc0wG6CoySOhxihIYekEpBV3+eZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:b4:c9:a4:45:a8:91:62:64:67:05:8a:c6:be:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: Oct 19 10:02:32 2025 GMT
            Not After : Oct 20 10:02:32 2025 GMT
        Subject: CN=1f7624ca35aa3ab1a8924878990de13bbcb173c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1b:e3:7f:e0:01:7e:ab:e7:2e:3a:2b:cf:97:
                    2c:01:dc:7f:e7:86:25:e2:f3:84:a0:82:76:f9:39:
                    20:96:23:e1:f8:c8:8d:0e:9e:0e:ea:19:94:1b:53:
                    0a:a6:55:a8:9d:2d:35:a2:6b:9e:92:18:14:0c:a7:
                    67:cd:e0:34:78:3b:dd:c8:73:bb:a2:44:e0:4b:7a:
                    e0:9e:d5:3c:56:f5:c9:77:06:c1:d9:fc:34:e1:e0:
                    9e:43:be:b4:98:28:d3:9b:e6:26:32:76:90:1d:a5:
                    00:55:fc:16:e6:d3:f6:ac:7f:f5:c3:66:52:2b:d2:
                    d9:e2:f1:99:ff:68:0b:71:96:9c:44:6b:9b:5e:1b:
                    82:a9:a7:e7:fb:58:b5:2c:91:b2:b6:b9:77:3d:b2:
                    b0:75:69:df:03:e9:95:73:12:d1:ec:22:47:64:08:
                    80:17:b1:b7:e5:f6:f6:13:8b:df:05:e5:80:42:11:
                    8a:79:1c:a6:af:39:ee:f3:56:be:da:71:ed:c8:85:
                    05:46:52:a0:d0:58:1e:62:16:5e:1f:1b:81:b6:d5:
                    72:9a:45:4b:1d:ca:50:a0:8e:1b:94:80:e4:e3:af:
                    21:16:ba:65:ea:79:f0:6a:74:6c:b9:c6:e8:ab:3e:
                    53:79:fe:99:e6:d3:09:a1:92:d6:94:88:ba:53:07:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:76:24:CA:35:AA:3A:B1:A8:92:48:78:99:0D:E1:3B:BC:B1:73:C1
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:78:c5:6d:9d:12:01:0c:c8:ff:73:b9:67:ff:cb:06:99:89:
         3a:a0:5c:18:9b:cf:c2:2f:08:70:9e:f5:93:9c:b5:cf:7f:46:
         d1:4c:cf:8a:52:e0:6a:10:32:2b:70:f5:ab:d6:2c:c3:cb:a2:
         1d:c0:de:b7:b7:62:cc:63:c3:dc:53:00:9d:22:8e:3f:d0:3f:
         be:2b:ce:4f:d2:e2:00:2b:04:99:e9:c7:6b:b4:bc:bd:fa:75:
         ed:5c:d0:35:35:f2:c5:ec:c8:c1:9c:1d:be:b3:c4:05:d7:e7:
         e2:06:5b:8e:67:a1:99:f9:ba:ec:f7:c2:06:87:9c:cf:2d:35:
         c5:ea:fe:7f:a7:f6:eb:3c:2a:ac:39:ed:0f:7a:75:b1:6e:3c:
         62:80:ae:28:a2:01:2e:1f:1d:96:d2:3f:d8:9d:36:23:9d:7a:
         d5:1e:85:33:c8:ad:3a:77:c4:2f:ff:57:46:0c:17:e4:aa:8d:
         36:83:54:ff:2a:c9:e7:a1:a9:12:31:ae:26:9c:d8:19:0a:9c:
         e7:8b:cf:ed:7a:1a:8f:41:36:37:6b:d8:8e:94:f2:4f:24:25:
         bb:a5:15:46:cf:61:99:67:35:04:35:2f:3d:6b:d0:cc:34:f8:
         a0:a3:25:11:84:bb:2f:c0:e6:6a:9b:19:89:ae:f9:fc:65:ea:
         24:7f:22:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767TJpEWokWJkZwWKxr5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NjBlMzZlMjViMWRiYTExNzgwNzVjODAzYzI5YTA0NGNl
Y2ZkZTEwHhcNMjUxMDE5MTAwMjMyWhcNMjUxMDIwMTAwMjMyWjAzMTEwLwYDVQQD
EygxZjc2MjRjYTM1YWEzYWIxYTg5MjQ4Nzg5OTBkZTEzYmJjYjE3M2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hvjf+ABfqvnLjorz5csAdx/54Yl
4vOEoIJ2+TkgliPh+MiNDp4O6hmUG1MKplWonS01omuekhgUDKdnzeA0eDvdyHO7
okTgS3rgntU8VvXJdwbB2fw04eCeQ760mCjTm+YmMnaQHaUAVfwW5tP2rH/1w2ZS
K9LZ4vGZ/2gLcZacRGubXhuCqafn+1i1LJGytrl3PbKwdWnfA+mVcxLR7CJHZAiA
F7G35fb2E4vfBeWAQhGKeRymrznu81a+2nHtyIUFRlKg0FgeYhZeHxuBttVymkVL
HcpQoI4blIDk468hFrpl6nnwanRsucboqz5Tef6Z5tMJoZLWlIi6Uwd1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB92JMo1qjqxqJJIeJkN4Tu8sXPBMB8GA1UdIwQY
MBaAFBhg424lsduhF4B1yAPCmgRM7P3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYt
ZjI2YWRmZjQwY2MxLzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYtZjI2YWRmZjQwY2Mx
LzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXjFbZ0S
AQzI/3O5Z//LBpmJOqBcGJvPwi8IcJ71k5y1z39G0UzPilLgahAyK3D1q9Ysw8ui
HcDet7dizGPD3FMAnSKOP9A/vivOT9LiACsEmenHa7S8vfp17VzQNTXyxezIwZwd
vrPEBdfn4gZbjmehmfm67PfCBoeczy01xer+f6f26zwqrDntD3p1sW48YoCuKKIB
Lh8dltI/2J02I5161R6FM8itOnfEL/9XRgwX5KqNNoNU/yrJ56GpEjGuJpzYGQqc
54vP7Xoaj0E2N2vYjpTyTyQlu6UVRs9hmWc1BDUvPWvQzDT4oKMlEYS7L8DmapsZ
ia75/GXqJH8iig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:06 2025 by rpki-client