Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File:                     GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier:          5i5ulm8hgl5WaVWGgy3ZwkFJRz52xnd0sB+mDQhlVkg=
Subject key identifier:   41:A6:64:85:30:28:91:A0:94:B6:7F:EC:35:28:79:16:AE:C5:0B:4E
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer:       /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial:       01991688FE733A4229570DFDB10F653E7FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number:          1669
Signing time:             Thu 04 Sep 2025 21:01:40 +0000
Manifest this update:     Thu 04 Sep 2025 21:01:40 +0000
Manifest next update:     Fri 05 Sep 2025 21:01:40 +0000
Files and hashes:         1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: 8jyxOvj8rK7FwvQRHqoaBb7vpOct2ki6yFofaw+ZDEs=)
                          2: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (hash: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:88:fe:73:3a:42:29:57:0d:fd:b1:0f:65:3e:7f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
        Validity
            Not Before: Sep  4 21:01:40 2025 GMT
            Not After : Sep  5 21:01:40 2025 GMT
        Subject: CN=41a66485302891a094b67fec35287916aec50b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6b:26:ef:07:09:32:5c:73:81:99:25:7c:e0:
                    6b:17:af:73:09:d9:bf:f8:af:15:31:85:3b:34:b2:
                    45:c5:81:66:cf:9e:f5:7d:b9:d1:e6:e7:09:5c:e4:
                    7b:7e:6f:0b:46:bf:ae:47:35:bc:ad:26:29:4a:26:
                    00:29:a2:9e:70:94:df:f0:da:a9:f2:28:cc:f1:c9:
                    ee:40:26:2e:a3:eb:02:7f:13:5f:8b:70:4c:45:f5:
                    2e:b3:e2:c8:02:31:a9:8b:ad:aa:af:d0:34:98:0f:
                    56:64:99:98:0f:e6:06:23:c3:a4:49:19:fc:0f:e0:
                    ad:0f:10:10:fc:ca:51:33:c8:f7:a6:d3:80:f6:4e:
                    9b:12:43:fa:c4:4b:7c:33:74:da:89:70:92:90:0a:
                    67:74:f5:7b:81:f2:00:62:1c:62:21:00:42:49:63:
                    b4:b5:55:e8:64:71:a6:9a:fe:65:ec:01:b9:35:02:
                    f6:59:b8:82:c9:59:75:ee:f4:39:c1:ae:be:c3:52:
                    70:04:db:1a:08:d9:f5:73:15:7a:a2:85:65:06:9e:
                    35:23:0b:7c:0c:a1:f1:1d:84:33:9d:2e:8d:e3:f3:
                    62:d2:6e:56:bb:47:3d:6b:64:1e:a9:09:fb:9f:8c:
                    76:8a:b6:7d:11:14:9f:e3:64:36:c3:33:ec:89:ed:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A6:64:85:30:28:91:A0:94:B6:7F:EC:35:28:79:16:AE:C5:0B:4E
            X509v3 Authority Key Identifier:
                keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0d:7d:ab:a7:b2:1d:18:ef:b5:06:d3:65:45:3b:f6:11:a3:
         24:0e:14:b3:f8:3b:88:71:48:50:ff:53:0e:bd:63:35:40:9f:
         4d:05:ff:01:07:2f:c7:46:5e:97:87:25:20:41:6e:20:37:00:
         c2:0e:75:5c:b2:dc:a8:fd:12:2c:82:79:f7:2e:85:d3:53:e9:
         f1:b1:53:eb:41:97:12:bf:7e:cf:07:ab:7c:93:8f:dc:dd:8a:
         b2:c3:83:4e:76:e1:69:51:49:56:a4:4a:30:36:70:e7:56:a8:
         17:8e:d2:b3:23:4b:0a:b7:60:49:2c:d8:32:01:b8:9c:f5:ec:
         93:3f:03:74:5d:7d:3f:31:2d:b3:9f:8b:26:6a:0c:5c:d8:66:
         28:dd:8c:d5:cb:8f:8b:2d:ec:8a:88:e1:14:75:52:62:25:00:
         ed:40:a7:2c:38:d3:04:17:d9:be:d8:e2:95:02:f2:9e:b6:d7:
         5a:3b:ba:ad:6d:45:a7:f2:2b:b8:52:25:48:98:ea:33:8b:d7:
         1f:b0:e4:5f:33:32:9b:21:63:c3:17:6b:3f:a9:1e:3c:13:32:
         11:b5:ed:8b:03:e8:57:a2:70:93:97:70:b7:92:1c:10:03:ad:
         fd:9a:ee:66:75:06:99:5f:c5:d5:ed:f5:dc:96:b1:c5:bd:3d:
         01:f0:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:16 2025 by rpki-client