Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          RprZCZadBaEGne+1uhEbqVTC3jJdZwuWyLRUFT7y3ZI=
Subject key identifier:   EE:D9:E7:A1:EB:13:E7:4A:7C:CB:34:E1:CE:E9:D2:E2:D7:9A:E7:37
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       0197B88ED6ADF6A3E6863642C490A9BB0518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          08D7
Signing time:             Sat 28 Jun 2025 22:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 22:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 22:00:58 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: fVz5//aqtRuZuNUquqsIfeNzKkf9ORbxFp4P3lPVqYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:d6:ad:f6:a3:e6:86:36:42:c4:90:a9:bb:05:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: Jun 28 22:00:58 2025 GMT
            Not After : Jun 29 22:00:58 2025 GMT
        Subject: CN=eed9e7a1eb13e74a7ccb34e1cee9d2e2d79ae737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:96:1a:1e:39:5c:8c:8c:ee:42:82:10:a4:
                    dd:96:db:fc:0b:c2:c2:f5:c5:f4:28:f1:b2:75:82:
                    4d:7a:01:28:94:f2:17:02:da:1d:39:59:2e:62:16:
                    62:15:df:9f:9d:43:5a:43:24:d6:b7:b6:10:56:0d:
                    04:4b:af:f0:95:9d:03:13:e4:a3:c4:61:e7:37:ed:
                    87:fe:a7:d7:dc:37:4b:41:55:26:db:aa:4e:3d:88:
                    f5:2d:40:80:96:56:71:c1:f9:81:d2:59:fb:da:eb:
                    6f:89:5e:96:00:a4:77:1d:91:c0:dd:3c:fd:e5:20:
                    77:8e:ea:b6:80:e8:41:47:d4:e1:80:a1:e0:52:45:
                    bf:9e:8c:75:da:77:4c:7a:43:fd:52:6e:16:50:ba:
                    62:a3:24:31:2e:b3:3c:91:e4:8a:3f:06:8d:d1:0a:
                    7e:7e:3d:73:8d:a9:59:f3:97:36:00:66:c7:a2:af:
                    87:e3:a9:cc:18:a5:e4:96:1c:34:38:e0:ee:53:52:
                    ad:0e:4b:83:f5:37:61:b4:02:a1:61:92:d8:6b:1a:
                    94:66:00:d0:8a:64:1c:27:95:ec:fd:35:0f:a1:e3:
                    c4:e5:ae:ae:35:0b:09:e2:fe:f8:a8:bb:91:c8:c6:
                    e7:3b:48:c3:ac:68:d0:e9:23:73:f2:e0:cc:36:b3:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:E7:A1:EB:13:E7:4A:7C:CB:34:E1:CE:E9:D2:E2:D7:9A:E7:37
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:de:55:b9:7c:21:2e:33:6d:7e:4a:76:78:21:d5:5a:88:49:
         00:f3:a5:64:2a:22:c4:65:80:e8:ab:6a:b5:ae:2c:7f:a7:01:
         41:af:d4:d6:16:4d:de:d1:6f:60:fc:ec:78:f1:80:c6:38:82:
         e2:4e:7a:42:7e:c8:4c:10:1d:86:a3:05:6e:5c:52:93:7b:2b:
         8e:a3:b2:dc:cf:de:50:29:53:db:56:e2:e0:a0:55:f2:e8:47:
         71:b5:fe:4a:c6:7f:9a:bd:f9:e9:30:f3:eb:23:f4:c0:c4:a2:
         3d:a1:69:e4:24:ac:3d:0a:84:38:da:43:6f:62:25:67:a7:40:
         4a:03:ae:b8:b1:78:56:46:51:52:c1:63:46:8e:36:fb:56:f9:
         d7:e4:1e:5a:40:fb:b4:04:4f:73:e2:1e:ed:5e:61:6d:5a:02:
         18:7a:9b:07:38:52:75:1c:f3:17:ef:39:e8:ec:dd:e3:48:ed:
         00:8f:ba:00:74:75:54:6e:92:07:a9:af:3b:d0:e4:35:32:2d:
         91:a3:97:6e:d4:38:d5:3b:ef:ca:22:a2:4c:39:4f:fa:a9:7c:
         9e:ba:85:aa:ff:08:0c:73:df:d8:13:ac:d0:20:8d:a2:d4:4a:
         76:64:73:46:e1:61:10:cf:df:3b:98:b5:a2:e3:c8:a3:b8:f3:
         cc:5c:5c:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jtat9qPmhjZCxJCpuwUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NjBlMzZlMjViMWRiYTExNzgwNzVjODAzYzI5YTA0NGNl
Y2ZkZTEwHhcNMjUwNjI4MjIwMDU4WhcNMjUwNjI5MjIwMDU4WjAzMTEwLwYDVQQD
EyhlZWQ5ZTdhMWViMTNlNzRhN2NjYjM0ZTFjZWU5ZDJlMmQ3OWFlNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoWWGh45XIyM7kKCEKTdltv8C8LC
9cX0KPGydYJNegEolPIXAtodOVkuYhZiFd+fnUNaQyTWt7YQVg0ES6/wlZ0DE+Sj
xGHnN+2H/qfX3DdLQVUm26pOPYj1LUCAllZxwfmB0ln72utviV6WAKR3HZHA3Tz9
5SB3juq2gOhBR9ThgKHgUkW/nox12ndMekP9Um4WULpioyQxLrM8keSKPwaN0Qp+
fj1zjalZ85c2AGbHoq+H46nMGKXklhw0OODuU1KtDkuD9TdhtAKhYZLYaxqUZgDQ
imQcJ5Xs/TUPoePE5a6uNQsJ4v74qLuRyMbnO0jDrGjQ6SNz8uDMNrP+7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7Z56HrE+dKfMs04c7p0uLXmuc3MB8GA1UdIwQY
MBaAFBhg424lsduhF4B1yAPCmgRM7P3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYt
ZjI2YWRmZjQwY2MxLzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYtZjI2YWRmZjQwY2Mx
LzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAt5VuXwh
LjNtfkp2eCHVWohJAPOlZCoixGWA6Ktqta4sf6cBQa/U1hZN3tFvYPzsePGAxjiC
4k56Qn7ITBAdhqMFblxSk3srjqOy3M/eUClT21bi4KBV8uhHcbX+SsZ/mr356TDz
6yP0wMSiPaFp5CSsPQqEONpDb2IlZ6dASgOuuLF4VkZRUsFjRo42+1b51+QeWkD7
tARPc+Ie7V5hbVoCGHqbBzhSdRzzF+856Ozd40jtAI+6AHR1VG6SB6mvO9DkNTIt
kaOXbtQ41TvvyiKiTDlP+ql8nrqFqv8IDHPf2BOs0CCNotRKdmRzRuFhEM/fO5i1
ouPIo7jzzFxcDg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:30 2025 by rpki-client