Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
File:                     GPJ8DAs13dQruJLBaEWmOwAnocc.mft (raw, json)
Hash identifier:          azKES2suSlcCzj2A4RchjIMOyxpFM4a8veHLS/4g6lc=
Subject key identifier:   23:19:10:FB:CA:26:00:6E:14:95:72:1F:B9:01:39:FE:C5:0B:B4:ED
Authority key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
Certificate issuer:       /CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Certificate serial:       019A50E283ACE9A5F8064F59E200007E3126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
Manifest number:          020B
Signing time:             Tue 04 Nov 2025 22:00:13 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:13 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:13 +0000
Files and hashes:         1: 0yoRjSV7Roa_6RLApu60JbNvhn0.roa (hash: zY5w8MSwqL9WHbjRx7fb+VonzMqXyw8rTcBHB5IjZKc=)
                          2: GPJ8DAs13dQruJLBaEWmOwAnocc.crl (hash: L4jij8dxUtI/Y+V67Cb3hgkwQkQDbTbdC7iBmnclgso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:83:ac:e9:a5:f8:06:4f:59:e2:00:00:7e:31:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
        Validity
            Not Before: Nov  4 22:00:13 2025 GMT
            Not After : Nov  5 22:00:13 2025 GMT
        Subject: CN=231910fbca26006e1495721fb90139fec50bb4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:d5:e3:33:7c:59:d2:f1:d2:98:55:f6:2d:
                    68:0e:1f:3d:cd:33:f0:0d:c3:72:b1:6c:3b:11:00:
                    45:0d:df:28:b9:9a:c7:a9:5f:c1:61:1b:de:dd:ba:
                    1e:d6:e3:54:17:e7:76:f3:db:79:92:69:47:1e:83:
                    0a:71:87:e0:36:97:50:6c:36:4e:7d:59:50:dd:76:
                    45:74:ef:09:31:c7:c8:97:19:24:01:ed:e8:dd:95:
                    a4:21:01:08:e4:38:a5:1f:55:ce:a1:6d:a1:b0:8b:
                    9e:18:ec:58:4c:46:06:7d:2f:72:b1:94:04:87:f9:
                    d9:13:01:7f:e6:a7:18:6c:33:53:79:11:a1:5b:b4:
                    df:05:7a:f5:b0:a2:cf:cf:eb:ed:3e:39:3d:10:f5:
                    56:8a:41:1f:e9:a5:39:fe:d9:9d:e4:ae:45:32:bf:
                    bd:e9:57:71:eb:24:3d:3d:5e:27:f1:ba:85:29:ce:
                    1b:ef:5b:e9:3e:98:65:77:75:1f:62:9a:57:86:d9:
                    d2:dc:34:c1:ab:aa:a5:d3:fa:8a:43:85:83:ec:bd:
                    2b:63:1e:78:bd:5c:e2:24:c2:9d:61:6c:37:6a:0e:
                    f4:b7:dc:b3:d8:3a:75:c5:9f:14:0f:4d:9a:27:fe:
                    23:4e:81:da:98:8b:c2:d3:c7:21:e1:b1:0e:d1:3f:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:19:10:FB:CA:26:00:6E:14:95:72:1F:B9:01:39:FE:C5:0B:B4:ED
            X509v3 Authority Key Identifier:
                keyid:18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:d1:c8:47:41:8e:d9:67:34:be:33:ef:61:5c:17:4e:9b:
         7f:06:20:05:6f:0c:a5:84:f4:1d:a8:56:b6:05:e3:1a:25:2d:
         c2:04:3e:44:c6:0a:0f:76:03:0e:24:c2:36:0e:7c:37:e4:dd:
         44:26:f4:13:93:b7:0b:d2:cf:32:74:2e:56:73:95:92:9d:d3:
         9a:1a:21:91:5d:8e:db:c2:1c:84:89:e2:90:d6:92:d2:65:54:
         dc:b1:e7:2a:f1:18:8b:a8:84:a0:3d:7e:e2:3c:a8:be:e4:21:
         f5:f1:65:19:a6:8c:d8:47:a3:57:e9:bb:d5:4b:0e:db:2b:f6:
         49:dc:5d:84:a8:5c:0f:3e:c8:6b:40:92:41:c7:86:96:70:8a:
         e1:62:e6:82:db:78:84:8d:c5:b0:cf:29:9c:47:d0:10:7b:32:
         a8:1f:9e:b9:ca:11:b5:03:1a:e4:53:ad:01:dd:71:dc:09:75:
         6f:25:19:4f:0e:de:a9:4d:0d:ca:b8:69:61:f6:cb:c3:e9:ab:
         f2:b2:67:e4:55:da:7a:54:9c:b1:9c:1e:54:d1:81:73:aa:88:
         ef:bf:1c:7b:2c:ab:46:22:d0:ef:f3:7c:a3:38:29:a5:47:1e:
         ae:15:3f:ae:d3:d2:d5:fe:f9:58:4b:2d:b4:b0:9e:28:d6:be:
         42:42:88:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:17:01 2025 by rpki-client