Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
File:                     GD41veDiUEYFoX1O0FVDfo00ql8.mft (raw, json)
Hash identifier:          9Hqg40w69QaoyTRHiwJRxMgtAEx8PqdT+DZqiIOkR+0=
Subject key identifier:   63:2A:0C:0A:29:A4:8D:D1:11:A8:C6:70:D9:EC:35:93:8B:9E:8C:14
Authority key identifier: 18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
Certificate issuer:       /CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Certificate serial:       0199FC8FB48F48F77D9C5D20D6981EA07938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 13:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:40 +0000
Files and hashes:         1: GD41veDiUEYFoX1O0FVDfo00ql8.crl (hash: rTWe18N3PPPQuYY5klPPzy02EAm5nVkfkHOQI54Lmlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:b4:8f:48:f7:7d:9c:5d:20:d6:98:1e:a0:79:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
        Validity
            Not Before: Oct 19 13:01:40 2025 GMT
            Not After : Oct 20 13:01:40 2025 GMT
        Subject: CN=632a0c0a29a48dd111a8c670d9ec35938b9e8c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:b4:d6:67:fb:e0:77:10:79:3d:52:45:1b:
                    2f:b8:5e:86:fb:ec:67:16:c5:2f:74:a1:f9:a9:4d:
                    28:c1:f0:4e:a0:7d:21:71:7d:78:5b:53:d7:5f:17:
                    0c:ad:06:e6:46:c1:e7:67:ac:33:0a:5d:e8:6c:0b:
                    3f:93:c8:98:9e:61:dc:be:5b:2f:3a:36:d1:96:2d:
                    38:7f:ec:6f:f4:91:9b:5b:3e:4b:33:c8:67:f2:97:
                    2a:c0:08:ef:7b:ee:8e:a5:77:c7:3f:0d:51:bb:d6:
                    2a:90:60:61:1e:03:d6:64:06:bd:94:f8:94:5d:f2:
                    ce:6a:13:ec:f5:95:3e:25:de:a3:ce:73:5e:b1:11:
                    84:14:98:57:b6:b8:13:80:94:cb:69:be:8a:aa:85:
                    1e:05:7e:3f:82:51:a2:12:39:f5:da:87:53:7c:91:
                    65:3d:8b:b6:fc:96:fd:f5:1a:2d:b1:a7:0d:7a:61:
                    6f:63:9c:07:4c:e4:68:4c:81:c8:d0:4c:46:0d:a2:
                    86:d4:86:f7:c8:aa:23:aa:0e:e3:94:1c:4e:f7:b5:
                    91:92:1f:e1:b0:7b:46:3b:b2:c4:61:b3:1a:44:87:
                    69:95:7a:6e:7e:6a:53:d0:b9:98:6a:d1:fc:b9:9f:
                    05:d7:bb:e6:85:4f:ce:1b:5b:da:7a:1d:5e:68:30:
                    7f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2A:0C:0A:29:A4:8D:D1:11:A8:C6:70:D9:EC:35:93:8B:9E:8C:14
            X509v3 Authority Key Identifier:
                keyid:18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:bb:de:dd:1f:d3:7d:1e:ae:5d:34:2c:b7:38:16:56:b2:16:
         6f:e6:38:e7:11:4b:39:9d:89:01:7a:8a:03:c8:2a:a6:f0:5a:
         1f:ea:a1:75:36:64:67:83:f8:c7:b9:bf:8a:02:60:5f:95:92:
         9b:2d:7f:72:e1:df:5a:b5:bf:46:2a:4b:ea:95:64:df:8b:14:
         1a:05:0b:6c:eb:fd:2e:df:47:5b:28:bc:4e:64:6c:24:89:89:
         7d:5c:22:a8:eb:9a:90:3d:e0:37:49:17:4e:6f:05:0c:89:69:
         89:d5:d0:b2:e1:43:aa:a6:58:93:09:e3:e9:6b:fb:ee:83:a0:
         1a:34:b1:5b:39:c2:f4:3e:a0:44:18:ce:36:3d:5f:13:5e:f5:
         4b:d2:46:18:bf:72:05:c9:39:e5:e1:f8:0e:c1:7a:cf:28:44:
         2b:20:50:58:72:8a:63:08:51:fd:be:4d:b6:2f:df:3e:ff:4b:
         96:2b:b9:55:8e:98:2a:d4:d5:67:06:c3:12:72:cd:65:78:b3:
         95:90:26:9d:dd:62:b4:0a:17:27:22:48:76:a6:bd:69:45:7a:
         54:0e:61:2b:37:84:9a:0d:f6:71:51:d4:67:9c:57:2d:66:7f:
         92:80:a0:2b:e4:8f:71:90:a6:2f:19:8a:6e:0e:88:47:7a:ce:
         49:37:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:35 2025 by rpki-client