Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File:                     gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier:          6bsE8bBe1u63O0MnELIqBPkLqGHgExflsI84/diqI0k=
Subject key identifier:   C5:88:E0:E4:6F:39:3D:70:ED:CB:54:75:09:69:80:6B:61:C4:77:49
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer:       /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial:       0198D4E0A12C23B412D5B56CE4CC8309637B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number:          05B6
Signing time:             Sat 23 Aug 2025 03:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:27 +0000
Files and hashes:         1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: HRte85KsU9s9ZKEG+pyb7heZyAOuvYF+kqUz5SMJnQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:a1:2c:23:b4:12:d5:b5:6c:e4:cc:83:09:63:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
        Validity
            Not Before: Aug 23 03:02:27 2025 GMT
            Not After : Aug 24 03:02:27 2025 GMT
        Subject: CN=c588e0e46f393d70edcb54750969806b61c47749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:17:c5:27:1b:fb:e7:d2:55:88:ff:8b:67:7c:
                    3e:29:25:44:31:4a:8b:c2:c2:a4:00:17:73:d4:47:
                    df:1e:a6:92:a7:ed:fb:4e:c1:f1:f7:29:ef:24:a5:
                    c6:80:2f:dc:b4:36:63:b2:db:11:52:d8:1c:b3:1d:
                    70:6d:80:bb:43:7c:7c:0a:28:e7:15:d7:c9:dc:87:
                    e6:e5:0c:a4:c0:6e:78:5f:95:28:16:4c:7a:50:15:
                    c0:d1:86:88:c3:10:6c:c2:af:2a:c7:1b:ab:b8:b7:
                    ef:05:26:45:81:ac:98:eb:25:81:e5:f0:b5:c0:e3:
                    11:37:58:ae:99:52:e6:60:24:17:7a:93:a8:e4:de:
                    fc:dd:a1:8b:21:27:ea:27:69:8a:7e:1b:a9:e7:62:
                    73:cd:3e:60:25:c8:b9:35:8e:3d:82:99:07:64:a6:
                    ed:ae:0f:25:b6:54:f5:b6:72:1c:2e:b3:b9:03:b1:
                    21:1a:4b:64:e9:d0:35:97:11:c4:29:54:78:4d:42:
                    66:39:d6:cf:82:d8:92:20:dc:4a:8a:7f:4c:dc:89:
                    18:70:a9:bf:32:9c:64:95:c7:a3:82:c5:b8:0e:52:
                    0c:8a:69:f1:b3:34:ec:74:bf:6e:a1:b1:da:c9:6d:
                    7c:8a:fd:66:67:f9:22:5d:55:11:d3:bd:13:88:03:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:88:E0:E4:6F:39:3D:70:ED:CB:54:75:09:69:80:6B:61:C4:77:49
            X509v3 Authority Key Identifier:
                keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d8:a3:fe:6c:44:f0:c6:51:9b:4c:30:b5:cc:3f:14:43:2e:
         f5:17:d5:3f:9d:88:a6:92:d1:16:18:50:2d:c2:c3:e3:87:d8:
         4f:e0:91:51:6b:df:b7:7e:0b:f8:64:de:aa:64:c4:a3:2e:e1:
         71:fe:b9:f8:bd:f1:99:ee:56:e9:c8:7d:02:65:57:14:ff:51:
         74:c4:42:cd:e7:30:1f:17:d3:6d:0b:5e:42:4d:e4:f6:22:f7:
         47:08:ed:93:7a:f1:31:6f:23:ca:32:11:ae:98:79:ee:7b:86:
         44:1a:f0:48:1d:7e:6f:7c:2a:ea:05:c4:e1:54:5a:fa:d1:a0:
         41:96:10:83:81:1d:17:9a:77:71:34:8e:da:67:e7:3d:c5:73:
         1d:46:f3:b4:ac:d7:18:74:33:aa:8c:ca:35:d7:7a:10:12:93:
         2b:e6:2a:bb:14:76:f4:64:3f:bf:e2:5a:ea:1b:27:1f:49:75:
         4d:67:3b:2b:66:21:d8:6e:e9:60:c7:de:e6:89:45:a3:f4:34:
         88:63:30:98:3c:04:7a:b5:ed:bf:ba:f5:5e:47:fb:b8:ef:29:
         be:ff:6d:81:32:5f:a4:dd:e0:09:ac:9c:29:86:03:da:21:fb:
         bd:18:b3:24:35:10:89:da:45:86:20:0a:b4:94:31:62:a6:af:
         14:d1:d5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:43 2025 by rpki-client