Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File:                     1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier:          xUcCi/5hAMeBXVPzSHEdgutbrP3K7eaSh3ItvKbsHSs=
Subject key identifier:   15:97:07:A2:12:9D:6A:D7:DE:19:5F:CC:AF:9F:7C:5E:55:82:8A:56
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer:       /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial:       019A4D737ED680530D1040A11D6878DCAF8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number:          1088
Signing time:             Tue 04 Nov 2025 06:00:05 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:05 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:05 +0000
Files and hashes:         1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: Ptvdbjc9O+75106wkN4oJSnJpkvXxwktBsW2M37P7JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:7e:d6:80:53:0d:10:40:a1:1d:68:78:dc:af:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
        Validity
            Not Before: Nov  4 06:00:05 2025 GMT
            Not After : Nov  5 06:00:05 2025 GMT
        Subject: CN=159707a2129d6ad7de195fccaf9f7c5e55828a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:79:18:42:8a:15:45:21:7f:3c:46:70:1a:
                    a6:97:64:3c:34:e5:64:e7:62:f4:60:9b:bf:0b:23:
                    37:2e:18:71:91:84:cf:a4:65:42:9a:d7:80:8e:b4:
                    a4:1e:da:92:94:cc:2a:c9:3f:7b:99:dc:8b:ac:b4:
                    84:8d:ee:e7:30:d0:9e:38:46:81:95:cf:8c:99:e4:
                    c2:16:da:7d:1d:1a:e9:ee:11:13:c0:09:0a:99:bc:
                    de:7b:f7:c8:fb:25:24:26:27:7d:ab:68:6f:f3:e5:
                    a3:a7:86:21:42:3a:6a:e9:1a:cc:79:b0:02:82:8e:
                    c8:d2:5c:08:06:96:87:66:01:da:25:f4:21:3c:53:
                    fe:b0:0f:e8:13:cf:bd:64:5b:fe:55:9b:70:6b:31:
                    3d:bd:0b:31:71:b8:60:91:a6:b1:3a:54:fc:2c:6e:
                    75:be:5d:9b:a1:13:36:38:33:15:7b:ba:8d:12:9b:
                    70:7b:d1:08:10:0d:0e:05:17:bc:93:83:bb:c6:64:
                    82:09:4b:16:66:d9:74:c1:a5:3a:c9:58:57:df:b8:
                    94:f9:99:e3:f2:f9:c6:47:c0:ca:56:b4:58:4e:31:
                    93:36:c5:30:1c:e9:75:74:ac:91:4a:a1:1c:16:8c:
                    eb:f0:ab:c3:04:ff:c2:f2:32:a0:a7:b0:ce:6e:1d:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:97:07:A2:12:9D:6A:D7:DE:19:5F:CC:AF:9F:7C:5E:55:82:8A:56
            X509v3 Authority Key Identifier:
                keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:e2:26:c7:6c:7d:de:27:1b:d6:65:d8:61:4d:f7:cf:74:
         fa:99:4d:95:12:64:7b:ff:58:f6:eb:15:58:50:11:d9:a9:aa:
         cb:81:9d:a7:c9:2b:ca:32:39:3c:f7:c8:ff:64:75:bb:4c:7a:
         a7:f4:d4:e8:22:fb:a9:de:06:57:99:86:22:1f:c4:4f:e7:3e:
         8f:c2:64:7c:36:62:a2:4a:0c:dc:79:db:c2:62:0f:9d:ca:22:
         db:a0:3b:b5:0b:76:39:c5:ce:09:83:ef:84:4c:e2:1a:27:d9:
         13:62:1a:38:8d:a0:c5:80:bd:d5:48:06:ec:f6:6b:27:4a:97:
         f9:c8:cb:65:4f:54:96:2f:b3:d7:16:f0:e7:ee:fc:3f:cc:a4:
         6a:74:b5:36:fd:50:37:75:80:c8:22:13:da:2f:74:c2:3e:d9:
         f2:94:97:e0:2c:37:92:57:cd:a5:7d:4d:ff:43:a4:ed:d0:f9:
         5c:ab:f5:9a:12:a4:b9:b4:60:af:01:8a:66:0c:f7:b5:78:ad:
         90:ff:0a:f5:6d:52:4a:f6:f9:f6:9f:a6:c1:ea:27:0b:b1:a1:
         d2:d8:cc:68:93:1e:ad:0b:56:92:54:c7:b3:33:94:e4:e7:98:
         1b:7d:6f:0a:0c:b3:93:44:b8:98:3c:6a:5b:db:76:b5:69:2e:
         07:eb:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:57 2025 by rpki-client