Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File:                     gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier:          G38UucTaraMpW1wpslbfstaKezBO0YL3OcNAbOTUHVg=
Subject key identifier:   EE:44:74:95:5A:E9:DA:79:4B:21:05:76:C0:0F:2D:DB:68:8A:08:DA
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer:       /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial:       0198D70600E2410E38975DCE52AA5A76F34D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number:          09FA
Signing time:             Sat 23 Aug 2025 13:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:31 +0000
Files and hashes:         1: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: Tv8z5rp1TdkP5gFkpiZKXFo+95UBWQZqUDt9ft15NYs=)
                          2: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (hash: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:00:e2:41:0e:38:97:5d:ce:52:aa:5a:76:f3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
        Validity
            Not Before: Aug 23 13:02:31 2025 GMT
            Not After : Aug 24 13:02:31 2025 GMT
        Subject: CN=ee4474955ae9da794b210576c00f2ddb688a08da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:c2:22:cf:14:bb:a1:a3:ef:1d:1c:67:2a:
                    96:57:5c:3f:b8:cc:1b:0b:ae:d4:fd:f7:97:d4:f3:
                    fa:e6:e3:5f:44:ea:90:6b:4f:07:15:33:19:1f:82:
                    2b:a7:d2:12:a1:30:b4:15:37:ef:7d:da:37:e1:23:
                    bb:4f:38:ad:ed:7b:af:2e:77:bc:f3:e3:19:69:2a:
                    a4:b9:60:0b:ba:7b:90:8b:fa:e1:8e:2b:32:a7:f1:
                    e1:db:d0:bd:68:9d:d4:fb:28:62:36:53:65:71:3b:
                    f3:76:ba:5a:d3:c0:6d:ae:18:ec:53:02:0c:19:c4:
                    98:64:b0:06:c5:77:5b:a4:2b:0a:4d:37:ac:0e:ae:
                    27:e6:6a:15:22:05:e6:0c:c3:46:c7:d5:53:36:b9:
                    99:af:61:da:c7:10:b7:fe:07:36:1a:6d:14:c5:11:
                    75:4f:71:05:83:17:3b:f7:6b:ea:89:31:9a:d3:af:
                    94:22:b5:8f:d0:9f:7a:19:c3:8e:01:77:e0:87:da:
                    13:19:99:24:e4:26:95:84:69:7e:32:77:45:d6:ad:
                    94:27:26:49:d8:32:b2:59:ec:98:a3:4d:74:74:57:
                    fd:52:55:7f:a6:30:ce:ad:5e:a7:c4:07:90:c3:a6:
                    38:e6:2b:ac:21:72:05:dc:d5:38:6c:a4:0b:e9:7c:
                    94:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:44:74:95:5A:E9:DA:79:4B:21:05:76:C0:0F:2D:DB:68:8A:08:DA
            X509v3 Authority Key Identifier:
                keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c5:5b:26:3c:36:25:ae:92:cc:63:ac:38:7d:91:2d:32:34:
         ec:60:f7:d0:b2:de:b7:e5:5a:9a:12:79:bf:4e:67:f7:81:f0:
         04:21:cd:94:37:52:ef:15:7d:a5:01:48:61:a3:fa:0c:58:fa:
         8d:83:c7:7d:b3:35:96:5c:28:6b:50:a0:6d:a4:d9:03:95:1e:
         da:30:99:b3:23:de:b4:0e:b0:5d:9e:d4:99:0a:fd:90:15:b2:
         79:df:de:da:1e:8b:c9:2c:61:f6:f3:61:fa:16:0c:a1:39:68:
         e3:81:8e:73:b2:c7:f2:0d:b4:44:0b:0e:8a:73:04:66:86:d9:
         4a:46:0a:27:39:9e:52:48:ec:e8:ce:79:04:23:21:81:f2:20:
         29:38:d6:3b:51:21:1c:61:88:86:69:1a:77:45:3b:12:77:7e:
         31:8d:ce:d9:8e:9e:4b:43:59:72:4a:88:56:94:df:a5:d4:54:
         85:b6:d8:5c:cd:2c:eb:6b:2c:85:6b:49:db:bb:2b:07:09:b6:
         5f:cb:a3:01:b3:72:8b:5d:54:e7:d3:dc:fa:a1:ee:37:63:0f:
         66:69:70:6a:2e:64:b9:9c:b9:28:a4:37:40:a1:2a:5b:70:51:
         2a:47:04:86:3c:8b:e8:46:8a:06:d8:3f:b0:b8:e6:b6:4d:d1:
         8b:3e:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:10 2025 by rpki-client