Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
File:                     GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json)
Hash identifier:          nwR3jInROvwcgitt/2/j1phtUCNaY4AREgfVqal3G7E=
Subject key identifier:   EC:BE:55:C2:1C:9D:BF:67:B4:23:23:E2:A6:09:3A:45:DC:CC:16:1F
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Certificate issuer:       /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial:       0199FCC6A8CB78FA7929697E8C059AC40BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 14:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:41 +0000
Files and hashes:         1: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: hLm5dyS3sUdolVfn5KtFckcbvx8aPA+QBgaz3U7+vTc=)
                          2: UkXF7s7wvZTNugO0xMbM-tho3CU.roa (hash: haf3+lwW0Ofrlk+CxaFcagM4HVa+8i2mqBkmuNQ3QQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:a8:cb:78:fa:79:29:69:7e:8c:05:9a:c4:0b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
        Validity
            Not Before: Oct 19 14:01:41 2025 GMT
            Not After : Oct 20 14:01:41 2025 GMT
        Subject: CN=ecbe55c21c9dbf67b42323e2a6093a45dccc161f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6e:78:37:d9:63:39:63:96:9d:bd:d2:10:fe:
                    fb:4f:08:3c:13:4b:7b:89:5e:82:53:ca:14:09:9e:
                    e2:34:bf:99:86:2b:db:b4:3d:d4:9b:dc:7e:f8:5b:
                    07:71:2b:fd:1d:bd:2a:88:68:75:5b:a6:e0:d0:15:
                    6c:0e:c9:cd:6d:95:48:48:06:3f:52:7b:69:ae:d2:
                    e3:6f:46:49:a3:9b:51:57:db:21:f7:72:c9:b8:28:
                    c1:7e:64:52:4c:bc:13:76:72:9c:be:ec:b8:3a:3f:
                    8c:fd:9b:33:d1:18:69:30:e8:09:07:5e:e5:b9:e8:
                    5a:06:43:52:b7:7b:65:75:31:5c:0e:0c:76:f3:17:
                    40:d3:15:6a:d8:db:6e:e4:d9:b3:a3:21:f3:04:51:
                    76:69:8a:40:4a:37:14:7a:2a:bb:77:af:72:58:fa:
                    de:a2:77:c2:10:40:06:2f:21:a0:bb:ba:aa:74:68:
                    84:00:3a:72:85:2c:f2:d7:c8:b0:a4:7e:79:ba:47:
                    15:24:e7:04:63:75:29:d7:e6:b0:3c:b9:75:1c:12:
                    07:d8:a8:20:8c:dd:fa:7b:4e:d0:0e:5c:1e:82:a4:
                    4b:3f:ac:f1:bd:da:83:ed:df:34:9d:27:cb:b0:da:
                    f9:27:0c:99:5a:42:18:24:34:cd:28:f6:b6:08:77:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BE:55:C2:1C:9D:BF:67:B4:23:23:E2:A6:09:3A:45:DC:CC:16:1F
            X509v3 Authority Key Identifier:
                keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:30:1d:f9:66:fb:60:6f:3e:1f:6f:5d:2b:43:82:b1:e1:
         c1:1c:f5:15:58:be:58:62:9a:35:1a:93:46:a0:80:53:5d:5b:
         18:67:43:02:2b:24:4f:a5:12:4a:51:9b:45:e1:0d:64:b6:9c:
         3f:e8:69:dc:0c:dc:cf:fd:80:18:e2:66:2f:40:91:05:58:1c:
         2d:68:0b:d3:01:dc:e1:a7:bc:d5:aa:cc:5b:8f:8d:09:b6:5c:
         3b:3e:30:26:01:f8:63:fe:0b:0b:1c:0a:ad:d9:23:99:c9:58:
         63:c6:9a:e4:88:03:3b:98:34:91:84:7c:a0:89:70:c9:79:1b:
         0c:c9:f6:32:2e:6e:24:c6:b9:94:a7:53:a9:91:dc:c0:34:31:
         20:dd:9d:c1:71:0d:1b:1b:d1:7c:57:bc:fe:8b:3d:dd:a1:fe:
         3f:bf:03:6a:95:30:6d:49:31:5e:df:54:22:95:d2:23:db:f9:
         00:59:a7:00:37:82:de:2b:03:45:00:37:b6:da:03:27:06:44:
         1e:eb:e6:0c:df:7c:1f:ea:d9:44:ab:78:5e:44:78:ae:5b:d8:
         db:7d:fc:9d:ab:eb:ff:d1:0d:d4:19:c3:61:b0:dd:dc:6f:cf:
         bb:23:32:d8:65:41:f6:03:58:3b:07:36:ad:fa:d8:32:09:99:
         47:b3:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:58 2025 by rpki-client