Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
File:                     gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json)
Hash identifier:          Ukd7f5rcOkuvkYxp0N26bgAKUOu5XW0XHOB1t53HBy4=
Subject key identifier:   2F:4D:81:78:E7:92:0F:01:53:FA:BD:47:3D:79:26:A9:D1:71:60:AB
Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
Certificate issuer:       /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Certificate serial:       0199FBEBD905C117C5AF25DE7754BAC70E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 10:02:41 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:41 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:41 +0000
Files and hashes:         1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: epA6ShzC4uJ9KCdan+XCjdBaALNc6DnITRzXMSHasg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:d9:05:c1:17:c5:af:25:de:77:54:ba:c7:0e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
        Validity
            Not Before: Oct 19 10:02:41 2025 GMT
            Not After : Oct 20 10:02:41 2025 GMT
        Subject: CN=2f4d8178e7920f0153fabd473d7926a9d17160ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:e7:45:00:5d:7b:06:9e:85:dd:9a:c9:e2:
                    88:ff:31:18:8a:88:e7:50:be:77:e6:d6:8f:73:35:
                    7b:93:c8:08:11:b5:3b:3c:81:50:c2:8b:a1:7a:fc:
                    20:83:18:d8:0e:bb:67:93:6d:af:4d:e2:db:95:27:
                    3c:93:02:dc:bf:e0:bd:ef:a3:0c:72:7b:f3:ee:65:
                    fa:34:03:71:c7:cc:26:26:97:37:4a:88:85:16:1d:
                    26:17:0d:2b:5d:b0:5f:75:83:d9:f0:48:20:1d:18:
                    0a:4e:79:d1:c4:77:03:b1:9b:03:07:c4:6b:6d:ed:
                    78:6a:b9:b5:e8:a8:58:f6:c5:da:6d:25:7d:83:a9:
                    3d:9d:55:82:ac:24:56:15:e4:9e:52:a7:1d:03:6e:
                    95:97:03:84:31:aa:fc:66:e5:7c:b3:40:b2:5c:bd:
                    bf:c9:2f:8a:39:e8:44:4b:60:24:c4:e0:ab:4f:bb:
                    6b:aa:07:e5:18:ad:e9:bc:04:6c:99:b2:50:b5:5c:
                    49:4e:cd:31:51:43:1a:fb:42:c4:ca:54:90:8c:5a:
                    a4:73:e5:18:be:6b:fe:30:90:11:90:bd:8e:df:22:
                    67:ea:0f:ad:3e:11:09:69:67:5a:f1:10:1a:63:1c:
                    20:c6:16:ee:38:b7:91:ff:c4:bc:1c:de:06:ab:59:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4D:81:78:E7:92:0F:01:53:FA:BD:47:3D:79:26:A9:D1:71:60:AB
            X509v3 Authority Key Identifier:
                keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f4:fa:61:3a:a9:04:ee:cf:61:7a:4d:26:c7:93:6e:55:9e:
         df:9e:99:d1:ef:bf:ee:d0:d5:2a:2d:d9:aa:44:bd:ca:ce:c5:
         3d:e1:4b:15:61:d4:71:e7:6e:ac:95:68:6d:cd:07:22:88:5b:
         b3:22:66:ec:7e:13:2e:87:6c:ff:6e:63:7d:0e:cd:76:ab:f6:
         23:c9:0b:6e:34:ac:62:36:03:eb:61:23:7c:2d:71:5e:2c:65:
         f3:e8:d4:28:a8:da:46:a3:0c:e0:6b:0d:46:b1:40:bd:78:95:
         f0:66:84:a1:03:3c:65:e6:88:c2:06:aa:74:f3:d8:a6:b3:b1:
         38:2c:0e:ae:4a:5a:fd:3d:20:00:f6:a2:57:95:6c:97:fb:eb:
         12:bf:4b:e2:02:b2:6b:26:ba:c1:48:89:bc:4d:58:c9:16:a5:
         d9:6b:1d:a8:84:62:73:d6:6b:70:0a:33:cd:3f:a0:6e:52:51:
         b0:1b:29:ff:68:2c:f8:9c:99:c8:6f:b7:92:3b:ed:80:6d:ae:
         42:6a:f8:a3:46:d0:2d:fa:fd:fe:8f:de:29:c6:8c:49:f4:a0:
         ab:9f:64:7d:17:46:8e:51:89:6a:a5:79:31:85:b4:18:a3:aa:
         88:65:4f:68:8b:df:be:21:0c:52:92:b2:77:32:ed:6e:8e:26:
         39:5c:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:18 2025 by rpki-client