Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File:                     GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier:          /+1PXxFWigYweQfjxgdBoZLvJVfq1ckSDR+mh/rT3LM=
Subject key identifier:   E6:8F:56:2B:FC:4D:DC:35:A0:65:AE:C6:00:1B:10:A7:C3:DF:E0:A0
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer:       /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial:       0199FC58D9CB862083B6E02AA223970FF011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number:          0840
Signing time:             Sun 19 Oct 2025 12:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:45 +0000
Files and hashes:         1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: ZtWdB9Ts+YQwAicEMzL1QVxTwRAIMtoYVr2FnIDEtm8=)
                          2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:d9:cb:86:20:83:b6:e0:2a:a2:23:97:0f:f0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
        Validity
            Not Before: Oct 19 12:01:45 2025 GMT
            Not After : Oct 20 12:01:45 2025 GMT
        Subject: CN=e68f562bfc4ddc35a065aec6001b10a7c3dfe0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:bd:5a:7e:4a:7a:08:32:04:7f:5a:ff:f0:
                    37:20:9f:3b:eb:25:d3:a3:8e:08:be:79:09:2f:dc:
                    86:78:58:32:7b:73:d1:7f:71:bf:6e:b4:e5:53:6b:
                    d3:5f:7b:e1:ce:f2:19:c0:ab:65:4c:11:56:23:e5:
                    c2:27:c1:13:18:17:8b:d1:04:05:83:ab:2f:9f:ae:
                    15:97:e0:16:6c:49:4f:8d:0c:56:7a:4c:27:73:6b:
                    55:85:05:07:75:b2:5a:49:de:bb:10:91:3e:98:4b:
                    35:8e:ac:45:ec:65:21:b6:61:77:75:00:d4:4e:6c:
                    da:1d:75:d3:fe:11:4b:4e:d7:47:af:e1:67:44:d6:
                    f0:42:e8:61:30:23:53:2b:6f:94:54:08:39:fe:2f:
                    43:0d:d9:04:d9:15:86:c8:16:b3:95:e5:0f:92:51:
                    da:37:a0:57:ab:30:71:c8:3d:cc:8d:1e:b3:06:26:
                    03:6f:05:ce:42:69:7a:f4:6f:98:41:79:70:27:c0:
                    1d:5f:61:20:9e:73:70:89:a6:24:e0:8f:63:95:f8:
                    0f:e3:7e:c1:25:5d:f4:d3:96:d7:d6:07:a7:c8:5f:
                    dc:af:f0:c1:bd:fd:a0:97:36:23:a7:c6:1f:38:c0:
                    38:09:e4:12:b3:39:83:8c:91:9b:1c:f1:e9:79:a1:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8F:56:2B:FC:4D:DC:35:A0:65:AE:C6:00:1B:10:A7:C3:DF:E0:A0
            X509v3 Authority Key Identifier:
                keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:67:6f:99:89:9c:db:4f:bf:b7:6c:88:8e:54:f4:56:dc:18:
         c3:f9:ec:d1:39:cf:f8:82:29:ca:15:0b:64:ed:16:33:05:39:
         33:28:f5:22:ed:61:20:bf:a8:8f:21:c4:77:9d:ea:f9:08:a0:
         ad:79:3d:ee:9f:2f:ae:ef:34:3a:2f:b6:33:7b:0d:bc:d0:f6:
         ba:23:b4:34:95:e6:0a:18:42:e3:71:e1:a4:61:65:70:46:3b:
         60:51:aa:bb:85:05:02:01:98:35:ea:76:29:80:2c:ba:67:ef:
         6e:d1:28:c4:52:b6:5d:fb:aa:63:bd:45:50:7a:ef:df:91:c7:
         00:ef:a7:16:17:b8:33:96:23:85:38:61:9c:6c:2e:d0:bc:fc:
         ae:3a:d5:cc:e7:11:a0:4e:cf:a0:70:41:d9:60:b3:6e:9f:ae:
         5f:eb:ce:89:e1:9f:04:f8:e8:7c:f1:71:54:82:09:13:07:c2:
         5b:e5:ea:92:20:3b:e9:55:96:25:4c:ce:ac:03:aa:71:f4:56:
         f2:00:b7:96:22:7a:08:6a:89:aa:59:53:d5:07:9f:f2:3a:7b:
         26:59:69:cf:37:93:e1:49:1b:15:11:06:36:43:d5:94:6e:23:
         b0:24:57:65:3b:a1:9c:25:1d:c7:bd:47:ee:19:21:93:34:a0:
         21:30:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:57 2025 by rpki-client