Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
File:                     gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json)
Hash identifier:          fB35ACT3Ne8cdAYzBhOj5NgqO8GJdDXbU94aEu01t4I=
Subject key identifier:   50:24:10:3C:48:70:55:65:0A:6C:4C:2B:36:A9:29:AA:AF:F3:F2:C4
Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Certificate issuer:       /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Certificate serial:       019A54C037CB85F39AFA07C509C299D3AFCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
Manifest number:          0883
Signing time:             Wed 05 Nov 2025 16:01:14 +0000
Manifest this update:     Wed 05 Nov 2025 16:01:14 +0000
Manifest next update:     Thu 06 Nov 2025 16:01:14 +0000
Files and hashes:         1: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: tL0zx1P+enTyAp4hWSOECKnkLH3lTXS2pkkv8wexwZQ=)
                          2: x6jSUPrNwCyjzV69rEteWUbA8bw.roa (hash: 1zp500CT5AdJ87LI8ByrofonFUUOcrdgDO051AN4e6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:c0:37:cb:85:f3:9a:fa:07:c5:09:c2:99:d3:af:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
        Validity
            Not Before: Nov  5 16:01:14 2025 GMT
            Not After : Nov  6 16:01:14 2025 GMT
        Subject: CN=5024103c487055650a6c4c2b36a929aaaff3f2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:dd:01:72:ed:a9:86:f1:64:a7:6e:c5:a7:
                    5b:37:b2:a0:93:3e:2f:9d:52:ce:45:5e:f6:17:06:
                    a0:22:38:16:79:3d:79:2f:3e:a9:3c:01:34:d1:f6:
                    9b:75:ce:71:ba:d1:f4:69:0e:e7:4e:0a:33:59:19:
                    8a:26:1c:4c:c5:a8:38:3e:46:cf:24:c3:51:0b:ce:
                    3a:4f:62:a5:de:7a:51:e7:36:fa:d8:34:0e:bf:41:
                    ca:52:10:83:b0:cf:72:eb:79:27:46:97:51:0a:67:
                    37:15:5f:51:7b:89:66:95:c3:eb:d1:06:91:f5:79:
                    e2:53:d3:f7:18:45:ff:16:ec:48:9a:28:e0:ca:32:
                    4f:2d:ed:7d:95:02:1c:14:ca:a3:88:39:95:04:a9:
                    69:1b:7b:e8:f1:ca:cc:39:b4:83:65:6b:52:23:6b:
                    52:79:e5:49:41:1b:ac:4f:06:d6:43:8d:f6:5b:85:
                    b8:59:af:12:3f:92:c1:ca:80:29:a4:e6:9d:96:06:
                    de:d6:76:e8:cf:42:66:ab:ec:ef:7c:8c:31:0d:3d:
                    1a:4a:5a:74:82:33:2e:60:be:47:a2:65:c2:bb:68:
                    bf:04:72:ca:04:9a:48:88:26:0b:28:11:98:90:42:
                    92:77:36:19:82:d4:95:e2:e3:7a:7a:7d:27:a7:f8:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:24:10:3C:48:70:55:65:0A:6C:4C:2B:36:A9:29:AA:AF:F3:F2:C4
            X509v3 Authority Key Identifier:
                keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:ea:70:55:1f:7c:46:56:93:cc:89:f4:36:08:32:e7:0c:
         b9:56:8f:b9:52:d8:40:a2:a9:63:c9:e5:59:74:4e:e8:e6:78:
         90:44:53:ab:9c:ab:d9:ec:fa:c3:34:c3:cc:1d:3f:a7:89:23:
         4f:6c:c5:f2:c8:cb:39:7b:b7:1b:d8:43:2b:b8:52:ed:9e:20:
         8c:88:e7:18:bb:68:68:36:b8:48:b3:4e:f7:fc:6d:3b:c0:2a:
         a7:d1:d0:6a:3f:67:ac:cf:39:c0:d4:86:18:d5:b5:e4:b8:80:
         f5:ec:e7:f8:e4:90:22:f9:ea:1c:1e:61:45:cc:0a:28:8c:12:
         d1:a2:8d:73:6c:2b:28:b2:2f:cc:ef:77:94:4a:31:e2:db:16:
         f5:84:6a:18:25:77:74:8b:25:6e:4c:77:e8:ce:e6:d2:4c:50:
         69:85:64:13:a5:64:97:8f:2d:0e:96:6b:24:b1:5a:81:7c:01:
         3f:8c:f0:95:29:71:a7:f9:77:b7:f9:c6:a0:40:26:d8:d9:7c:
         05:b3:ca:86:e2:7f:14:19:48:68:91:57:82:0c:34:dd:ee:64:
         0a:c3:24:c5:0b:69:67:ea:de:c2:39:73:f1:d1:a7:97:47:be:
         d4:a3:f0:4c:2c:20:c0:c5:82:0a:26:96:53:34:f3:58:95:05:
         1d:c5:bb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:46:50 2025 by rpki-client