Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File:                     Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier:          zVuhhFIE16jIOtPjqNd7Eke6T3B9agt4addej5Sh89s=
Subject key identifier:   E8:B3:06:78:21:A8:6B:A4:63:1E:E0:F2:70:3E:15:EF:60:7E:D4:41
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer:       /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial:       01992255B593825DBFF35175DD4D5F69CB43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 04:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:06 +0000
Files and hashes:         1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: k6A9vBGgzzxqCzaJgoldffGOsfl3Ww9aScW7cW4RKlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:b5:93:82:5d:bf:f3:51:75:dd:4d:5f:69:cb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
        Validity
            Not Before: Sep  7 04:01:06 2025 GMT
            Not After : Sep  8 04:01:06 2025 GMT
        Subject: CN=e8b3067821a86ba4631ee0f2703e15ef607ed441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:ee:fe:8e:51:41:b5:d6:9c:1e:60:f4:51:
                    24:75:9b:b4:f8:ac:2d:8b:b4:d3:d9:fe:12:68:55:
                    75:1b:58:9f:04:69:11:01:4e:51:5a:33:4b:2f:82:
                    c6:15:c9:17:3c:31:5b:bf:36:4a:11:7b:33:9d:40:
                    6f:a5:0e:ff:8d:ca:89:8f:d6:76:28:d7:44:9d:6f:
                    c7:ad:ff:3f:f2:ad:6c:47:6d:3e:ab:82:69:ba:f4:
                    63:56:69:21:3e:72:4f:d9:c3:6b:db:70:ca:62:89:
                    b0:f6:4d:0b:db:0c:23:92:82:eb:7d:ce:19:ed:cd:
                    23:38:a2:18:2c:4f:ed:92:05:bb:59:84:af:f3:8b:
                    9d:f3:a0:9a:3f:14:b3:7a:13:d4:c3:cd:54:cf:32:
                    30:44:b6:b1:09:76:49:ec:91:93:07:62:8a:c3:e7:
                    d0:3c:5e:3e:7e:f5:b5:11:fc:a9:73:9f:27:7e:49:
                    6b:7a:d8:18:a8:2d:5e:f4:23:2c:95:b3:52:af:6a:
                    22:35:62:2c:4a:68:5b:2c:fa:75:c3:a4:7c:d1:17:
                    df:b0:2b:4f:7e:eb:49:df:53:57:5e:f5:88:53:d6:
                    05:a9:29:e5:ca:13:db:c3:3f:1f:ba:28:ea:ad:9b:
                    c9:e3:81:fa:5d:b7:43:93:0c:3a:fa:78:5b:49:5f:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B3:06:78:21:A8:6B:A4:63:1E:E0:F2:70:3E:15:EF:60:7E:D4:41
            X509v3 Authority Key Identifier:
                keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c7:b9:48:55:3b:62:67:c2:27:af:15:c0:df:4f:75:fd:e6:
         95:a6:d0:ac:71:f1:fb:36:ea:ee:d0:d2:ba:36:cf:1d:df:3b:
         b1:49:a7:fb:48:a3:73:5c:46:59:c4:18:11:1e:17:fc:92:74:
         4b:67:78:aa:cc:87:03:e1:01:dd:ce:54:85:cf:24:13:e1:3e:
         e4:76:5c:54:1f:50:31:c7:20:8b:76:e8:33:a3:9d:23:8a:ab:
         d3:f8:f7:29:fb:88:44:56:95:c1:6b:08:70:2f:08:61:b6:07:
         f6:c6:6b:d3:3c:81:dc:6f:9b:07:fb:7d:bb:f2:fc:dd:55:65:
         69:ff:83:dd:85:eb:b0:ec:9e:68:62:d6:a3:81:9d:6d:6c:66:
         05:40:db:a6:e6:c8:83:1e:ee:d3:c9:87:be:8c:bb:c1:1d:40:
         6b:a0:53:88:9c:a1:e7:d7:d8:75:45:eb:e0:60:4d:45:9d:6f:
         b5:54:2c:ab:f3:7e:08:5f:04:79:2a:ac:02:a9:84:e1:4a:bc:
         a1:8e:be:8c:ec:2d:a2:ab:e0:ed:db:1f:b7:bd:78:2d:e9:30:
         85:7c:9e:ef:65:5a:00:c9:cf:b3:17:8e:54:09:56:26:5a:17:
         d8:cb:b4:53:cb:3a:8d:de:12:c4:76:30:d9:3b:be:ce:58:b5:
         66:ca:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:44 2025 by rpki-client