Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File:                     GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier:          XEMap0F3PLg+ax0a7yQ/97ErZVPzhbNHqpPO4X/bTiI=
Subject key identifier:   0B:E8:4E:D9:F4:ED:9A:9F:F0:A8:9F:08:2D:A4:1F:4B:65:7B:F0:7F
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer:       /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial:       0199FC8F5E9BFC03EDB8196E1471E31CA16A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number:          0200
Signing time:             Sun 19 Oct 2025 13:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:18 +0000
Files and hashes:         1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: 2vvzLvb2u7lP2vBoraJ/y3gtZzpVR3lJLBp6uBh3IWQ=)
                          2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:5e:9b:fc:03:ed:b8:19:6e:14:71:e3:1c:a1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
        Validity
            Not Before: Oct 19 13:01:18 2025 GMT
            Not After : Oct 20 13:01:18 2025 GMT
        Subject: CN=0be84ed9f4ed9a9ff0a89f082da41f4b657bf07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:73:85:86:d7:55:2e:61:eb:59:1b:55:27:
                    35:01:db:9f:5f:d4:38:ba:87:7e:64:9e:e5:f7:b5:
                    12:73:d5:a8:59:be:7e:59:72:19:49:44:d9:a2:e8:
                    28:a0:94:b9:39:9e:af:34:a5:6a:7a:ee:5b:81:0b:
                    70:9a:ac:54:7c:e9:b1:28:60:4d:b8:a8:14:73:29:
                    da:bf:e5:cb:7f:56:02:c1:c8:b7:7c:01:51:68:2c:
                    5f:99:12:3f:62:e2:67:f5:54:53:93:42:fc:1a:b8:
                    50:33:e6:d4:d3:06:7f:01:bd:f9:10:22:df:44:7e:
                    f7:a5:47:97:00:0a:46:af:be:7a:85:1a:0a:02:53:
                    a9:94:2d:cb:aa:80:4c:a5:08:4c:9b:9a:e7:5f:05:
                    da:24:fd:b5:4d:0b:8a:a1:71:7e:ce:e3:5f:c3:42:
                    0a:6c:f5:a4:52:7d:ef:58:74:04:b4:58:93:e6:e7:
                    41:c5:ba:f4:42:9b:95:62:4b:1e:c0:0e:ab:7f:15:
                    25:23:54:07:c8:4f:05:dd:b4:ae:95:5e:3c:c4:3d:
                    2d:bb:be:0b:24:17:9c:df:42:8b:11:fb:22:fa:9b:
                    eb:18:9e:27:f1:71:61:be:c9:f9:6e:49:91:a8:88:
                    5e:5e:be:7d:b6:0b:c6:82:83:6e:94:8f:3c:d4:bd:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E8:4E:D9:F4:ED:9A:9F:F0:A8:9F:08:2D:A4:1F:4B:65:7B:F0:7F
            X509v3 Authority Key Identifier:
                keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:39:c5:a5:15:86:76:1e:38:b0:9a:ff:cf:87:e2:69:05:48:
         e7:2b:4c:0f:9c:67:97:0a:cb:d0:a1:d9:d7:87:ef:b6:65:48:
         f7:5c:be:34:1b:ea:e1:6d:59:4c:26:3f:41:47:b6:95:d9:cb:
         54:b5:62:ea:57:8d:40:d6:63:1a:24:43:d9:bc:9a:27:9b:7c:
         75:95:dc:b3:17:fe:bb:58:17:e1:f5:e5:18:9c:3c:88:8a:93:
         a7:1b:5e:43:3a:f8:88:e0:71:f5:7e:81:f7:d1:4e:a5:f4:2f:
         a4:fe:0f:0b:0a:39:0e:84:1a:e4:1d:04:fc:87:fc:92:a8:3d:
         bd:d4:40:8f:6e:c5:f7:ed:0f:cc:a2:c5:be:26:f9:a4:94:0f:
         80:5e:e4:9d:27:9a:ff:55:0c:84:4f:82:7f:8a:eb:9c:53:63:
         cc:fa:32:4f:39:5f:7b:35:9e:98:9a:2f:4f:a1:c0:34:3f:86:
         ca:2e:bd:ca:71:f0:1d:a7:c6:f0:ab:c3:1b:d5:4f:33:63:3a:
         d1:f8:00:68:9d:01:c6:8f:22:8b:a7:1c:51:da:a2:6c:15:90:
         fe:0f:e4:79:fc:16:e8:6b:ac:b8:fa:bf:a0:3f:ee:68:01:0c:
         41:84:fc:79:84:b6:c9:1a:46:28:9f:0e:18:d3:a5:3d:de:b6:
         e5:e3:18:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:38 2025 by rpki-client