Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
File:                     aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft (raw, json)
Hash identifier:          xcK3+Q7TgMKX+15syfULhji80Q2dRGqpSMLbSmSeN4U=
Subject key identifier:   CF:1C:1F:88:4A:B4:25:37:89:31:A4:CB:D8:0A:0C:50:0A:3A:66:BA
Authority key identifier: 68:C1:82:4B:E0:B1:6F:46:D2:FF:01:2C:58:25:A6:70:BB:93:2A:17
Certificate issuer:       /CN=68c1824be0b16f46d2ff012c5825a670bb932a17
Certificate serial:       0199FBEBDA5336C3AFB644FF15BB1265A3F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
Manifest number:          03F3
Signing time:             Sun 19 Oct 2025 10:02:42 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:42 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:42 +0000
Files and hashes:         1: aMGCS-Cxb0bS_wEsWCWmcLuTKhc.crl (hash: wjcvxW5N+tPu+C9FJ2xjJ2nhfUUMblIBGLqBPrC7pAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:da:53:36:c3:af:b6:44:ff:15:bb:12:65:a3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c1824be0b16f46d2ff012c5825a670bb932a17
        Validity
            Not Before: Oct 19 10:02:42 2025 GMT
            Not After : Oct 20 10:02:42 2025 GMT
        Subject: CN=cf1c1f884ab425378931a4cbd80a0c500a3a66ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:ad:47:15:e4:11:72:07:1a:29:53:c0:0e:
                    c3:f8:35:ce:02:1e:ff:ad:00:10:63:36:aa:4c:c6:
                    19:9e:23:6e:fe:c1:87:4b:ec:ae:f6:7e:18:7a:f8:
                    a3:19:1d:eb:e5:8e:2b:4c:b8:ee:58:f3:97:b9:11:
                    7e:ea:33:b5:81:fe:ea:01:62:ca:10:c4:dd:84:a9:
                    ef:5f:f4:48:50:55:10:4f:e2:8b:2d:ab:48:49:9a:
                    f1:a5:e9:6c:47:eb:86:a7:0c:a7:6c:e8:06:13:46:
                    61:32:ef:49:83:83:38:09:29:8f:88:d9:e8:b7:49:
                    f0:43:20:35:af:f6:3b:ae:36:9e:7f:5f:fa:51:7b:
                    2c:36:e2:00:5f:3f:25:a4:eb:c9:d2:95:36:70:e1:
                    07:d4:9f:c3:80:de:bb:2c:b0:5f:ee:a2:6e:97:f8:
                    93:b2:b4:38:b0:d3:e9:05:66:d2:d9:c9:7d:88:69:
                    c8:a5:41:a6:f1:97:8f:81:89:e2:f3:bd:3b:84:eb:
                    71:20:5f:33:f1:29:38:b1:8a:17:b6:9c:35:30:0e:
                    94:12:d2:fd:92:70:78:a1:5c:49:66:53:88:36:29:
                    e8:c0:24:0b:3e:69:7b:e6:78:ed:5c:e6:50:07:5b:
                    ac:7d:57:45:26:78:61:ac:37:02:55:2f:cb:48:24:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1C:1F:88:4A:B4:25:37:89:31:A4:CB:D8:0A:0C:50:0A:3A:66:BA
            X509v3 Authority Key Identifier:
                keyid:68:C1:82:4B:E0:B1:6F:46:D2:FF:01:2C:58:25:A6:70:BB:93:2A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:19:c1:76:7b:54:c3:51:50:35:fc:7f:e8:6e:6a:32:4d:98:
         8b:52:6c:b4:86:20:78:55:fb:ed:1b:ab:6f:ff:85:04:fd:56:
         03:36:e7:04:85:b6:9f:9a:73:22:3b:fb:9c:d7:ff:c4:ca:dd:
         38:c8:41:8f:3a:a0:8e:af:87:be:e2:27:28:52:c3:99:95:ed:
         1c:35:e7:94:e7:cb:6e:e7:f7:26:e6:f1:66:a7:43:cb:c9:80:
         55:6d:d9:aa:e6:23:b1:f1:3a:55:e7:dd:e6:1a:b8:9b:b6:77:
         b0:2c:53:9a:0b:d2:19:f7:27:2b:ea:f3:7c:56:52:d5:d7:bb:
         c1:35:aa:b0:9d:18:f4:31:c1:d2:89:35:24:11:a8:8d:12:3e:
         b7:ea:92:af:01:31:07:93:81:60:d7:45:af:fb:40:fc:f1:b3:
         77:fe:1e:b8:b4:78:dd:45:f0:34:24:6d:59:84:6c:f9:75:32:
         55:5f:7f:7b:81:e0:bf:6c:36:6b:8f:ba:8e:a5:96:27:53:0d:
         63:8a:91:5b:15:f8:27:ff:09:b9:03:67:6b:a4:1f:6b:ab:8c:
         c7:95:f8:49:02:5d:07:56:40:90:03:c4:c1:00:77:0e:94:56:
         0d:f4:0c:5c:13:dd:58:a9:1b:1e:71:0a:86:b6:5b:29:09:b3:
         d1:ea:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:21 2025 by rpki-client