Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
File:                     gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json)
Hash identifier:          UFW+6D2GiFzAzw5QPn23S3kOy3+UD2GbzJBpXAmEjRA=
Subject key identifier:   49:94:72:E7:E9:91:42:B6:3F:F1:D4:F3:A2:83:48:1E:CD:AC:AC:D6
Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Certificate issuer:       /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Certificate serial:       0199FBEBC2615C2E59AC9DFA9CA5EEAF8AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
Manifest number:          0855
Signing time:             Sun 19 Oct 2025 10:02:35 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:35 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:35 +0000
Files and hashes:         1: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: vz2oAgSyGTYQcGvdf/RNyHmvlFgzptdOEUeU9qX766E=)
                          2: x6jSUPrNwCyjzV69rEteWUbA8bw.roa (hash: 1zp500CT5AdJ87LI8ByrofonFUUOcrdgDO051AN4e6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:c2:61:5c:2e:59:ac:9d:fa:9c:a5:ee:af:8a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
        Validity
            Not Before: Oct 19 10:02:35 2025 GMT
            Not After : Oct 20 10:02:35 2025 GMT
        Subject: CN=499472e7e99142b63ff1d4f3a283481ecdacacd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:8c:89:dd:c1:61:ef:18:6f:44:a4:78:b1:
                    06:06:50:d4:f9:7b:1a:7e:c2:de:26:1a:ee:d5:8d:
                    c6:d0:1e:13:dd:6f:2e:78:aa:39:ee:0d:0a:63:ee:
                    f0:26:2c:20:2f:4a:c7:35:36:12:f7:12:c7:b6:54:
                    8d:05:bb:f7:4d:47:59:d1:a8:4b:43:a6:ce:0f:e6:
                    01:b9:c3:02:e2:cc:3c:3f:e6:b4:4d:6b:b1:99:64:
                    84:34:89:6f:38:a6:96:35:09:8d:0e:ac:df:f3:cb:
                    7f:e0:19:ed:76:1a:e1:3b:e5:92:3d:4d:cc:83:7f:
                    8b:70:8e:cf:7d:3f:51:00:e9:ac:6a:04:88:1d:34:
                    b9:a2:25:a2:c6:2a:1f:89:80:95:0e:e8:52:9d:21:
                    0b:a1:46:34:25:e8:cc:6f:39:b4:94:27:5d:a7:0a:
                    2e:f0:83:40:bb:8d:4f:95:2c:02:3a:f9:49:2a:90:
                    79:74:c8:3b:a0:4a:16:9d:68:f4:cf:b3:00:33:39:
                    1a:99:06:aa:a2:40:2b:8e:a8:c4:a5:e9:b4:f7:a5:
                    89:eb:ce:8b:6e:9f:be:00:aa:45:d7:ed:7d:09:ae:
                    9b:39:4f:14:b2:7d:61:2f:0a:c7:a6:98:4a:ae:5a:
                    13:d9:ae:d0:70:aa:40:a6:47:e1:5b:00:64:63:77:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:94:72:E7:E9:91:42:B6:3F:F1:D4:F3:A2:83:48:1E:CD:AC:AC:D6
            X509v3 Authority Key Identifier:
                keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:03:60:18:d8:e9:64:91:e2:ea:80:45:3f:b6:87:ba:2d:8e:
         c3:88:42:f3:f4:8e:85:25:19:97:09:62:ae:ec:7b:3a:40:e6:
         fe:6f:53:32:70:cc:86:64:8d:76:83:21:54:e1:01:8d:42:28:
         b0:d2:a9:5f:31:a8:68:56:ae:54:43:b3:d1:cc:40:7b:c8:b9:
         79:25:39:94:4f:45:5b:34:8d:60:9f:fd:10:d1:b9:06:e4:d9:
         cb:47:d8:21:dd:c8:5d:f6:aa:81:09:08:8a:b5:f5:22:3c:97:
         57:7b:c5:53:6e:87:44:b9:d7:5b:f0:29:7f:b0:8f:1d:de:8d:
         ff:8e:90:fa:21:83:f2:46:bd:28:e4:b0:78:87:08:a5:84:2e:
         07:f9:bc:51:b8:ff:a0:e0:9c:68:f4:60:da:ef:67:ee:23:c8:
         4e:90:9b:28:bf:0c:94:40:a4:17:42:46:a9:0b:34:f7:79:96:
         d4:5f:fc:49:2f:36:1b:9c:22:a1:83:58:9c:47:2a:52:0c:a5:
         f5:fe:01:b5:f9:69:2f:19:ac:01:a5:28:6d:31:5b:47:5c:70:
         74:7f:8a:8d:1d:8e:a0:56:a6:8b:0d:05:0f:bd:dd:4c:04:43:
         78:61:22:94:6c:9a:32:3b:ae:28:5a:b8:d3:37:cd:2d:6c:aa:
         df:70:6d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:43 2025 by rpki-client