Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
File:                     GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json)
Hash identifier:          avcBhPxvRQo/Wked7GjSeanNJ95pvAFMF6TUJs16A68=
Subject key identifier:   67:DF:10:79:81:E4:72:D1:90:7C:33:9F:A5:B3:55:75:CF:76:68:2C
Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
Certificate issuer:       /CN=186590ee4a796301c422e033f944d263d6adeebc
Certificate serial:       0199FBEC11389A63558558657B7F56BE038D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
Manifest number:          1211
Signing time:             Sun 19 Oct 2025 10:02:55 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:55 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:55 +0000
Files and hashes:         1: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: 13x40cKb+y4HGQssJEpSb+ozBWwhevsa1r3DOH9ryuw=)
                          2: xbbxTo9rn50nwhGlFUGMbwhSzbo.roa (hash: zFleJFRgd2evTBBfHWP3ENqdzORcbjMKg0D2r2qzukQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:11:38:9a:63:55:85:58:65:7b:7f:56:be:03:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc
        Validity
            Not Before: Oct 19 10:02:55 2025 GMT
            Not After : Oct 20 10:02:55 2025 GMT
        Subject: CN=67df107981e472d1907c339fa5b35575cf76682c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4e:3c:5a:f2:49:07:39:d5:b5:b5:69:2f:6a:
                    75:c6:10:7a:73:74:22:8c:d8:10:c4:f6:de:c8:30:
                    eb:51:f0:82:0e:b7:77:50:17:77:47:25:48:ce:c7:
                    89:cf:67:d9:be:a3:6e:bf:55:e2:ac:1e:c5:24:59:
                    24:62:3b:b0:f2:50:94:59:ac:97:0a:00:1b:db:c8:
                    cf:a3:a1:b0:96:38:69:e9:68:36:1f:40:5a:42:8a:
                    be:44:f3:5b:3f:45:4e:80:e9:f0:2c:bc:0c:55:16:
                    f9:09:b7:72:9b:33:31:e9:11:8e:4b:a1:10:91:de:
                    e0:92:79:84:50:dd:61:1a:8d:b8:a1:e3:58:b9:19:
                    87:fb:74:27:10:d6:ae:cf:ce:1c:42:43:d5:cd:3b:
                    d8:24:e8:cd:7d:70:4d:e4:5c:d3:ff:78:94:ea:1f:
                    e4:5b:37:1b:70:44:37:a7:1f:50:fb:1a:13:17:f7:
                    11:f1:b3:6b:95:ae:29:39:20:43:6e:d5:45:d4:a3:
                    81:9e:f7:53:2e:6a:87:30:be:c3:47:7b:4e:6a:80:
                    1e:f0:e7:98:85:34:1d:77:4f:52:a5:e1:04:7d:4b:
                    46:c8:36:2b:82:93:0c:7e:9c:62:cb:48:d6:24:10:
                    ba:b2:90:60:a8:23:21:5a:99:03:65:32:20:0f:2c:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DF:10:79:81:E4:72:D1:90:7C:33:9F:A5:B3:55:75:CF:76:68:2C
            X509v3 Authority Key Identifier:
                keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b6:1b:bf:03:f3:b0:02:d7:a3:84:4d:25:47:b9:f0:06:85:
         aa:18:da:9e:9b:62:57:cd:a9:3c:25:94:60:ae:01:67:c0:32:
         49:6c:86:95:3a:8f:49:0d:75:e5:6f:d6:b6:c0:40:0d:2a:35:
         50:ab:a3:3f:b9:cf:98:6a:b4:c7:b7:e2:a3:cd:5d:71:ff:e9:
         fc:39:37:89:0e:58:e2:86:8f:89:ff:eb:e5:63:e4:8b:99:23:
         c9:00:c2:d6:a2:22:fc:f3:4f:d3:45:a0:a3:82:98:e7:da:3f:
         01:1e:ab:4c:90:16:10:ed:c3:76:94:22:5a:cf:25:7a:1c:f1:
         f8:5f:82:a5:d7:95:a3:db:ae:fc:43:7e:9e:18:1a:a3:5b:5e:
         a2:f0:6d:2e:76:e8:99:2d:38:c4:fa:c6:d6:1d:8b:2f:c4:00:
         ca:46:c3:eb:af:24:19:ce:8f:be:3d:2a:8a:74:17:16:bc:61:
         32:38:db:b3:46:8a:6f:31:60:8b:7d:07:13:32:a3:cf:65:af:
         50:4b:ae:15:41:d6:06:62:bd:03:61:d5:3c:e9:b8:d1:2d:9a:
         e1:6e:f2:c9:f3:fe:88:9d:d0:6a:47:65:39:73:b9:11:e0:f4:
         6e:35:6c:df:79:5d:48:ba:4d:16:08:2e:7a:e5:87:ab:1f:a8:
         0d:76:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:48 2025 by rpki-client