Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File:                     GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier:          Co+DzBcp/k/iOv7dTJR7Uldy6/qOwmUg+Vhbnmr6RNg=
Subject key identifier:   2B:A0:13:27:C8:86:01:57:ED:8B:13:A7:C8:25:82:62:AB:FA:06:DB
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer:       /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial:       0199FAA1665A334E708805E2726D66EA620F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number:          0F9E
Signing time:             Sun 19 Oct 2025 04:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:45 +0000
Files and hashes:         1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: YClCEINpCpR8tv0EMri9sQBV1sSciTqaPM2DpinA6CY=)
                          2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:66:5a:33:4e:70:88:05:e2:72:6d:66:ea:62:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
        Validity
            Not Before: Oct 19 04:01:45 2025 GMT
            Not After : Oct 20 04:01:45 2025 GMT
        Subject: CN=2ba01327c8860157ed8b13a7c8258262abfa06db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6f:98:df:72:e1:cd:d3:07:0f:52:28:af:bc:
                    73:f9:01:41:b9:0a:90:16:9a:cf:d6:d5:37:d2:29:
                    2e:a5:22:86:6e:60:2c:dd:78:c8:25:34:70:c0:54:
                    76:a6:cc:75:12:89:be:0c:86:01:a7:54:7d:11:f9:
                    10:c2:d1:d4:e2:64:6e:66:6f:2e:20:e6:2b:36:ec:
                    a4:7b:19:22:6d:86:13:17:84:5f:6a:d7:5b:7a:14:
                    ab:c9:5d:0b:54:58:47:03:51:9e:f5:89:c6:98:48:
                    01:fa:3c:ac:9d:32:9b:8d:5b:28:e2:d4:0a:d4:e6:
                    6b:d4:79:63:f8:68:df:d1:16:f1:f6:cd:2c:d7:a1:
                    bb:39:59:df:25:e0:62:48:1b:32:8b:dd:86:90:66:
                    eb:d1:1c:b5:d5:9f:0c:c5:c4:f3:81:9f:6f:e2:59:
                    de:4a:b2:69:f2:cd:b0:eb:62:7a:28:6e:1a:25:61:
                    13:52:1a:f6:14:72:95:29:21:14:fd:0b:ef:c0:cd:
                    13:fe:3f:7d:b1:11:61:58:dc:be:ad:b3:0d:3b:12:
                    72:60:68:9d:d0:87:2a:b9:b8:f0:c6:ed:09:e6:74:
                    cb:29:70:6a:9b:61:50:55:a5:84:77:4c:e7:87:72:
                    6e:89:dc:e7:73:dd:bc:7a:fc:32:23:c2:9e:3d:35:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:13:27:C8:86:01:57:ED:8B:13:A7:C8:25:82:62:AB:FA:06:DB
            X509v3 Authority Key Identifier:
                keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0a:9e:d1:b8:10:4e:f3:a4:da:a4:e3:f7:cf:1b:da:0e:5f:
         1f:cb:76:66:5e:93:2b:a5:28:68:ab:6c:72:d4:5c:16:10:cf:
         2f:2b:80:3e:11:53:44:80:6a:c6:4e:71:b8:f6:06:eb:10:8c:
         84:fe:69:9c:3c:88:c3:d5:2e:7f:a1:f3:cc:18:c9:3f:bd:e0:
         53:68:7d:14:29:74:1d:00:7d:f9:6e:d8:3e:1f:cd:98:29:1a:
         85:59:b0:37:f3:0c:ce:c7:a3:76:c9:8a:57:7d:08:1f:6d:d4:
         cc:6e:a8:d4:20:38:0b:89:1e:33:79:a9:3b:42:02:59:90:b7:
         2a:c1:5e:62:30:fd:4b:19:41:4c:0a:fe:ac:ff:7e:88:4a:19:
         b4:7a:8e:f0:60:df:e2:c1:52:6d:97:9c:09:77:2b:da:90:21:
         d9:22:ab:43:e5:a9:10:11:f3:4b:76:02:e2:91:bf:06:96:68:
         28:1e:c7:ef:30:c6:46:1c:15:2c:25:9c:d2:5c:6e:80:b8:39:
         5a:58:00:c1:8f:c3:2c:82:e1:35:fd:8f:e8:75:f8:45:b2:07:
         b2:17:85:8a:ee:96:d9:4f:78:e6:87:2c:ab:3d:af:61:ad:05:
         81:18:ce:69:84:80:05:86:13:5b:42:b0:f9:ae:97:3a:15:73:
         3e:76:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:57 2025 by rpki-client