Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
File:                     G6QV0W5y4zPyk2wcXhffJDeBCMI.mft (raw, json)
Hash identifier:          K04C26+p7+dif/HdOj8blic6D/Vk1n8vKojmM9QgM8g=
Subject key identifier:   29:38:DA:9E:A0:23:49:61:62:84:6E:46:3C:4A:5F:24:51:E3:47:DD
Authority key identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
Certificate issuer:       /CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Certificate serial:       019A02C7C233DF4B0E664F42E4D544D8E582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
Manifest number:          0584
Signing time:             Mon 20 Oct 2025 18:00:36 +0000
Manifest this update:     Mon 20 Oct 2025 18:00:36 +0000
Manifest next update:     Tue 21 Oct 2025 18:00:36 +0000
Files and hashes:         1: G6QV0W5y4zPyk2wcXhffJDeBCMI.crl (hash: pNDKRU0z2idRMkS6I8YCbOREYfZCcunUTp7TKAcvP/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:c7:c2:33:df:4b:0e:66:4f:42:e4:d5:44:d8:e5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba415d16e72e333f2936c1c5e17df24378108c2
        Validity
            Not Before: Oct 20 18:00:36 2025 GMT
            Not After : Oct 21 18:00:36 2025 GMT
        Subject: CN=2938da9ea023496162846e463c4a5f2451e347dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6f:cd:8c:39:ef:c8:62:a5:6d:5a:0d:c0:de:
                    8e:b7:f1:16:f8:5d:50:18:e1:c6:08:35:35:b1:fd:
                    58:92:da:3f:13:e2:fa:b7:af:67:b0:b8:ea:10:77:
                    f4:5b:4c:9c:1b:eb:0f:87:0a:ba:b4:32:8a:73:b8:
                    55:97:7e:f4:a6:6d:6f:bc:3d:08:c7:63:23:83:5f:
                    5d:be:81:41:78:8f:1c:d3:ca:67:71:4e:0f:61:cd:
                    3e:24:5b:78:f3:e3:24:05:48:51:84:a4:6b:3d:77:
                    20:a2:e7:1c:05:25:3c:75:9d:93:41:af:0e:d0:a5:
                    85:57:a1:d7:59:3b:f3:eb:14:a0:cf:fc:84:ab:b8:
                    ef:28:08:5b:98:c9:5e:22:1a:2b:6c:93:88:74:e2:
                    0a:3b:c6:33:1b:84:12:c7:0f:39:0e:c6:56:21:d5:
                    51:30:1a:fc:db:1c:54:b6:87:8a:aa:0d:17:51:7f:
                    97:7e:7e:70:4b:e2:85:2b:c3:3d:c6:fc:5a:49:44:
                    9f:49:05:07:e1:d6:4a:df:da:19:55:31:19:a9:bd:
                    90:e5:0f:7b:2c:50:67:58:4c:4c:77:83:17:e2:c8:
                    a6:f9:98:5a:97:fc:47:56:3e:1b:24:47:12:12:b0:
                    2f:27:d5:2f:f7:15:57:c6:5b:22:c3:df:42:75:39:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:38:DA:9E:A0:23:49:61:62:84:6E:46:3C:4A:5F:24:51:E3:47:DD
            X509v3 Authority Key Identifier:
                keyid:1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:30:d1:92:54:52:c8:a0:5d:6d:5f:13:cf:89:f1:66:3c:65:
         0c:82:e8:88:16:d8:c6:ec:06:5b:2d:f6:1f:e8:b8:57:9d:e5:
         4c:d0:67:5a:a6:83:de:3b:4d:24:d5:db:11:06:d5:b7:d8:02:
         c0:7c:ed:33:6e:84:a9:c2:e2:de:70:49:07:e6:91:04:fa:36:
         40:b5:a1:9f:b7:31:ef:90:e9:8e:57:fb:3b:19:5e:97:f4:7e:
         af:61:1f:c8:4f:41:16:93:54:25:cd:d8:04:e9:85:81:7f:70:
         63:a2:74:b5:01:3c:a1:99:ad:dd:48:30:f3:1d:f8:74:ee:59:
         12:ce:04:42:c7:0c:0c:c8:83:a2:7e:97:d7:05:6e:49:a8:2f:
         31:49:46:de:6f:1b:53:d7:c0:02:27:aa:fa:93:f0:bb:6f:00:
         a4:68:ce:f3:da:3e:ff:18:28:81:50:f8:72:9a:df:91:20:81:
         75:a6:f6:b8:24:00:82:1a:01:81:e2:f4:ca:66:76:25:3f:bb:
         d9:d4:bb:e2:de:14:29:12:6f:fc:72:d0:e4:97:7b:77:08:f3:
         da:9f:5d:4a:f3:b2:93:16:05:91:06:0d:2e:1f:b1:a0:4b:3f:
         7c:5b:91:a3:14:3a:aa:37:6d:8c:d8:c0:98:d1:c6:93:1a:d5:
         83:5f:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:36:05 2025 by rpki-client