Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
File:                     G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json)
Hash identifier:          0zlgaE2k9TLVWK/B9vPCLlLj9rj3Zjnpgcr7xr/9Y9E=
Subject key identifier:   23:54:CF:FE:89:04:CC:D9:68:1B:35:82:E5:56:CE:E3:D6:0F:14:A3
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Certificate issuer:       /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial:       019A006C497625D7BCFEF3C0A6577B674500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
Manifest number:          063B
Signing time:             Mon 20 Oct 2025 07:01:27 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:27 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:27 +0000
Files and hashes:         1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: eBxJNRa30pOtDnrxYIrw1uNQudW+YWxrwEBDtykN+Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:49:76:25:d7:bc:fe:f3:c0:a6:57:7b:67:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
        Validity
            Not Before: Oct 20 07:01:27 2025 GMT
            Not After : Oct 21 07:01:27 2025 GMT
        Subject: CN=2354cffe8904ccd9681b3582e556cee3d60f14a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:b3:96:dd:3d:c2:0e:34:f5:6f:d1:39:f9:
                    43:7e:c5:02:34:24:e6:ed:b9:04:d4:f9:43:8c:47:
                    6c:84:0c:f3:3c:54:d9:09:d5:e6:b9:17:ab:e5:8b:
                    3e:81:54:af:e6:bf:e6:c6:dc:90:8c:1f:13:62:93:
                    2b:70:1a:ef:ed:16:49:55:d6:70:1e:a0:ce:f8:6f:
                    b4:95:72:33:aa:69:5a:58:2c:15:0a:19:ec:ea:fb:
                    92:e7:a9:b5:4d:9d:2d:de:65:b1:5b:59:5b:22:ff:
                    ea:5e:cb:41:a9:bd:dc:04:63:5e:03:a4:d1:b9:14:
                    6b:00:a4:f6:e3:c5:fe:46:df:ef:b3:89:54:d4:f0:
                    c4:2a:ed:45:ab:76:66:96:6d:3e:f6:c3:c0:58:69:
                    93:ec:8b:a2:a6:2c:ce:c7:02:89:69:8c:fa:41:0a:
                    fb:c8:25:4b:7a:13:3a:63:c8:f2:75:b7:d2:72:ee:
                    15:0b:4b:ba:6c:a7:d5:d7:5d:00:8f:02:37:55:3c:
                    60:2a:a7:39:e6:3f:bb:c7:db:d5:b2:97:ee:3a:c8:
                    f9:f4:66:db:8d:4b:6b:69:86:d8:2e:f3:dd:84:80:
                    9e:ec:48:f8:9b:7e:02:93:4f:c0:a9:85:36:e7:f0:
                    d8:bc:b4:42:87:cb:a3:1c:b8:5f:af:9c:77:fa:3a:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:54:CF:FE:89:04:CC:D9:68:1B:35:82:E5:56:CE:E3:D6:0F:14:A3
            X509v3 Authority Key Identifier:
                keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fc:71:12:62:89:74:8e:31:68:29:0a:3f:30:56:1f:8d:29:
         ce:02:04:7c:77:d3:2e:0a:6d:f3:48:a6:ec:af:cd:a0:25:b4:
         82:13:b8:87:0d:da:61:89:07:5d:26:ac:a5:19:68:64:30:02:
         fd:e1:69:44:98:18:a6:53:b2:c5:8b:20:7c:57:a9:72:6b:24:
         82:49:af:84:88:35:e8:ff:f8:98:43:6c:05:89:52:77:5a:7f:
         09:06:28:b3:a0:d4:96:b1:b3:5f:0a:fb:9d:06:8c:17:c9:9e:
         70:f6:3e:f2:b3:43:51:88:8d:8d:74:30:89:43:2b:4e:59:aa:
         9e:03:39:d6:5f:cb:b2:32:0b:d0:e2:84:69:27:86:f9:d4:fe:
         7a:3d:d3:09:a3:dc:f6:d5:a7:4f:83:62:0b:9d:75:63:d9:ad:
         ca:92:65:99:14:e3:01:56:b7:87:b5:0f:fd:56:58:6f:77:95:
         74:d9:dd:03:0e:68:5d:36:48:41:e6:29:36:51:cc:16:ae:4c:
         b3:da:ee:33:4a:af:65:9c:2a:78:0b:25:81:34:68:e2:6c:44:
         82:de:41:00:40:b5:59:64:a4:ce:02:55:f4:18:e2:0a:ae:fd:
         40:a0:48:a5:70:17:a0:bc:ee:e6:0e:31:97:4e:6f:ad:8e:da:
         e8:ff:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----