Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File:                     gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier:          gXltflyBEPOaOG0g+aQvHt/CLVuLe24RBxvsFMDdg5M=
Subject key identifier:   3E:8D:B5:76:CE:E7:0D:B8:8F:CE:6F:49:76:85:A4:CF:0B:8D:51:34
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer:       /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial:       0199FDDA2200FCE8DBEB366F59BD76D00BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number:          076A
Signing time:             Sun 19 Oct 2025 19:02:35 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:35 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:35 +0000
Files and hashes:         1: 1--9ef5BuonyT90ODHV5G8KHwvGM.roa (hash: 96x1zDsthw+xfBLv+9YvZciWmPNAhtiP7Hkhk8XWewA=)
                          2: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: 9UUpPFC/VhAzbCulrW1ShEgFYleulsRGoK44whgcUCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:22:00:fc:e8:db:eb:36:6f:59:bd:76:d0:0b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
        Validity
            Not Before: Oct 19 19:02:35 2025 GMT
            Not After : Oct 20 19:02:35 2025 GMT
        Subject: CN=3e8db576cee70db88fce6f497685a4cf0b8d5134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:28:c7:2a:04:56:d2:40:86:f8:7a:a9:d5:
                    1e:a7:b4:27:5b:0c:8a:61:37:63:da:8b:27:fd:32:
                    b9:ae:eb:88:89:45:66:2b:0c:bc:af:12:d9:0b:4a:
                    5c:4d:29:a6:ee:a9:37:2c:97:49:e5:7b:2f:4f:7b:
                    ae:27:2c:07:0c:c3:5a:52:e6:6a:e1:cd:a6:2f:1f:
                    f4:c1:a1:71:bc:db:52:35:11:71:12:52:4e:f0:38:
                    f3:0f:45:64:f1:bf:9e:9e:de:e5:28:d1:e2:f3:6c:
                    77:99:79:69:a4:80:80:d4:a6:08:e5:d6:b6:21:b0:
                    29:aa:f0:cf:6f:5d:26:fc:e6:f1:67:08:cd:1a:a5:
                    f7:90:17:87:f9:df:65:86:9b:c9:a4:2f:ee:b3:1f:
                    4b:b5:e0:c3:a6:14:87:ed:36:4e:ce:18:36:2a:92:
                    48:87:12:08:e2:b3:ef:41:c2:7b:a6:a5:f4:cb:df:
                    84:dc:ed:56:d2:be:d3:57:a4:f8:06:fb:57:45:c0:
                    72:25:a8:34:79:55:8c:b8:48:8a:c5:2f:32:71:d0:
                    ce:ef:7f:fe:5c:98:f8:0d:af:88:f6:ca:8e:da:ae:
                    56:3d:ef:e3:57:05:3b:69:71:74:e6:3a:d0:51:35:
                    38:b1:a1:d3:41:79:e5:33:e7:ae:db:9e:3d:01:9f:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8D:B5:76:CE:E7:0D:B8:8F:CE:6F:49:76:85:A4:CF:0B:8D:51:34
            X509v3 Authority Key Identifier:
                keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:af:fe:76:9e:35:01:d6:23:74:b2:b3:29:65:e1:b7:15:c6:
         52:3d:7c:e9:1d:84:9f:01:c2:79:03:a0:9d:17:52:a3:86:50:
         0d:8b:a2:92:aa:ed:ba:c0:2d:bc:68:16:b9:6b:fd:94:74:aa:
         41:ae:5a:66:21:46:57:02:9c:bc:c9:64:97:b2:c1:26:c6:db:
         e3:a7:c6:ab:2a:98:27:1d:86:34:24:d5:1a:46:b2:a8:c3:83:
         4b:f8:04:3b:b0:13:7f:83:b7:99:98:b6:29:40:5b:46:31:eb:
         8a:ce:00:c8:c2:b0:b5:8e:5b:1e:d7:0e:70:e6:1d:c3:82:c4:
         d0:3b:a3:9b:ed:e3:45:12:6b:d9:b3:81:2c:64:c5:f2:77:34:
         78:91:0d:1b:0e:66:6f:b4:a7:bf:33:ce:a1:85:99:43:5a:01:
         f7:02:f2:da:83:b9:6b:5f:fd:a3:9a:4c:bc:06:48:5c:e5:63:
         f8:b8:01:06:36:e4:b4:10:c2:74:b0:8a:09:b7:94:fd:20:1c:
         eb:62:a1:69:ac:4b:60:01:fa:8c:a0:ca:d6:03:03:4a:a4:22:
         e2:42:85:1e:06:39:b6:55:86:fc:5a:dd:eb:08:87:16:6f:ed:
         20:e6:0e:b9:30:a7:96:23:90:14:18:05:99:b4:77:97:8f:97:
         49:0c:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:55 2025 by rpki-client