Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File:                     GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier:          1Xxnztjwf5SqpR1yX9JN9+k8B+J0vMy11ll3yRTTmGg=
Subject key identifier:   F0:3C:32:A0:69:BC:AA:A3:43:8F:A1:25:91:AB:DD:58:00:9B:43:A9
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer:       /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial:       0198D472437581D20FCCCAA26A6EB1856F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number:          0F0E
Signing time:             Sat 23 Aug 2025 01:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 01:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 01:01:54 +0000
Files and hashes:         1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: MQx2RC4iiLyZ+tXvgpp1oh/ooy/v4DPdKvqIOM4DhvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:43:75:81:d2:0f:cc:ca:a2:6a:6e:b1:85:6f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
        Validity
            Not Before: Aug 23 01:01:54 2025 GMT
            Not After : Aug 24 01:01:54 2025 GMT
        Subject: CN=f03c32a069bcaaa3438fa12591abdd58009b43a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:74:a6:79:ef:07:2a:d4:b2:80:8a:86:1b:
                    09:63:b6:54:1a:db:7e:27:77:f6:53:be:11:e5:5a:
                    eb:d7:4b:36:61:31:89:4c:dd:af:9c:df:eb:3b:05:
                    5e:55:fc:26:3a:02:a7:54:c1:79:b3:55:c3:3b:c2:
                    74:cf:ff:3f:8c:f6:53:87:be:02:dd:a9:03:97:72:
                    77:89:c4:6e:7a:be:a1:d8:61:9e:52:65:bd:de:85:
                    2a:45:a6:6d:ca:36:70:de:11:d9:04:5c:69:84:84:
                    4a:01:be:1e:c3:18:46:91:6b:40:c0:d5:38:b2:30:
                    db:16:44:2c:e1:99:a3:28:60:a4:f1:27:2c:b1:2e:
                    d1:e0:44:a5:6b:4f:d9:67:c2:d2:3e:ed:76:c4:88:
                    fa:79:fc:29:03:4b:6b:e8:fd:a7:d5:20:a4:e4:e5:
                    13:05:30:2a:6b:35:c9:96:17:73:4f:ab:35:35:cd:
                    63:0e:09:cb:58:f7:eb:b7:a4:42:49:59:19:44:7b:
                    bd:86:7e:f4:80:eb:a3:f3:cf:77:bb:01:76:99:83:
                    51:ee:41:d8:f9:95:80:7c:98:d4:ea:e4:50:94:12:
                    2f:41:7f:d4:5d:6d:d6:c2:b7:5c:df:23:d9:0e:a6:
                    bf:48:ed:8d:39:df:0d:72:16:82:74:cc:2f:72:43:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:32:A0:69:BC:AA:A3:43:8F:A1:25:91:AB:DD:58:00:9B:43:A9
            X509v3 Authority Key Identifier:
                keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e4:7e:4a:18:bf:c4:f8:ba:f8:01:62:52:87:c3:da:80:70:
         6a:63:57:ab:d1:9d:67:9e:b0:5c:33:a2:01:ad:8c:7d:3b:38:
         8f:81:91:14:72:e1:67:64:cd:21:35:9c:ca:62:df:d3:00:dc:
         41:e3:2b:7a:e5:4e:fe:b2:95:53:6a:30:30:e1:16:d9:38:ee:
         33:d1:76:e3:c2:92:60:b3:c9:2e:1d:b0:cc:0b:5d:3a:ae:bc:
         51:38:af:16:08:81:12:09:09:d4:a0:fd:ee:8f:23:3d:ba:c4:
         13:0b:ed:4e:cc:96:71:8c:58:1d:0e:07:a0:3d:e3:12:3f:34:
         ee:85:80:9f:8e:58:22:a2:ef:a6:75:d4:aa:e0:5c:39:1a:2f:
         0e:24:27:6d:b4:70:2a:57:c5:2c:78:15:d5:74:7e:4f:ab:0c:
         0b:e9:a9:6d:71:49:90:3b:38:05:21:4b:0f:37:75:81:1a:de:
         34:76:8e:a4:31:86:31:af:83:ba:96:94:79:0b:f7:57:f8:32:
         4f:40:94:cb:20:3b:f1:ac:38:05:12:32:9c:c9:e6:b7:8c:dc:
         55:c1:ab:f1:ba:19:c0:5c:3c:dc:80:97:ee:69:2e:cf:fe:a9:
         4f:8b:b9:0e:34:d1:e8:4b:9e:a3:67:7f:12:5d:34:ed:4a:61:
         09:d6:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:59 2025 by rpki-client