Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
File:                     G3NaOdmSptxEu-c6TZm-PIQvqWg.mft (raw, json)
Hash identifier:          bfYQ+3Rg4GB7pCyPxX3yzwXMr/HRmlgSqm/D5+Codv0=
Subject key identifier:   66:40:40:F6:52:02:A6:4F:D9:30:E9:C7:47:1F:00:F8:D4:0B:46:EC
Authority key identifier: 1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
Certificate issuer:       /CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Certificate serial:       0199FC21A5EA2FBD3A9F3535AD233E1FE284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
Manifest number:          0471
Signing time:             Sun 19 Oct 2025 11:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:27 +0000
Files and hashes:         1: G3NaOdmSptxEu-c6TZm-PIQvqWg.crl (hash: YdDSeuq8Vv1CVfo4J4EBRfKIkd0sW7HTN+NdhO5DaGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:a5:ea:2f:bd:3a:9f:35:35:ad:23:3e:1f:e2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
        Validity
            Not Before: Oct 19 11:01:27 2025 GMT
            Not After : Oct 20 11:01:27 2025 GMT
        Subject: CN=664040f65202a64fd930e9c7471f00f8d40b46ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:23:15:36:cd:c4:17:29:b5:50:1c:0c:66:
                    e0:65:fc:65:36:bb:ab:7b:cf:79:72:51:4e:13:96:
                    b9:94:66:60:96:45:e4:83:ed:b6:34:21:bc:8e:23:
                    cf:30:87:56:ea:9d:72:95:e1:7c:7b:48:d0:bb:80:
                    0e:74:2f:bc:cf:5e:91:ff:de:1c:98:e5:57:53:f0:
                    c4:87:4d:08:1a:61:54:ba:10:b3:cc:37:49:4f:3d:
                    43:86:69:23:3f:75:5e:94:c9:c2:35:6e:2a:c4:91:
                    f8:66:a6:ec:8d:c9:bc:aa:4b:cb:55:70:fa:8c:f4:
                    46:ce:18:b5:3c:62:65:4a:7f:a3:2e:d5:a8:01:3a:
                    b1:73:c9:3a:06:fb:8f:2b:cc:48:a7:68:71:de:78:
                    e6:53:a1:e9:13:c8:f8:98:09:af:5e:33:56:54:2a:
                    bb:4b:f4:ed:16:5a:dc:3b:df:5f:01:1a:fb:bb:cb:
                    f0:84:f0:6b:b9:2e:13:b1:61:3e:71:4d:0f:86:bc:
                    50:c0:82:b2:a3:dd:cb:d1:e5:9a:72:0c:f9:f6:81:
                    c3:22:42:31:23:9c:fa:46:91:c5:64:b6:51:69:97:
                    69:3f:f7:20:51:ec:ca:59:1d:c7:aa:09:ac:d3:77:
                    49:3a:8c:52:7d:9a:37:73:79:04:32:df:e7:c0:b5:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:40:40:F6:52:02:A6:4F:D9:30:E9:C7:47:1F:00:F8:D4:0B:46:EC
            X509v3 Authority Key Identifier:
                keyid:1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:94:9b:2b:ec:be:89:9d:c1:db:6c:90:82:01:6a:cd:45:e8:
         85:0e:ad:0e:23:55:c3:6f:41:6d:33:4d:60:bf:2c:c6:57:30:
         2f:1f:7e:b8:47:d0:67:cb:46:e6:e8:e0:67:38:cf:1a:91:a2:
         33:36:ce:82:4f:ab:ac:fb:73:29:9b:03:a5:56:5b:8c:a3:48:
         30:10:be:40:ae:be:b0:58:49:33:9d:49:56:ea:be:cb:f7:b1:
         8c:4d:d2:12:c2:b8:b6:2d:ab:46:71:e0:a6:72:24:34:0f:69:
         ff:24:f2:b1:ce:9f:b0:b7:e5:6d:08:a2:79:45:7c:3a:2a:da:
         fc:c8:4b:bc:4f:4c:3c:3e:f8:f4:cb:18:08:47:31:b5:fb:d0:
         e4:a1:52:a2:86:46:27:76:27:b1:bf:86:4b:12:2d:59:e3:93:
         0d:b7:97:45:bd:83:10:b8:aa:08:14:3d:5a:e7:a8:5d:5c:76:
         19:aa:dd:29:29:9f:60:62:18:3e:b4:59:ec:13:8a:37:0b:94:
         ec:f1:ab:de:1b:a5:2c:54:b6:54:d4:6f:36:aa:00:a6:8f:7a:
         5c:a1:f7:7f:d1:e4:e3:73:c3:47:77:7e:35:35:73:ca:80:11:
         29:df:82:13:e8:5d:6a:db:73:46:02:05:ac:f4:1a:4e:e0:f1:
         24:c0:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:29 2025 by rpki-client