Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File:                     pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier:          +M9skAsWjanFc8bek+RQN2QAtld5oPAGr0c06ZfYBoE=
Subject key identifier:   2E:D0:F7:EF:2C:04:50:78:CA:72:DD:D1:88:8E:BA:D1:BE:A0:22:B9
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer:       /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial:       01993DCC687CBF3100DACA6234644E16BA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number:          1680
Signing time:             Fri 12 Sep 2025 12:00:30 +0000
Manifest this update:     Fri 12 Sep 2025 12:00:30 +0000
Manifest next update:     Sat 13 Sep 2025 12:00:30 +0000
Files and hashes:         1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=)
                          2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=)
                          3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=)
                          4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: QbJ9QgDXvCLUetLdjkpcitnJ6eBrDCj0tvEPr2YNHyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Sep 2025 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:3d:cc:68:7c:bf:31:00:da:ca:62:34:64:4e:16:ba:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
        Validity
            Not Before: Sep 12 12:00:30 2025 GMT
            Not After : Sep 13 12:00:30 2025 GMT
        Subject: CN=2ed0f7ef2c045078ca72ddd1888ebad1bea022b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dd:41:26:a0:f1:a7:ba:bf:be:4a:0f:b4:2b:
                    f7:47:db:04:38:21:74:dc:05:b9:95:62:cb:50:fd:
                    01:4c:56:a9:49:f3:eb:59:7f:69:fa:36:87:b3:e6:
                    3c:f8:dc:bc:51:78:3e:24:3d:60:13:55:6c:93:71:
                    9d:f3:0a:11:84:4f:4d:67:48:42:e4:3b:31:cc:73:
                    cc:00:d1:1a:dd:fc:35:c0:7c:da:fc:f2:b3:dc:71:
                    1a:7d:88:d7:61:53:64:47:67:88:75:3d:f9:00:3f:
                    b1:83:ed:b8:21:8a:2d:71:34:28:df:98:a8:9f:15:
                    63:00:82:63:48:e2:f2:9d:6e:09:e5:e1:df:72:4d:
                    3e:da:72:9e:6c:70:ae:93:87:8b:c3:18:ed:46:d8:
                    c0:08:ca:92:11:a0:59:60:f6:c7:da:d8:c1:67:0d:
                    36:63:5a:54:1f:93:e8:5a:ca:48:5f:9f:75:8f:c8:
                    22:00:d6:88:5d:6c:44:7b:d9:8a:7d:1e:93:6b:ff:
                    84:e9:d2:39:6e:d4:aa:84:92:7b:5e:3d:63:52:68:
                    47:96:50:f8:b4:20:68:90:8e:d2:6c:7b:4a:68:8a:
                    f0:6d:f5:a4:db:61:e1:be:7a:96:38:ab:73:9a:1f:
                    89:79:cf:62:9c:f8:a1:01:c2:3a:48:24:1f:27:2f:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D0:F7:EF:2C:04:50:78:CA:72:DD:D1:88:8E:BA:D1:BE:A0:22:B9
            X509v3 Authority Key Identifier:
                keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5b:59:59:68:de:77:d9:61:59:91:03:da:4d:5f:cf:83:4a:
         6d:c6:88:20:7e:09:b8:13:1f:69:83:5e:75:4c:e8:01:af:8d:
         3d:10:35:dc:53:59:a6:50:4b:f1:f6:34:00:15:2b:41:a0:df:
         5c:7a:07:c5:8c:17:b2:49:f5:76:f7:b5:7d:ed:c2:8d:17:78:
         45:45:e2:38:9d:6f:d5:9e:4e:00:76:f9:85:96:f8:50:34:b4:
         3a:9c:ec:51:30:b9:18:fc:a4:61:e5:c2:e9:ac:91:fa:20:92:
         05:73:39:39:4c:d0:ed:5c:a4:a6:0f:58:6c:7a:c4:ec:69:d5:
         c8:cc:23:1e:42:02:1a:45:e1:83:10:31:14:9a:e3:36:6a:93:
         80:ec:82:93:e1:2f:47:e4:58:18:ac:a1:9f:f0:ef:b3:31:ff:
         2b:81:c1:4e:b4:f6:c5:c6:8a:ca:79:79:51:ee:3a:0b:a1:8b:
         75:34:8d:07:10:f8:f8:5e:e7:31:bf:8f:b6:af:7f:8f:ac:de:
         74:02:23:e7:8c:eb:6a:f4:fa:74:70:2c:cb:af:ba:ee:a7:79:
         ca:dd:a9:ed:f6:c3:1e:60:c4:c2:9a:df:a8:11:aa:a4:22:cd:
         5f:41:73:02:48:aa:fc:d5:94:4c:35:0d:8f:38:18:63:17:fb:
         b4:ed:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 17:32:00 2025 by rpki-client