Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          waeVG9O0SvyTeCdv874e5b3gLhXMeUpRx7Upt6H316o=
Subject key identifier:   B0:95:3A:42:9D:35:FD:DE:C4:7E:EA:1A:36:CF:98:87:9F:A5:3A:FA
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       0199FF227427DD2BAD1447527FD32C9FDE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          1813
Signing time:             Mon 20 Oct 2025 01:01:11 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:11 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:11 +0000
Files and hashes:         1: 1n0iUufyC32wk_T4qZReLrdS7Lo.roa (hash: 7aFFmQKVJ/WQ8e5tWGkn7LGIf42Y+X01LTOXkB8FcEw=)
                          2: 7pztvUDezwt3ZSHLohSTcy0jFYM.roa (hash: uP/w6/w3g1+AZjMv77F/dMcv4FObFdLOts1JHnWbc4w=)
                          3: 96rPJp6i-0yTIl2eXrRIOjD_WkY.roa (hash: qm6kevYtgMGHrywZZ1sb+uSxDy/NiPleVQQT1cxeiZE=)
                          4: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: 0xP3WqgBEKlHiQaS+DiZPYWzEjAWGGllw2U0hUjqzRc=)
                          5: HzL1Fg_mO6MtGqLsadBuZD0w0tU.roa (hash: EXpBnkO0GwOPGBTJbjaVQnvzJWaCf+/vKO9/5craaLQ=)
                          6: O2A95fKA1A2XI5zokqy2M5EQluY.roa (hash: l7DaeRNWKyhpILryPmDUINT37G9okCmuQyW2gonVmu8=)
                          7: oerIe3XBauoH4wnjH-yQh4V4P1U.roa (hash: auHewUAAn3a0HGRSavJta0QusST9c8r9vsoZnA0C1aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:74:27:dd:2b:ad:14:47:52:7f:d3:2c:9f:de:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Oct 20 01:01:11 2025 GMT
            Not After : Oct 21 01:01:11 2025 GMT
        Subject: CN=b0953a429d35fddec47eea1a36cf98879fa53afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:8c:b6:68:1e:74:45:b0:09:12:5b:71:f0:
                    69:97:a5:5a:8e:d5:3d:b5:6c:5e:3e:fc:64:24:c3:
                    33:54:4a:51:b7:06:4d:9b:6c:30:b1:fa:ad:5d:82:
                    a6:24:07:33:bf:43:94:0b:3c:30:4e:66:7f:4c:5a:
                    34:91:fa:b5:d3:91:49:f2:19:fc:d1:b0:0d:b1:5a:
                    05:60:02:9a:ae:f0:bd:95:f4:22:78:8a:08:0b:8f:
                    9d:ea:93:d0:80:68:b7:fe:b6:1f:94:3f:37:1e:2e:
                    11:77:98:e3:a4:f8:83:c3:2d:81:05:55:17:83:23:
                    2f:33:76:77:0e:8d:54:dc:c8:95:35:c5:44:b0:bb:
                    72:2a:e1:ad:85:70:72:35:58:bf:f9:ff:09:af:45:
                    32:17:e1:cf:82:a0:c5:8f:98:c2:f1:fe:74:f0:85:
                    95:c4:49:a0:92:58:78:c3:04:fe:28:c0:88:34:6e:
                    e7:6a:00:15:bc:ad:5e:d0:e8:a6:c1:7f:68:20:26:
                    78:94:dc:32:9d:3d:af:27:d4:8b:26:c0:d7:6a:3a:
                    8b:de:af:4b:e1:94:6a:95:76:80:2d:8c:fe:17:0c:
                    ff:32:d1:77:38:f0:23:c8:77:8e:30:de:81:ea:8f:
                    26:02:95:8e:16:24:67:dc:e8:6e:12:c5:ee:e5:c9:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:95:3A:42:9D:35:FD:DE:C4:7E:EA:1A:36:CF:98:87:9F:A5:3A:FA
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:28:d4:90:9a:05:c6:a0:14:b3:90:35:bc:ad:c5:25:c5:a0:
         7b:e5:e4:0c:1d:58:0d:39:93:47:57:d1:99:f7:6e:b1:83:ac:
         b8:6f:a6:7e:b3:9b:3c:dc:a3:40:73:fa:be:98:68:06:79:a9:
         36:63:92:69:28:e3:0a:c4:63:67:b8:a9:d1:60:d3:16:e4:1f:
         ce:5b:a8:b7:5e:46:f2:1e:7d:bb:ff:86:99:2a:7a:d8:e3:cf:
         95:42:6c:48:fe:97:c7:e3:ba:17:14:71:da:ef:10:18:fe:58:
         2b:26:9c:ed:95:36:b2:5b:5b:31:cb:44:96:53:18:cf:fc:1b:
         d1:ea:65:2b:fa:1e:18:e8:73:63:6d:dd:91:bb:0c:f6:d4:38:
         6f:99:8c:ac:66:d5:df:5d:f8:46:cb:b3:dd:43:11:13:41:3b:
         ff:e6:ab:6c:56:38:85:f2:63:a3:2a:de:af:f8:a7:b3:27:32:
         ef:20:ac:3f:ce:25:7f:f0:70:4c:1f:f2:1e:f5:f9:df:87:89:
         e2:e0:d5:c4:68:4f:94:3b:de:cd:e3:05:56:b7:59:03:d6:95:
         d4:82:8c:1e:b0:5a:26:1d:8b:d8:54:57:ca:fd:64:87:79:3d:
         b7:f5:4d:84:54:04:12:6d:83:ce:07:80:ac:bd:77:81:d2:55:
         70:a6:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----