Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File:                     GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier:          yJ7KYT2rFGquCQCK/vCXno6NEPWDxHBEwmMnoRSiQs0=
Subject key identifier:   A3:6E:CF:68:25:84:0F:AB:F1:39:70:3E:1B:BB:72:D3:22:AD:75:87
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer:       /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial:       0198D5157B37652B558180396DD33C682C11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number:          1116
Signing time:             Sat 23 Aug 2025 04:00:11 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:11 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:11 +0000
Files and hashes:         1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: DiULvyPkKMpw585v0Zlky/50lcDeqLMid4yCXMBBUUg=)
                          2: fhVodD3Al80st-44wh_3zJPa9hw.roa (hash: fjogseqmXaDswGCqZQtmESnsh5NfjXgWetNNokS6YuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:7b:37:65:2b:55:81:80:39:6d:d3:3c:68:2c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
        Validity
            Not Before: Aug 23 04:00:11 2025 GMT
            Not After : Aug 24 04:00:11 2025 GMT
        Subject: CN=a36ecf6825840fabf139703e1bbb72d322ad7587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:d6:87:d2:1b:c8:b7:16:1e:95:01:2a:c0:
                    58:fa:c5:1f:b6:3e:5b:5e:80:7d:25:de:d2:e9:30:
                    70:6a:95:2a:dc:f8:62:df:9e:91:dd:e4:95:2c:13:
                    40:13:e5:e0:2b:14:51:87:f8:b4:c0:70:bf:58:f1:
                    26:c9:20:eb:b6:fc:21:2b:2b:2b:2e:34:74:7f:c0:
                    63:67:93:af:c7:c8:38:3f:59:68:e5:bd:b0:2d:59:
                    2f:c8:09:32:66:31:87:f7:b0:0e:56:57:16:ea:84:
                    37:21:47:58:38:f8:7f:b5:7b:90:1a:b6:fd:9b:7f:
                    95:ab:13:c4:c4:0c:5c:5e:7e:ed:a4:af:29:61:34:
                    14:d6:7a:76:40:88:50:89:9d:a1:72:78:e1:81:5c:
                    ae:e0:8c:37:65:36:2c:10:4d:2f:cb:9a:c1:a1:bf:
                    8a:da:92:64:dd:a3:ed:ed:ad:20:cf:72:e6:9d:fd:
                    06:75:8b:68:fd:91:48:f0:b1:0c:6d:7e:d2:13:59:
                    07:83:bc:ce:c7:20:be:c5:68:30:fa:4f:22:76:1a:
                    cd:53:fc:93:03:24:69:fa:c2:1d:db:49:e9:e4:76:
                    40:86:33:f7:4d:7a:6b:ae:b9:9d:d7:9f:b8:9b:03:
                    cc:c0:84:42:ef:a6:a7:05:be:c3:12:7f:a8:4a:1a:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6E:CF:68:25:84:0F:AB:F1:39:70:3E:1B:BB:72:D3:22:AD:75:87
            X509v3 Authority Key Identifier:
                keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9a:eb:47:94:14:73:ac:6a:0a:af:80:c3:35:29:b8:7e:0e:
         d8:5e:ef:cb:12:8e:5b:6a:ae:2b:8f:45:95:df:09:1c:d1:a3:
         cb:74:44:2e:bc:d9:f0:04:ef:82:86:ee:7c:28:14:be:92:d9:
         f9:31:73:d5:90:0c:37:a5:b3:59:d3:8f:a4:74:cb:61:ae:15:
         6c:50:87:97:71:74:b7:8e:68:04:d0:dc:69:c3:c3:c9:3d:d9:
         d6:20:1c:bf:37:54:93:bb:c6:d2:9f:11:8f:9f:ed:66:b6:10:
         18:58:c6:f8:59:cf:42:95:e3:8e:7c:f8:ee:98:93:a5:82:33:
         c1:63:ae:a9:9e:1a:c9:6a:f2:5b:cf:03:bd:e9:02:cb:d7:a5:
         78:2a:ac:bf:8d:a9:06:56:d7:ec:99:3a:1a:cc:8e:a0:16:9f:
         b1:3f:75:fb:7b:5c:b8:f0:f0:d0:89:3b:f9:f7:ad:9d:0e:e4:
         fe:d0:a7:1f:2e:28:fb:55:19:aa:30:9c:3c:8c:0c:91:22:f6:
         f6:e0:14:a3:57:9b:6a:0b:49:e5:5c:d6:10:43:c2:1b:ed:75:
         08:97:98:6d:5c:0e:96:67:e0:13:0b:97:d0:f4:43:01:8e:9b:
         5d:55:1f:fd:cd:88:f2:0a:64:bc:49:73:ac:78:b8:c4:3f:09:
         56:80:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:02 2025 by rpki-client