Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          evb2tosN9K9eceV/dHoJ1aWzHXp/UHev7y57C78ByII=
Subject key identifier:   AE:F1:6C:EE:D1:FF:68:CE:8E:92:01:3C:5F:BE:FA:6B:58:A6:2D:79
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       0199FCC66B0DC2AA2EA1E09F95DCE22C37B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 14:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:25 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: mS3GAQB+Nev+dbsZCi3zbpESHY1T6iC6PcByIo9SLzY=)
                          2: TOBAVscU9VJTwLsUhLP0tAjAQi4.roa (hash: IKzhkAp3S93tfIC5ceCBznZ4xMgoDfcxElkoH29JQ+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:6b:0d:c2:aa:2e:a1:e0:9f:95:dc:e2:2c:37:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: Oct 19 14:01:25 2025 GMT
            Not After : Oct 20 14:01:25 2025 GMT
        Subject: CN=aef16ceed1ff68ce8e92013c5fbefa6b58a62d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:ba:f9:97:b6:05:f4:9e:6a:dc:3d:43:3a:
                    8e:50:3a:fd:dc:7d:95:c5:9f:0c:8d:2d:03:b1:a3:
                    c8:46:42:88:ac:cc:68:74:b6:92:1a:c7:a0:b6:17:
                    57:8f:de:95:62:b3:b1:92:97:4c:37:88:fc:da:3b:
                    7e:3d:8a:59:6f:90:5d:5e:0c:51:e3:d0:59:6d:6a:
                    8b:59:e0:5b:77:31:07:1c:bb:cf:5d:ac:14:c9:7c:
                    33:b6:37:93:e4:24:70:b7:29:85:b8:9d:0e:20:f2:
                    86:eb:70:4b:b1:4e:fc:31:c8:d3:5d:74:39:74:04:
                    8c:50:c5:7e:07:5c:90:ef:e7:57:f3:59:08:f7:af:
                    2a:69:40:33:54:9c:de:44:a0:38:c1:9f:8d:c7:50:
                    74:0d:98:4d:6c:4f:da:84:73:87:dd:14:0e:79:d9:
                    dc:0b:2b:fe:86:c2:e6:00:c6:33:c2:ab:c7:f4:91:
                    a3:4a:6e:63:a7:ea:99:d1:e3:a8:32:a7:be:f6:08:
                    8d:44:74:2c:83:35:25:cd:66:e6:8c:6c:0a:de:f7:
                    33:ea:0d:93:37:15:7a:ab:33:c8:93:c6:d6:17:85:
                    9b:ae:35:92:02:71:c0:69:8b:ad:75:69:b0:ee:b3:
                    fc:3f:bc:ef:be:ca:a6:54:fc:44:72:33:03:19:c8:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F1:6C:EE:D1:FF:68:CE:8E:92:01:3C:5F:BE:FA:6B:58:A6:2D:79
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e1:39:9c:aa:e6:50:b8:42:11:44:e8:13:5f:20:95:ef:dc:
         30:b5:d4:18:bd:40:31:f6:53:28:88:aa:40:2e:58:20:e9:25:
         ce:8a:3f:d2:63:b2:2b:5b:f9:cb:e1:1f:1b:30:dc:75:ac:92:
         65:c7:83:06:c5:a1:9f:53:0d:7b:6b:e3:41:72:4a:f2:97:a6:
         c7:96:43:d4:2c:23:d3:ff:71:74:58:d2:fc:84:16:03:b2:10:
         ae:43:31:6e:d2:cd:a1:9f:8b:36:50:73:52:c2:bc:1c:32:31:
         d6:0b:34:18:6a:10:3a:ba:b6:58:b7:29:84:74:d6:80:a0:9b:
         3a:46:ab:39:13:c4:5d:98:2a:73:fb:4a:8b:eb:bf:70:8a:43:
         7f:20:89:ac:9b:43:8b:6b:c9:15:9d:77:dc:03:e7:fc:89:41:
         7b:3c:c4:e9:d4:1a:72:65:e8:25:7d:e9:9e:bf:47:da:62:1b:
         d2:70:6f:83:c5:04:27:60:f8:e4:b4:b3:3e:e8:c0:4e:31:a1:
         45:43:66:ac:96:b5:94:f3:7a:2e:3a:7f:90:3c:5e:7c:5f:19:
         c7:ba:63:7b:68:7c:35:c1:dc:f2:b0:29:f3:92:71:25:fa:13:
         d7:62:c9:88:38:b8:92:ac:2a:fa:1d:b7:66:1b:32:05:77:00:
         b5:c9:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:43 2025 by rpki-client