Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File:                     G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier:          Wiu3teS5xAIkS0FXwk/OOBBmlzxfb7FFs+3VCHbTZOA=
Subject key identifier:   A9:2B:60:A7:AF:F2:DE:F4:53:18:DD:20:78:70:E4:8E:F3:0A:92:50
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer:       /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial:       019A21E4B518BDD37BA50E87F18A5837E8BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number:          102C
Signing time:             Sun 26 Oct 2025 19:00:27 +0000
Manifest this update:     Sun 26 Oct 2025 19:00:27 +0000
Manifest next update:     Mon 27 Oct 2025 19:00:27 +0000
Files and hashes:         1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: HMPDpepaF3CgMAmI02XYvY7o6pZS+yIm/U+g1CS6Lrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:e4:b5:18:bd:d3:7b:a5:0e:87:f1:8a:58:37:e8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
        Validity
            Not Before: Oct 26 19:00:27 2025 GMT
            Not After : Oct 27 19:00:27 2025 GMT
        Subject: CN=a92b60a7aff2def45318dd207870e48ef30a9250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:ee:d3:83:2c:b1:30:97:35:8b:0c:b1:b6:
                    a8:7f:df:06:73:ed:28:fd:84:b9:aa:72:56:ff:39:
                    3e:dd:a7:d8:4c:21:d9:12:24:b7:de:60:0e:67:82:
                    0f:e4:ff:6e:7b:81:36:57:1b:b3:e8:a0:5f:f0:51:
                    98:95:8e:4a:ee:cf:72:55:22:12:3b:20:ef:be:17:
                    b6:4d:b3:02:db:9a:1d:21:5f:69:cd:13:41:3d:f7:
                    90:03:e3:30:43:2d:ad:aa:f8:70:a3:c5:f4:43:27:
                    3e:56:fe:b8:40:43:90:7c:77:f1:1d:f1:75:7e:18:
                    82:a1:2a:fe:62:cf:03:71:2b:82:22:c3:62:ff:7f:
                    c4:60:7c:62:33:df:09:44:bd:b4:07:5f:ac:49:41:
                    ed:ee:c7:fa:4f:f7:54:a6:0c:82:e2:1e:ad:78:67:
                    2b:d2:af:d1:b1:77:39:d3:08:1b:e1:7f:40:b0:47:
                    3a:7c:b8:ac:85:64:2b:0f:84:8d:aa:66:b5:48:3b:
                    0e:1e:c1:ca:07:95:ec:8c:40:f4:24:a1:d9:38:8a:
                    40:91:81:a8:61:f0:72:a8:cb:d3:a8:77:24:9e:2d:
                    d4:10:57:e7:ca:36:72:16:eb:db:c9:1d:b7:af:94:
                    f5:a8:ec:5b:a0:ef:ea:39:26:9e:27:1e:5c:89:47:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2B:60:A7:AF:F2:DE:F4:53:18:DD:20:78:70:E4:8E:F3:0A:92:50
            X509v3 Authority Key Identifier:
                keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:48:55:e0:66:1a:ac:bf:5d:f6:da:a4:65:cc:a1:81:35:3e:
         5c:2d:a9:e0:46:4a:53:6f:94:03:aa:5a:52:95:8a:d1:3c:31:
         1b:1d:df:44:9e:40:a4:7d:90:ef:8d:60:ad:bf:f2:6f:88:3e:
         4d:85:3b:a4:b0:50:2b:c8:40:e1:77:43:a2:23:43:b2:6b:c4:
         c8:50:85:34:54:08:9f:e4:b8:57:13:a5:68:e8:6e:e8:8b:1f:
         71:71:13:eb:9d:8e:36:46:46:eb:9e:c9:e7:69:d8:b2:18:1e:
         43:59:e8:99:8b:67:f3:64:0f:9b:8c:4c:8a:ac:a1:6f:5a:2b:
         d8:f5:60:a5:2d:bf:6d:a6:b5:14:ca:23:d8:ae:27:8f:9d:07:
         4a:cb:d8:cf:e7:5f:c5:c5:b4:f6:b6:f9:2a:7f:d2:82:b4:e7:
         06:63:67:01:7f:ae:33:10:20:0c:89:d0:94:ac:d8:65:cd:1f:
         cd:2a:32:3b:84:19:74:f4:99:37:5e:f6:a6:69:7d:fc:5f:53:
         18:b6:d4:8b:3a:48:fe:c1:44:df:d7:9d:77:bb:a3:6c:44:33:
         83:01:bc:d1:89:3c:25:9e:97:41:b0:89:38:82:42:d7:84:39:
         f2:fa:d8:1b:0c:10:ea:43:d7:78:e8:09:8d:2b:52:6a:d1:b9:
         81:b8:54:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:29 2025 by rpki-client