Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
File:                     guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json)
Hash identifier:          D4N5AyJLVwmoDHYFsxBpcLF7xh0XOdi6kBTWwBL6m94=
Subject key identifier:   D6:52:0E:DD:3A:E0:30:30:1B:AF:44:B5:E3:26:DE:BE:41:99:32:75
Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Certificate issuer:       /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Certificate serial:       01992255B52FB81549A269C2B1C523E67632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
Manifest number:          0FBA
Signing time:             Sun 07 Sep 2025 04:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:06 +0000
Files and hashes:         1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: IStgGtPNVhKmbbNAdiC0Ou5OwY3gLozXI+GNc0qz/0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:b5:2f:b8:15:49:a2:69:c2:b1:c5:23:e6:76:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
        Validity
            Not Before: Sep  7 04:01:06 2025 GMT
            Not After : Sep  8 04:01:06 2025 GMT
        Subject: CN=d6520edd3ae030301baf44b5e326debe41993275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:7d:40:bf:80:3f:c0:aa:4a:8d:c0:c3:2f:
                    ac:b6:a9:fb:d7:10:bc:7c:0c:73:1b:fc:50:2e:78:
                    f1:bc:3e:fa:61:67:71:61:78:bd:0a:c1:43:e6:b5:
                    6b:d5:ee:3a:1e:30:26:16:b0:48:05:e0:d7:05:e1:
                    68:53:a4:81:7e:21:9f:25:6d:e5:35:29:04:7d:c6:
                    78:92:4c:c6:0a:fb:f8:37:14:d2:73:8e:0b:ce:29:
                    d6:58:9f:6f:14:5c:17:0a:46:7a:20:4d:95:fe:e9:
                    a0:59:a4:91:f4:74:87:b7:9c:6f:19:c8:3d:ef:1d:
                    3e:ab:88:4f:2b:d2:e3:dd:bb:99:b2:2c:c4:4d:8d:
                    9c:34:01:15:6f:ff:0c:f2:5d:e2:ee:f4:4d:24:df:
                    f1:7a:14:6b:2a:b9:21:81:31:b8:3f:3f:5d:fd:cb:
                    7b:38:69:64:46:dc:41:5f:dc:1f:25:28:97:6a:ac:
                    99:b5:67:8d:80:c1:90:5f:10:f4:8b:77:70:c8:4c:
                    cb:6a:13:24:60:de:68:3c:17:ad:a5:57:ea:d1:8b:
                    d3:dd:4e:5b:9d:0c:8a:f6:92:69:0c:4e:e5:06:64:
                    bb:80:26:88:ef:c9:02:b7:a6:c5:b5:68:27:ce:d3:
                    4b:f7:d0:9a:66:4c:da:f3:47:98:f8:c2:db:5e:bf:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:52:0E:DD:3A:E0:30:30:1B:AF:44:B5:E3:26:DE:BE:41:99:32:75
            X509v3 Authority Key Identifier:
                keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8b:85:8a:61:7e:9f:ef:24:9c:10:c4:43:ec:e3:6f:ba:42:
         b8:53:22:91:5e:8c:e6:bd:aa:a1:33:e6:5d:43:c3:28:b8:c0:
         40:de:05:fa:f7:01:03:81:62:21:d3:6e:8c:dc:86:b6:38:f4:
         c2:a9:fe:14:a1:90:9f:ad:cb:c3:a2:f6:d3:f1:ab:d3:0a:31:
         e6:1d:d0:7a:c7:3b:b1:6f:5e:76:41:78:3a:57:e5:94:92:5b:
         08:99:38:13:a8:b4:8a:a2:b7:33:41:0a:62:6e:57:cd:56:9e:
         dc:3c:50:59:fc:14:f8:8f:f9:3a:96:7a:f8:2b:d9:9b:9a:d2:
         49:21:18:e9:49:38:31:c9:5f:1d:83:69:14:b1:ea:01:2d:e4:
         82:a6:d6:b9:d5:69:73:4a:2c:ae:f6:84:21:cc:40:7e:07:e5:
         6d:dd:9c:2c:e2:2f:a1:3f:d6:ce:63:7c:a3:0a:30:27:b6:6e:
         0a:85:5b:80:7c:28:be:61:f9:91:6e:2d:3f:c1:83:fa:cf:8b:
         f4:f0:21:34:be:de:d5:3f:b4:57:3d:05:e2:3c:a2:fe:12:b7:
         18:f4:bd:7a:fc:f7:c6:e1:f3:6e:c2:d6:79:4b:26:38:f1:79:
         c9:85:9f:27:73:d3:7f:ea:ee:92:7b:9e:58:ec:5b:39:04:9d:
         c8:64:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:50 2025 by rpki-client