Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File:                     GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier:          BStziWX3FYvTSvqjJxDJ6XEDh+7VwhgiB8Vm3NbI4Fs=
Subject key identifier:   F0:CE:9B:8F:3F:5F:BB:18:51:C1:F1:69:E8:23:A0:F1:7A:F4:DC:DF
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer:       /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial:       0198402B804A9784B1EFCD0CFB80D7E83845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number:          15FB
Signing time:             Fri 25 Jul 2025 06:00:49 +0000
Manifest this update:     Fri 25 Jul 2025 06:00:49 +0000
Manifest next update:     Sat 26 Jul 2025 06:00:49 +0000
Files and hashes:         1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=)
                          2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: +nip1hUcvjalRf8vUagflVhyA5CmKH3joes32OCtokk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:2b:80:4a:97:84:b1:ef:cd:0c:fb:80:d7:e8:38:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
        Validity
            Not Before: Jul 25 06:00:49 2025 GMT
            Not After : Jul 26 06:00:49 2025 GMT
        Subject: CN=f0ce9b8f3f5fbb1851c1f169e823a0f17af4dcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:63:88:03:e6:65:4b:12:a8:e7:42:ec:5b:
                    41:ef:f6:d6:74:4e:d5:24:f5:dc:3a:a2:85:57:0d:
                    58:56:dc:89:bc:64:40:19:63:30:5c:24:ea:04:bd:
                    fb:ae:c1:0f:0a:b8:0a:cf:59:af:03:a6:af:0d:f8:
                    5b:d8:64:4e:73:c0:20:31:23:12:aa:f7:a3:62:c7:
                    8c:14:98:c0:71:cc:2c:f3:87:76:ec:fc:72:18:b2:
                    8b:78:c0:5d:72:ba:eb:8c:86:20:38:ec:64:38:35:
                    d7:af:85:2e:61:a5:94:76:54:c0:84:47:a7:73:b5:
                    ed:9d:8e:b7:6b:03:25:81:59:f2:b2:3e:3e:63:06:
                    a2:fa:de:8a:02:f8:8f:3d:26:f2:f2:72:4e:25:12:
                    a1:ef:d1:08:b1:a0:90:5c:be:65:48:7a:3d:9e:68:
                    27:5b:b8:b0:2b:47:9c:be:73:8b:2e:64:a9:35:d1:
                    3b:c3:b3:ae:8c:9f:08:7f:18:cd:8c:b8:40:59:2f:
                    f9:44:39:2b:d6:76:23:f1:65:65:56:bd:6f:d4:a1:
                    e0:fb:e8:41:19:11:19:4c:02:bc:29:26:2d:e2:33:
                    21:1f:f3:d1:70:18:fd:c1:09:35:6d:77:26:df:0f:
                    f2:5b:64:bf:d7:d9:09:d1:68:e7:cf:eb:01:59:27:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CE:9B:8F:3F:5F:BB:18:51:C1:F1:69:E8:23:A0:F1:7A:F4:DC:DF
            X509v3 Authority Key Identifier:
                keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:38:2f:be:55:d3:c6:04:3e:74:ef:ed:47:7e:51:9a:68:9c:
         63:f3:c4:5e:2f:e8:aa:3b:04:31:e7:2c:b2:09:c3:46:2d:5e:
         72:84:db:0a:45:3f:fd:d7:34:f0:6b:81:47:57:38:67:96:77:
         e4:60:3a:a4:28:21:d7:53:5e:2e:8d:d1:38:5c:8e:0b:a0:14:
         5e:c3:d3:9d:36:44:f3:ab:b7:84:22:6b:40:65:c5:df:20:7e:
         62:60:30:b0:4f:82:2c:b7:dd:91:a8:40:82:6a:89:4f:49:47:
         77:53:ba:9d:b9:9c:4c:b3:2d:b2:7e:22:95:ca:0a:bb:e5:7d:
         df:2a:fb:ee:f8:41:84:ad:4c:b8:1f:40:02:e8:fd:08:1e:0e:
         95:16:c3:ad:62:01:4b:8f:f3:81:d1:42:af:84:e0:5d:3b:1c:
         ea:2d:46:54:0a:20:14:58:08:27:54:c0:c0:0a:85:1e:d7:98:
         cc:2f:3e:14:1b:26:b4:6d:bc:44:fc:de:0a:a2:31:f0:ee:76:
         5e:3a:2b:a4:77:82:db:91:b4:26:49:2d:2b:de:ca:39:f9:52:
         4a:27:b6:a3:d2:d1:56:d0:f3:d9:26:ac:ee:9e:ab:27:6a:b1:
         35:be:b4:21:ce:7f:3c:ac:75:ac:91:76:4d:b5:47:fa:db:3f:
         53:e8:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:57:24 2025 by rpki-client