Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File:                     GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier:          E9tG/3yo8+yNSRERadEZW6U63rhZTJY9lHrpyrecxog=
Subject key identifier:   FB:8A:9F:09:AA:7F:A3:D9:95:F2:5F:C3:A5:77:C1:AC:15:DE:91:2C
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer:       /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial:       019922FAC338D24C2E9C34E24BB9BE1609D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 07:01:23 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:23 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:23 +0000
Files and hashes:         1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: CliYnKkkN1edpZGmCS3JeTXQqhubkdTVW3yEtDN+oio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:c3:38:d2:4c:2e:9c:34:e2:4b:b9:be:16:09:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
        Validity
            Not Before: Sep  7 07:01:23 2025 GMT
            Not After : Sep  8 07:01:23 2025 GMT
        Subject: CN=fb8a9f09aa7fa3d995f25fc3a577c1ac15de912c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:b9:c8:81:da:7a:08:5e:87:18:d8:ae:5e:
                    85:56:e3:e0:45:84:68:79:dd:f2:69:27:2c:40:96:
                    e3:6f:b5:04:f9:eb:36:a3:9b:b1:69:4a:3b:72:cc:
                    93:fb:b2:cc:00:50:de:d7:a6:99:ef:56:9b:a9:79:
                    d7:93:9f:a6:04:a3:f3:e3:a9:f5:19:a8:c6:98:b2:
                    eb:e7:a3:86:47:9d:6c:f2:e0:d3:23:63:e6:da:8f:
                    46:c1:b9:bc:71:34:a5:22:47:19:1f:c8:28:42:6c:
                    b0:6f:d3:d0:15:69:0f:82:1f:86:5e:8c:05:4a:d9:
                    6b:6d:1a:97:6d:eb:55:7d:3b:15:6c:be:56:92:94:
                    04:b6:6a:87:eb:60:8c:54:b9:30:37:f4:1a:9f:37:
                    ca:86:38:0c:22:0b:c1:b5:de:2e:55:b7:d3:61:2f:
                    c0:75:0f:9b:b8:62:f8:db:be:69:3c:76:ad:67:cb:
                    aa:9a:84:dd:eb:77:db:3b:00:05:9c:2f:24:53:af:
                    3e:6d:45:87:a9:32:a7:45:24:a4:29:34:8e:b8:ec:
                    a0:5a:ae:f5:ac:58:ba:1e:73:db:1f:aa:04:e2:59:
                    4c:ff:fd:85:98:55:12:3d:82:12:25:a9:f1:aa:c7:
                    99:ee:22:03:3f:52:aa:d2:d0:05:cb:d1:60:97:fa:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8A:9F:09:AA:7F:A3:D9:95:F2:5F:C3:A5:77:C1:AC:15:DE:91:2C
            X509v3 Authority Key Identifier:
                keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6b:8c:c4:a0:6c:00:b7:32:c0:d7:ea:5a:70:5d:a6:e1:a5:
         04:f7:f2:12:4e:ff:b4:3d:2a:c4:37:03:a0:ee:90:a9:ba:43:
         ff:0b:29:1b:90:fe:30:75:5c:7f:8f:27:ff:5e:17:b1:13:2a:
         77:88:79:ec:d3:b4:26:a8:64:54:7d:e6:34:c7:78:c4:2d:22:
         64:df:9d:2f:cf:f4:8f:6c:40:99:ab:ba:f0:5d:83:bb:80:ea:
         50:16:f0:16:fa:e0:7b:a1:bb:be:b8:8d:f9:54:fd:a9:4e:7c:
         d1:82:4b:0d:18:fd:e3:a4:85:bd:d9:c0:b0:74:30:28:c5:6a:
         7c:d5:89:55:40:79:7f:fd:6e:9a:84:bd:6d:d8:29:62:a8:ba:
         91:48:4e:7e:d0:1c:e0:79:a0:b8:8e:f8:a2:d4:50:04:7b:18:
         5f:51:b2:c2:87:de:4b:d8:c4:b2:d7:0e:04:96:5d:06:61:79:
         98:80:33:57:5b:a1:a9:3f:cb:0d:c9:ef:f2:d1:23:28:51:b9:
         10:de:78:ef:14:53:cc:d7:f8:da:3f:9d:a3:00:87:93:67:19:
         7e:5a:08:f2:11:ae:9f:34:3c:1c:63:37:7a:b7:f6:42:b3:8b:
         dd:66:35:82:cc:a5:fb:68:e0:de:8a:57:c7:f2:5d:07:ae:ca:
         2f:c8:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:57 2025 by rpki-client