Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File:                     GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier:          z7RfD822cuKbXoTI+tNW+kRgBOxwEVCFXtc3u4d3Lb0=
Subject key identifier:   DA:E3:47:92:B7:70:CF:B9:EC:A9:9F:C6:B5:4A:12:AB:59:93:4A:D1
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer:       /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial:       0199FBEAEBB2B5574117F82385A8B073C81D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number:          150F
Signing time:             Sun 19 Oct 2025 10:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:40 +0000
Files and hashes:         1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: Ak94kWwjQQe1kmyBxP23tm3xp4lE6ErFP7YSuSy3+xg=)
                          2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:eb:b2:b5:57:41:17:f8:23:85:a8:b0:73:c8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
        Validity
            Not Before: Oct 19 10:01:40 2025 GMT
            Not After : Oct 20 10:01:40 2025 GMT
        Subject: CN=dae34792b770cfb9eca99fc6b54a12ab59934ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:1f:29:8c:5b:c3:23:11:80:f4:22:cb:65:
                    71:e4:31:68:47:a6:7c:43:62:a7:eb:68:41:e9:92:
                    ec:42:43:0d:81:6f:ee:d5:11:8e:da:cc:82:f1:8f:
                    81:3b:25:85:e7:bf:f6:6c:40:32:84:65:29:23:a2:
                    35:ee:1b:d0:2e:bc:8a:62:a1:af:f7:6f:ad:9b:20:
                    d7:67:e5:3d:4e:45:71:93:ce:b0:9a:73:2d:17:da:
                    b7:2b:f7:94:64:32:74:d5:16:aa:9c:60:f1:fe:54:
                    36:bf:72:d4:76:ca:30:fd:63:fc:77:c4:15:ad:b5:
                    80:16:a3:66:52:83:4d:ea:43:e7:f9:58:c4:14:5c:
                    a9:71:cb:ce:32:41:6e:d2:9d:20:57:a3:0b:26:89:
                    95:19:4b:be:d1:dd:7b:bc:71:56:d0:31:02:0b:7d:
                    86:6d:db:22:b8:13:07:45:bd:a0:4f:c7:72:c9:d5:
                    37:f9:c2:9b:af:13:e0:1d:a6:e3:8e:ce:cc:6a:25:
                    75:d5:c1:c3:29:b2:a4:f3:70:36:b2:7e:1c:61:8b:
                    fa:17:34:32:f3:34:68:94:f3:2f:c2:2b:a3:48:05:
                    6f:18:a6:55:8b:63:93:2f:bf:07:b3:dc:df:01:10:
                    6a:c0:64:46:da:2c:e2:76:7f:05:c5:33:f2:9c:ce:
                    6a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E3:47:92:B7:70:CF:B9:EC:A9:9F:C6:B5:4A:12:AB:59:93:4A:D1
            X509v3 Authority Key Identifier:
                keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9a:cf:dc:e4:1d:73:59:0e:30:f9:10:59:d2:c7:bc:93:f2:
         fd:97:8f:20:26:30:1b:04:a6:7a:62:2e:e8:17:1e:cd:f4:d9:
         45:20:7b:42:dc:a9:91:ef:80:49:f4:d6:38:44:06:ec:eb:a5:
         69:80:9c:18:36:2d:d9:16:c4:18:00:d1:f8:9c:ff:d6:dc:ef:
         04:8f:fd:38:87:27:7d:2d:17:39:9f:f5:8a:eb:60:11:42:97:
         99:2c:7c:3c:63:68:3d:e8:69:a0:b4:95:4e:6a:1f:06:c0:5f:
         52:63:55:6c:23:77:1a:73:a2:8b:ca:49:14:44:5d:f2:6b:09:
         b6:8b:91:b3:c9:2c:da:7b:5e:05:18:2d:b4:c0:3e:86:bc:31:
         1f:aa:29:67:92:3d:0b:d5:30:ec:ef:42:74:d6:3a:d0:29:5d:
         a1:3e:91:d3:c1:ea:5c:40:63:37:ae:d6:54:1a:2d:31:51:f4:
         ed:85:d6:0e:5e:97:ad:9e:a2:88:8a:fa:f3:f1:cf:20:f0:50:
         9c:e5:37:e1:1c:c4:ab:32:46:52:66:13:60:79:22:5e:e4:04:
         86:97:f4:71:36:5d:26:b8:7d:89:49:fe:53:10:23:ee:80:e6:
         27:c0:29:38:6a:fd:5d:bb:fe:47:fc:ec:c4:5d:37:90:04:a2:
         72:e4:21:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:43 2025 by rpki-client