Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File:                     GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier:          hE783YwDYbPPrS4sdMM3O+rUjeXQZLHjUu7lMehR4Io=
Subject key identifier:   22:B9:A0:5A:21:C9:7B:33:E1:5C:F3:CF:01:C8:13:BD:7C:D5:FF:19
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer:       /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial:       019A0291356BB2A1D467D824688178C73C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number:          11B3
Signing time:             Mon 20 Oct 2025 17:01:02 +0000
Manifest this update:     Mon 20 Oct 2025 17:01:02 +0000
Manifest next update:     Tue 21 Oct 2025 17:01:02 +0000
Files and hashes:         1: 91a4AyjiQ11AE-ejkjHD7dP2jCw.roa (hash: mqMxschgmHfJobGTtzuGdiipq4NqJDFBcrZK6ygd+ok=)
                          2: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: elSunHFv96DWDNPc1pjG/Mfvy0irgDc0EGaSqt4XuZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:91:35:6b:b2:a1:d4:67:d8:24:68:81:78:c7:3c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
        Validity
            Not Before: Oct 20 17:01:02 2025 GMT
            Not After : Oct 21 17:01:02 2025 GMT
        Subject: CN=22b9a05a21c97b33e15cf3cf01c813bd7cd5ff19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:28:ab:0f:2c:ce:c8:d0:96:52:cf:98:18:7a:
                    71:34:13:75:1d:f5:23:17:74:c4:9d:83:98:5e:36:
                    7c:95:4a:8b:fa:f5:dd:17:08:b9:af:15:96:86:d7:
                    0b:c6:67:18:e6:af:a4:6a:0f:ed:ec:96:c0:c6:75:
                    eb:29:00:1c:cd:7a:e7:d9:1a:e6:5c:72:98:ce:9b:
                    27:39:91:46:38:de:43:97:5f:1e:e0:73:73:8c:e9:
                    86:e8:b6:0e:33:b8:35:19:75:ed:89:c6:7c:ad:ff:
                    80:b6:fc:f4:85:6d:3e:33:31:ee:37:88:dc:d5:6e:
                    fa:de:b2:84:8e:2b:88:15:c5:1f:95:85:0e:42:b2:
                    c2:98:86:f9:49:72:3c:60:22:ff:3d:e8:cb:8c:f4:
                    af:2c:ad:fb:20:1f:83:e3:18:40:7c:76:35:8b:8a:
                    29:ac:ad:a5:c1:9f:e8:80:fa:8d:8b:7b:ec:ff:4b:
                    3b:6d:bf:a0:39:73:10:d6:0f:f4:0a:48:e1:72:f3:
                    58:f0:1b:e4:7d:ac:e4:01:bc:e6:03:9f:f5:fb:9f:
                    9d:52:13:6c:fe:25:c3:01:2e:d2:a9:9c:72:c3:80:
                    4a:75:0b:7b:4b:eb:29:82:0c:7d:1a:d8:cd:1b:2b:
                    3e:63:a0:69:9d:c0:b4:e1:bf:df:f5:d8:b0:f2:27:
                    9e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B9:A0:5A:21:C9:7B:33:E1:5C:F3:CF:01:C8:13:BD:7C:D5:FF:19
            X509v3 Authority Key Identifier:
                keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:80:d2:0a:25:15:66:f0:87:d4:4a:66:67:bb:d2:14:9c:
         6e:f9:6e:84:b7:ea:05:ac:f6:cc:46:aa:4c:23:12:e6:2e:b9:
         2a:b0:2f:cf:09:64:54:67:d9:86:6d:3b:38:b9:4c:b6:c5:41:
         4b:b0:ff:9a:ff:09:e8:1c:50:ef:48:85:4d:dd:20:4b:a4:b3:
         fd:ee:06:cb:f4:e6:5b:c8:3a:b4:a9:97:53:55:ac:ba:47:3b:
         8b:40:65:6a:c4:e7:ba:5c:e3:91:77:45:bf:58:51:22:0d:4a:
         47:02:17:55:2b:f4:b3:04:35:75:26:5e:34:97:e3:81:72:25:
         15:f9:83:cc:ba:b9:f5:be:b1:1d:4e:42:d9:f4:df:d1:42:8b:
         aa:5e:2f:e0:43:24:9f:78:0e:44:a2:01:b1:b4:a8:57:d2:9a:
         fd:9e:ef:cc:30:30:77:a5:89:24:1d:29:94:58:26:1b:c7:de:
         fc:b2:10:c9:9b:57:0c:5b:16:32:8f:7f:f8:48:96:93:b7:33:
         7c:4c:49:58:65:d8:19:1c:b9:9d:a3:1c:92:b3:6c:29:95:39:
         0a:40:42:7b:77:f2:ec:1c:9d:44:63:13:59:21:6a:5f:9c:2e:
         02:5e:19:c0:4b:96:51:0d:ca:42:e5:5d:77:e9:41:71:a3:ff:
         4f:52:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:29 2025 by rpki-client