Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File:                     GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier:          fDTBjD4KfaRZVjAJDYIHeAEiRNNHY2f6WnRpoaWJDXo=
Subject key identifier:   6D:6D:5F:D9:18:7D:E1:B6:08:BC:76:4A:D9:C4:68:FA:6B:D5:23:83
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer:       /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial:       019922FACAC051F154D748A7A3B049CAEAC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 07:01:25 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:25 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:25 +0000
Files and hashes:         1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: FTLmxt+muH3Fq0BR4SOWPLwpOkDS45GDBYOQMsdD/qA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:ca:c0:51:f1:54:d7:48:a7:a3:b0:49:ca:ea:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
        Validity
            Not Before: Sep  7 07:01:25 2025 GMT
            Not After : Sep  8 07:01:25 2025 GMT
        Subject: CN=6d6d5fd9187de1b608bc764ad9c468fa6bd52383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:56:6e:d4:16:29:3d:b1:4f:60:36:2f:09:
                    2c:32:79:78:9d:0b:56:6c:05:89:8d:04:24:12:63:
                    12:9f:4d:73:6c:5e:cc:7d:75:7e:1a:0b:dc:ea:5f:
                    98:81:21:42:1b:c7:de:bd:c0:d2:d0:1c:63:48:67:
                    75:48:51:fd:0b:c8:74:06:76:58:c3:e3:09:c9:64:
                    d0:64:87:31:02:03:13:47:4e:0e:b1:11:33:79:c4:
                    0d:52:8a:ea:3e:d3:99:39:98:d1:b2:18:a2:52:45:
                    bf:3f:8a:22:21:af:3a:da:b6:e2:b7:9d:80:d7:4b:
                    a5:ba:48:d1:53:9d:68:b9:d4:a3:ab:ea:e8:c4:7f:
                    35:80:51:75:10:76:c6:0f:53:00:28:35:56:1c:cd:
                    24:bb:b9:63:5f:d1:2b:fa:25:78:5c:76:a9:cb:9c:
                    24:76:35:88:5d:4d:05:aa:b3:5e:08:e1:8f:a5:f0:
                    eb:37:b6:d2:31:4e:3f:64:2e:6f:94:09:e3:47:5d:
                    99:53:e7:4c:00:65:c5:7b:7b:a9:b4:43:c9:0a:33:
                    8a:ea:0b:13:06:18:31:26:f9:e9:a7:07:69:89:76:
                    b0:e9:1d:75:2d:2d:6b:09:7c:2e:fb:55:b9:36:58:
                    41:7c:93:80:cd:dc:fb:a2:d3:9c:d5:5c:bf:41:91:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6D:5F:D9:18:7D:E1:B6:08:BC:76:4A:D9:C4:68:FA:6B:D5:23:83
            X509v3 Authority Key Identifier:
                keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:ee:4c:d0:f0:56:e6:bc:6b:cd:62:2f:ff:f8:27:cf:b5:
         97:72:3a:e5:ed:58:30:76:56:1d:0a:85:b4:e7:a8:09:57:5f:
         a6:35:6a:0f:d4:2d:b4:c5:98:b1:6b:b4:4b:9e:02:cc:6a:cc:
         9f:0f:a3:d4:07:3c:b5:13:0f:c2:75:62:5a:4d:2d:8d:b5:68:
         f5:76:76:79:61:95:c2:fd:ef:3d:cf:67:6c:5e:75:e5:7b:0f:
         43:7d:ba:8e:b7:93:c5:bc:5a:92:4e:f6:7b:14:2c:d0:52:75:
         a5:27:1f:cc:cd:b5:f7:dd:f6:d8:eb:b8:b8:95:4e:3f:bb:d3:
         04:30:7a:e8:34:bf:f1:a6:94:bc:8a:6f:ae:b0:2d:e8:3d:16:
         b3:a4:14:c2:09:4c:38:50:43:6f:08:42:60:6b:f1:59:19:1d:
         84:27:fa:ec:bb:9c:72:06:03:22:5e:34:cd:c7:87:01:d2:61:
         06:12:87:fc:e8:5f:8a:36:c2:12:87:6e:08:6b:ec:cd:81:94:
         73:e4:cd:c3:d1:bb:ed:c9:f4:3d:e7:da:6a:73:df:3b:b6:59:
         45:ea:58:30:5f:c8:0c:f3:a0:44:97:59:b1:d2:88:22:51:34:
         34:95:60:1a:3b:c4:64:e0:b1:64:bf:98:d9:d2:9a:d5:13:f3:
         ab:eb:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:04 2025 by rpki-client