Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
File:                     G6QV0W5y4zPyk2wcXhffJDeBCMI.mft (raw, json)
Hash identifier:          PXOxx8F0fH3uSKWKY5KYdJATvo+6JyO49rxWycZcraw=
Subject key identifier:   42:2F:76:BB:E7:B1:B4:E0:05:74:D8:F7:04:D1:37:55:97:26:21:82
Authority key identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
Certificate issuer:       /CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Certificate serial:       019A123AAF876FB37E7A8846DE3FC0F9192B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
Manifest number:          058C
Signing time:             Thu 23 Oct 2025 18:00:27 +0000
Manifest this update:     Thu 23 Oct 2025 18:00:27 +0000
Manifest next update:     Fri 24 Oct 2025 18:00:27 +0000
Files and hashes:         1: G6QV0W5y4zPyk2wcXhffJDeBCMI.crl (hash: 25CiZBXJN7qtskJzdJWHHYAFK4Ws+ZKWIW4MTlPfqcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:12:3a:af:87:6f:b3:7e:7a:88:46:de:3f:c0:f9:19:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba415d16e72e333f2936c1c5e17df24378108c2
        Validity
            Not Before: Oct 23 18:00:27 2025 GMT
            Not After : Oct 24 18:00:27 2025 GMT
        Subject: CN=422f76bbe7b1b4e00574d8f704d1375597262182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:b6:d9:17:88:73:f3:b4:1e:32:f3:57:68:
                    07:66:f8:30:52:fc:33:ad:15:8c:92:9d:9a:5d:ba:
                    8a:ff:da:2f:62:92:02:18:05:0a:bd:d3:01:6e:17:
                    a1:0b:80:55:31:f3:5f:43:86:9a:4e:19:41:3d:25:
                    9d:9c:8d:a4:78:99:f2:fa:1c:84:64:e2:20:c2:36:
                    97:12:09:f6:d4:5c:f9:22:2b:53:fc:a0:4a:4e:ff:
                    26:7d:39:a6:1b:71:16:22:6f:6c:4e:be:ab:a6:c4:
                    80:b7:0e:e0:92:0a:08:57:8f:42:41:2a:42:fd:5c:
                    e0:92:08:cd:f0:83:ee:8d:34:c1:e9:cd:c5:81:3e:
                    69:e2:db:89:3e:16:52:d1:f3:8c:b4:05:75:85:87:
                    02:b5:b7:b3:c9:d1:1d:1d:45:8e:1c:6b:42:a8:84:
                    52:76:e9:62:31:d6:78:32:66:45:67:b7:35:60:69:
                    39:42:1e:9e:93:ea:1a:2d:2f:a0:fd:cd:27:c0:cd:
                    48:dc:20:f4:f3:f1:02:e6:5d:3d:bc:30:a5:bf:34:
                    2d:ee:8e:0c:ab:01:db:af:39:49:90:1c:e8:94:60:
                    a3:90:a6:f3:72:be:61:58:85:03:91:75:41:30:2a:
                    b8:f1:54:a4:02:02:84:62:0f:37:29:0e:64:f2:99:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2F:76:BB:E7:B1:B4:E0:05:74:D8:F7:04:D1:37:55:97:26:21:82
            X509v3 Authority Key Identifier:
                keyid:1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e5:7f:83:89:44:f1:d2:cd:55:f6:db:9e:58:a3:3a:70:80:
         a3:3c:fc:e1:f0:b7:b2:d0:21:7e:17:4a:68:d0:ea:a5:05:63:
         c0:1f:db:bb:ea:d9:b8:19:cf:59:f5:2f:da:e3:bc:e7:22:3e:
         44:77:63:44:15:44:54:f2:04:9e:19:4f:2c:54:ec:b6:0a:2a:
         fc:cd:7d:f2:2a:fb:84:16:43:58:ef:87:a0:a3:7d:96:4b:d2:
         26:60:0f:85:f8:b3:3a:ab:47:a8:20:f7:74:22:a0:41:11:63:
         34:41:53:d0:74:6d:85:2b:aa:38:40:11:31:c8:ca:05:ee:a6:
         ca:7e:14:5b:59:7d:0e:49:9f:2c:fe:01:db:eb:53:39:b4:ae:
         2f:5f:ef:62:3b:0a:0b:a7:26:c7:97:69:77:d1:ca:fa:98:29:
         07:b1:61:7f:30:d3:12:12:47:13:0a:86:6d:ec:2c:49:5b:6b:
         4e:6f:04:7d:c7:27:1c:dc:ee:ee:9a:49:64:bc:ac:c1:8f:9c:
         f9:dd:21:89:1b:42:28:61:32:4d:b6:bd:83:ad:db:07:b9:a7:
         69:23:d2:0c:88:08:58:91:a0:08:50:91:fc:ae:40:4b:eb:8a:
         6c:72:89:f8:57:bb:f1:89:d3:f6:bc:d0:bd:2c:1c:36:44:16:
         62:d4:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 03:13:23 2025 by rpki-client