Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
File:                     GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json)
Hash identifier:          0GI4fJBZJZJSSxHCr0uSk6dj+YSYk1BD0XsjtQF8eLs=
Subject key identifier:   C3:EF:E6:A0:7C:F0:5D:73:6D:A4:D2:AB:8F:D8:CE:9C:E3:F2:04:B0
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Certificate issuer:       /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial:       01991DD509109CA8033079ED6EDF9FAC7CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
Manifest number:          01ED
Signing time:             Sat 06 Sep 2025 07:02:04 +0000
Manifest this update:     Sat 06 Sep 2025 07:02:04 +0000
Manifest next update:     Sun 07 Sep 2025 07:02:04 +0000
Files and hashes:         1: 03ms_AARg7fIT3yCfFDgnKOBv1Y.roa (hash: bu7Jr2A35lcZHJyaR/TaMXau5a9JHl3Dv3eybI+BJ1E=)
                          2: 9Cv1x_jAkuvWV-S7bhdwS0dFTuc.roa (hash: l74BXIsr9tFoOgjbmMSDMd1UV/QSFnTI8Mvo9Udf3LM=)
                          3: EYgXdph0ad7x7RpPlZyOENzd-oA.roa (hash: Hrugq5ntPmxP93lV9SDtZJap5r0QftcRWf7OkP/hZyI=)
                          4: FIcC6s1BGf9zB3oixDWkRkIHTCM.roa (hash: hOMA3Ze5QKA55bUCq+0OqZIOMZ8xCu2v+PtZbTtIOws=)
                          5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: ebPaSZoQiN+nboQvwpJHaNULFFOC6h6+TRnDbAFG+NM=)
                          6: OzgFbbI0V5S5o1DdJOQqtABdtH0.roa (hash: y+11/IkfsSulnXEQxCkUZyHEuxM7K/mkeaGWZSD0CSE=)
                          7: mjqRtPW_FFHVUc_9UfMFfi25D8E.roa (hash: XJlXFoLhM+Dtcep8s7P/rFzF3KGUlEzdjjknkuerFuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1d:d5:09:10:9c:a8:03:30:79:ed:6e:df:9f:ac:7c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
        Validity
            Not Before: Sep  6 07:02:04 2025 GMT
            Not After : Sep  7 07:02:04 2025 GMT
        Subject: CN=c3efe6a07cf05d736da4d2ab8fd8ce9ce3f204b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:f4:5c:41:b1:73:6a:db:c9:23:0f:52:f0:
                    b5:89:d0:21:5f:e0:39:93:6b:c4:2b:73:f5:df:f5:
                    18:bb:c4:ef:50:b5:cd:3f:f5:35:cd:5d:7a:d8:b5:
                    76:50:50:d1:fe:7a:67:e6:2b:6f:73:ee:cf:49:43:
                    2d:9f:0b:d7:18:f1:c5:eb:5b:d7:5a:32:a8:4a:bf:
                    3f:48:55:a8:d1:e9:b8:10:df:5b:b2:e1:da:ad:46:
                    56:d0:b7:ca:e6:5b:43:40:b6:4d:c1:b3:96:42:72:
                    fe:52:fe:aa:82:4b:a3:6d:86:41:f5:f7:15:cb:af:
                    34:14:f4:26:21:3a:08:d5:2f:51:4c:c7:a4:68:da:
                    cf:83:d5:56:65:c4:ac:d3:65:e7:ec:2a:ce:52:e1:
                    9d:ac:a8:69:38:35:16:e0:4a:42:7a:21:cc:5e:a9:
                    0c:6f:08:03:d7:d6:55:02:9e:31:a1:d6:1b:02:71:
                    9a:66:97:fb:fe:75:6e:fa:c4:ae:98:89:56:b4:e8:
                    04:df:20:36:77:29:17:2c:b5:c0:29:1c:8e:64:76:
                    a0:c9:4a:35:35:df:c7:27:4d:01:90:c0:3c:4c:1c:
                    d8:ff:2e:6c:f3:b0:40:c9:2b:f7:79:3b:4c:22:ce:
                    78:17:34:32:89:b4:78:87:c4:5e:bd:05:2b:e6:0f:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EF:E6:A0:7C:F0:5D:73:6D:A4:D2:AB:8F:D8:CE:9C:E3:F2:04:B0
            X509v3 Authority Key Identifier:
                keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3f:14:68:34:ec:79:c1:02:62:5e:df:56:3d:f3:1a:85:3e:
         b0:55:50:2c:57:59:ef:8b:ec:7a:f1:bf:17:1f:e0:f3:df:a5:
         f5:ff:8b:7f:b7:e5:b5:39:b5:21:d4:ae:bd:12:13:1b:8d:7a:
         74:1a:0c:a0:00:e0:1c:0a:5b:b1:3c:60:43:32:b3:61:22:95:
         f9:5f:d9:e3:48:76:bc:c7:91:a4:b3:71:22:f9:aa:2b:62:94:
         cc:4c:42:a3:03:0d:af:ba:b0:de:c8:07:19:67:4a:2e:5a:96:
         09:04:01:4f:1e:9c:0e:3c:55:89:d1:ee:e5:b3:6f:d7:b4:3b:
         ac:2b:22:f3:2b:60:4a:eb:97:6f:cb:fa:92:83:c8:3f:b4:24:
         e6:20:08:b2:9e:d3:2f:ed:8f:24:69:40:f0:b7:9d:44:eb:d7:
         9c:b3:40:c4:0e:d0:62:e2:60:9a:37:ea:58:30:eb:90:73:22:
         05:34:a0:0e:24:4d:4f:c1:35:2f:81:a6:3b:fb:5c:d5:51:60:
         ae:82:aa:71:65:a9:0e:ec:46:ae:5b:01:0b:83:57:25:38:a0:
         4b:9c:cc:ec:5c:3d:95:82:35:43:6d:4b:e7:c6:97:8c:2f:cd:
         9a:95:eb:5b:25:52:c6:95:09:4b:77:c8:32:00:27:e7:1d:43:
         5d:b1:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:45:31 2025 by rpki-client