Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
File:                     gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json)
Hash identifier:          RrqiDu8xuJ41w6fP5HniQXqTIXuO+Bt6e+yAFU3tvCw=
Subject key identifier:   2B:FF:76:FB:91:33:A9:4B:6B:B2:FE:48:E0:6A:97:B6:56:EB:92:9D
Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
Certificate issuer:       /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Certificate serial:       0199FCC693FC655094C7AE79041EB96DC521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 14:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:35 +0000
Files and hashes:         1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: MpEa0WjcGidyfVpanX5fI8Yfa2lPMI5QAX62MCm9VQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:93:fc:65:50:94:c7:ae:79:04:1e:b9:6d:c5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
        Validity
            Not Before: Oct 19 14:01:35 2025 GMT
            Not After : Oct 20 14:01:35 2025 GMT
        Subject: CN=2bff76fb9133a94b6bb2fe48e06a97b656eb929d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:c8:f6:01:ae:b9:8a:b1:0f:d3:8a:16:55:
                    0f:ff:57:97:67:e5:ba:a7:90:67:d7:63:46:f4:07:
                    7a:dc:4c:e4:4d:d1:5a:1a:9e:c9:9b:53:ed:32:c4:
                    01:74:f5:d0:bb:b8:55:19:77:23:4b:97:d1:7d:59:
                    f1:2e:20:e0:06:c2:c0:9a:05:4d:92:28:1b:1e:f5:
                    c9:98:c0:0d:b7:21:ff:8d:bf:5a:d8:28:5f:ea:88:
                    ce:36:1c:29:24:99:41:ff:7d:48:ac:f1:65:f0:1b:
                    55:fd:fc:dd:5b:df:e4:6d:46:98:98:d6:d4:04:2e:
                    88:f3:50:1f:77:d0:2d:ac:ef:11:13:22:76:cf:cf:
                    5a:cd:cf:54:31:08:a9:64:d7:27:a4:2b:7c:6a:6e:
                    90:30:31:aa:cf:1b:34:49:cb:5d:05:8c:66:16:89:
                    0c:ec:6b:ba:5a:0f:30:1d:ee:f1:8a:0a:bd:5e:0a:
                    e2:f4:b2:65:6b:f7:20:67:29:77:3a:67:2a:47:23:
                    27:7b:1c:02:db:fc:d5:bf:a5:09:40:8a:c5:07:9f:
                    d9:d2:5b:f4:08:84:ca:25:91:59:71:9c:29:24:f2:
                    ca:b7:77:88:0a:db:02:6a:29:38:40:a9:7d:3f:c3:
                    70:ad:eb:af:53:1a:60:66:f6:27:26:20:c7:d1:3e:
                    f4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FF:76:FB:91:33:A9:4B:6B:B2:FE:48:E0:6A:97:B6:56:EB:92:9D
            X509v3 Authority Key Identifier:
                keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:d2:f3:c1:a7:62:96:a9:16:c7:8e:fc:5e:1a:ba:5d:5f:
         e1:29:41:21:a5:4d:fc:9e:8c:69:8e:be:17:ce:50:ce:d0:51:
         8b:6e:10:23:45:fa:18:ee:8e:5c:35:72:d3:28:78:0b:e2:48:
         a1:27:86:6d:6d:72:f2:b2:e1:7d:08:36:6d:20:10:8c:a7:f6:
         12:ea:a9:69:3e:32:c2:f5:11:88:40:95:d4:6a:84:2f:5f:89:
         75:8c:87:a2:33:2c:95:87:08:2f:df:f3:fb:5e:ff:a2:3f:dc:
         11:b9:3d:00:5d:b4:27:86:a4:03:83:99:8e:9b:ab:42:e1:da:
         32:94:b4:5e:11:3f:44:bb:c3:44:1b:fd:0d:fb:50:be:9f:66:
         45:0d:46:d9:36:5a:04:2c:39:db:91:39:a2:e5:ae:dc:83:5e:
         b3:ea:f7:83:17:1a:69:fe:a1:c9:4b:07:37:59:cb:a6:eb:d6:
         60:52:81:b4:60:93:d8:6c:46:39:97:70:16:5d:dd:7f:1c:18:
         93:cb:95:ab:35:16:3a:da:c8:73:bf:93:1f:ac:d2:e2:65:c4:
         05:dc:e2:0d:66:16:ff:f0:e7:4c:04:5c:8a:17:46:39:ad:ae:
         da:e2:0b:79:f5:56:c6:66:05:dc:76:56:94:1c:53:fd:83:6a:
         7d:1a:83:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:08 2025 by rpki-client