Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File:                     GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier:          ik+1+lr7SWclfN/KtqpYnO1iV3OZlqbLPa5IWBArTBY=
Subject key identifier:   11:DF:E8:21:A3:75:69:92:11:BA:1C:F1:84:92:A0:EB:0A:78:B5:FE
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer:       /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial:       0199FC21C030BE9DA4AD599A4A6F6D82F580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 11:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:34 +0000
Files and hashes:         1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
                          2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: CmXHq9rGhxT/kBsMENINNn5nXvhUl4VtQERiB/pVP+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:c0:30:be:9d:a4:ad:59:9a:4a:6f:6d:82:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
        Validity
            Not Before: Oct 19 11:01:34 2025 GMT
            Not After : Oct 20 11:01:34 2025 GMT
        Subject: CN=11dfe821a375699211ba1cf18492a0eb0a78b5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:a7:8e:39:09:f6:a9:e8:07:30:8e:3f:89:
                    ce:98:e2:95:10:ea:4f:82:b6:f6:d7:a5:2b:d8:92:
                    e8:a0:78:e1:30:30:92:2e:53:08:15:6c:5c:a2:e8:
                    5e:02:6e:ba:95:16:94:2f:9e:16:74:72:af:85:56:
                    08:e6:f6:23:d7:42:1d:98:b0:86:cb:68:61:31:6b:
                    53:e5:56:78:ee:d9:59:cb:71:64:17:f8:94:da:cb:
                    ed:0d:88:43:6a:54:2a:f8:97:64:61:6e:87:c2:06:
                    91:4b:ae:43:2f:3c:29:28:8d:5f:ba:b0:11:ab:ba:
                    55:6e:8e:a2:a4:cf:42:7b:1c:8a:96:92:0f:7c:9b:
                    5d:e8:6f:5e:25:85:17:df:c8:54:5d:77:70:65:91:
                    ca:fb:33:22:4e:19:14:4d:e9:2c:b3:b3:b3:af:6f:
                    39:a6:77:98:fa:2c:dc:bf:13:d3:a1:0e:44:b9:21:
                    aa:ae:b8:ab:29:47:50:6a:5a:4f:7c:cd:63:be:d9:
                    9e:f9:67:bc:04:b6:13:e3:dd:1a:2e:6b:ae:74:b1:
                    ff:e3:e4:85:07:e3:76:be:41:8a:f5:a0:cb:e4:fd:
                    85:7c:72:54:9c:ce:b9:79:42:36:2f:ba:aa:c8:16:
                    7d:f5:63:8b:f0:73:df:30:f7:66:6d:e0:98:9e:ba:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DF:E8:21:A3:75:69:92:11:BA:1C:F1:84:92:A0:EB:0A:78:B5:FE
            X509v3 Authority Key Identifier:
                keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:50:18:ae:7d:60:7e:1b:9d:51:55:9a:65:21:d9:69:d0:7c:
         e4:64:99:f9:a4:ee:8c:38:65:b6:b1:e2:8e:89:86:e9:91:50:
         91:fe:ae:11:e8:e3:25:17:6f:de:71:d0:c5:03:f7:cf:2f:dd:
         18:cb:f5:b9:61:c4:54:ae:c8:90:5a:a6:91:e9:90:a4:d7:46:
         b4:70:32:5c:7b:7a:4f:f9:34:5b:31:1d:62:c0:54:19:54:51:
         c2:64:ba:f0:49:3d:a0:3c:6b:8f:a2:f4:b4:c4:81:2e:37:f6:
         65:83:a7:95:ff:4c:29:33:06:f3:b7:e1:cb:ab:cd:06:17:d9:
         9f:e2:bd:18:b0:97:59:f3:0e:97:90:56:c9:9d:64:d4:f3:97:
         05:d5:ce:4c:6e:95:fc:22:3c:aa:b9:39:c8:62:ae:ac:5b:11:
         c9:9a:5a:ef:f3:e8:b0:c0:0b:c6:a8:52:87:26:52:f4:41:c2:
         22:d3:2e:6a:19:98:35:31:01:3c:09:da:24:c3:eb:79:06:be:
         d7:36:2c:54:f9:95:84:c1:3d:f0:0f:c2:1e:43:af:64:a3:96:
         04:f8:65:b4:bd:43:23:5b:da:1b:4d:ae:8d:d3:8a:48:57:7c:
         7b:7b:23:69:55:c2:1f:62:27:ff:8e:f7:5d:a2:cb:4b:08:b8:
         eb:7d:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:29 2025 by rpki-client