Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File:                     GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier:          AvsnUhDrRzyyUu3Z557E+7XEDeCxqt0Sb6KxP4L7hV8=
Subject key identifier:   99:F2:B7:CF:96:60:29:58:C4:EE:84:4D:D7:45:A7:28:74:D9:A9:5B
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer:       /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial:       019A7112C5346A388B176632191328C6A13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number:          0A2E
Signing time:             Tue 11 Nov 2025 04:00:46 +0000
Manifest this update:     Tue 11 Nov 2025 04:00:46 +0000
Manifest next update:     Wed 12 Nov 2025 04:00:46 +0000
Files and hashes:         1: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: GfP5VwEi77u/UfD7IFt6CmY/utg0gHSUxWFrXKte+H4=)
                          2: JLeYM1Nb1WkxGedHLrl3D2YAcD0.roa (hash: kpcTVdbw29GtZxZaBOoPfJn9eSPlvRnFiHJuCzaGNU4=)
                          3: izbCDxefHi81Ceh8v70jil8PjrA.roa (hash: G81Vq+SeFhUUiPynuXGPGqpCxUEFG0haFucomHcGaT8=)
                          4: uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa (hash: knG2zE+cphfPly9s92WP/7hjIDgEXmoUhOUrwgfF5vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:12:c5:34:6a:38:8b:17:66:32:19:13:28:c6:a1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
        Validity
            Not Before: Nov 11 04:00:46 2025 GMT
            Not After : Nov 12 04:00:46 2025 GMT
        Subject: CN=99f2b7cf96602958c4ee844dd745a72874d9a95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:bc:d9:33:01:22:96:72:0c:54:f2:4f:aa:
                    f9:c3:8a:84:61:35:91:81:6b:94:08:9f:6c:54:ac:
                    7d:97:b2:39:2f:8f:af:0a:9f:45:2b:65:71:d0:1a:
                    ce:b4:01:04:be:0b:52:90:29:74:b2:04:a5:1b:a2:
                    51:cf:a3:40:9f:fc:e2:41:10:4e:51:f1:65:b3:b1:
                    8a:bc:94:07:b7:1d:54:eb:b3:c6:1c:17:49:a4:76:
                    72:cd:ed:ab:d4:cb:8b:e8:5a:c8:16:4f:9a:66:50:
                    8b:51:32:5f:7b:36:46:2c:cc:33:58:89:4f:56:df:
                    ee:60:33:76:1e:60:26:62:69:53:76:8f:00:af:1c:
                    bb:e7:6a:c8:ee:fe:c9:93:bb:75:22:69:c9:19:e8:
                    5e:41:db:15:73:a6:2b:a7:6d:e8:05:bb:2c:7e:ee:
                    0c:09:ab:d1:40:20:a0:00:ba:be:8f:62:f6:06:9f:
                    2b:47:ef:97:63:9d:af:bb:4e:6d:13:c1:e4:cb:24:
                    4d:48:fe:59:45:a4:e1:1f:14:bf:2b:f0:5d:c9:32:
                    35:37:b7:b8:92:7f:95:11:58:48:43:f6:78:6a:2c:
                    e8:64:a9:3b:34:57:f1:ce:de:56:ba:5d:50:4c:8c:
                    7f:e2:53:2b:c1:11:e0:eb:f1:78:23:9f:62:32:26:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F2:B7:CF:96:60:29:58:C4:EE:84:4D:D7:45:A7:28:74:D9:A9:5B
            X509v3 Authority Key Identifier:
                keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:d2:ca:16:f7:a0:66:06:ed:09:a4:df:6d:80:5d:62:d9:
         33:7e:da:29:6f:a9:1b:5d:c8:b2:55:92:f6:9e:a6:27:73:3f:
         73:3e:b0:6f:11:09:e6:0f:26:5c:82:63:63:f9:99:91:e9:ae:
         63:e1:e9:cc:5f:2c:fb:fc:d8:0c:c0:8c:eb:98:f1:62:01:8c:
         e7:63:cc:90:f3:e4:46:58:ab:e4:95:27:7a:ef:29:ee:cb:1a:
         ec:57:85:be:92:d0:a5:7f:ee:39:e5:bb:42:88:79:66:3f:97:
         1a:76:bb:db:4e:f6:18:89:34:a2:6a:95:ac:67:61:61:99:46:
         ca:31:42:f4:a0:c1:e9:ba:7c:3c:b7:4f:e1:5c:6e:6f:5e:5a:
         fc:56:a2:56:b3:fe:12:3f:b1:88:74:da:26:d2:e5:cb:f4:de:
         91:85:12:f5:2c:a3:21:43:13:dd:cf:c8:6a:c3:8e:f3:41:52:
         b0:83:9c:8b:70:fb:01:d8:ba:33:9d:9a:74:bc:49:17:a0:e7:
         5a:e7:86:57:44:55:a0:b2:bd:25:7c:97:b2:7d:3d:01:17:4f:
         52:4e:83:96:a5:25:3b:ec:e0:b4:0e:5e:cb:25:5c:5d:78:9b:
         b8:6a:28:cf:0a:ac:ab:01:13:3c:30:ae:a6:b0:1c:7d:a6:4d:
         62:49:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:34 2025 by rpki-client