Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
File:                     GNo6QLEX-yVyzPekwnLS7GklKRw.mft (raw, json)
Hash identifier:          pcVB3WoidDrxCmvlVQwyp8BNU5++hSeHgXjG1AYo3A8=
Subject key identifier:   E3:5C:8D:EE:19:E4:D3:A7:75:03:FD:02:11:D9:00:FA:19:B3:ED:33
Authority key identifier: 18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
Certificate issuer:       /CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Certificate serial:       019A50750F06ACCBA2E787B81D547EA78D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
Manifest number:          170B
Signing time:             Tue 04 Nov 2025 20:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:39 +0000
Files and hashes:         1: GNo6QLEX-yVyzPekwnLS7GklKRw.crl (hash: ZmvnvZPtIdI0YOiIkJ+KhtWhpujUds2WJ25VRWzNL+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:75:0f:06:ac:cb:a2:e7:87:b8:1d:54:7e:a7:8d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
        Validity
            Not Before: Nov  4 20:00:39 2025 GMT
            Not After : Nov  5 20:00:39 2025 GMT
        Subject: CN=e35c8dee19e4d3a77503fd0211d900fa19b3ed33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:96:45:ca:c8:54:0d:9a:bf:0c:ce:3a:7c:
                    9a:87:4b:49:55:50:fb:cf:df:da:ac:4b:b4:e1:3b:
                    a0:ce:2c:9d:ce:f3:6b:3b:34:d7:4d:8f:2b:c4:9f:
                    9b:a0:e4:81:04:4c:e5:82:0d:3a:ee:a8:b7:5f:24:
                    59:8e:22:65:0d:2c:59:36:0e:15:05:2b:d3:09:97:
                    78:0a:72:80:73:89:3b:1d:42:d7:83:37:6c:93:54:
                    66:22:9b:15:ef:5d:7d:cb:21:af:3b:13:cf:65:c5:
                    e0:19:c2:ec:5a:4d:dd:84:01:4a:4e:e4:29:ee:17:
                    82:ad:9a:c8:8c:33:9e:2c:71:35:2c:d1:9e:7d:04:
                    9f:c8:1f:c6:b0:89:ca:83:22:79:0c:ef:79:25:99:
                    0e:7d:a9:b6:d9:b6:49:e2:59:3e:55:c3:d0:6c:d0:
                    43:d8:80:d0:ae:72:ed:f1:a4:5d:dc:cb:18:b5:71:
                    7e:92:ac:eb:18:aa:da:08:ff:ea:27:8c:2f:57:6b:
                    00:9d:f0:2c:17:0d:12:6f:f6:4b:74:db:1a:64:e2:
                    6a:f9:cd:f3:a4:a8:22:f3:33:35:05:ce:53:36:86:
                    0f:ef:37:7d:74:d3:8f:0f:81:7a:f1:c5:4f:3b:b3:
                    14:c5:d8:12:c3:8f:04:69:30:c0:9f:d7:90:b3:7f:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5C:8D:EE:19:E4:D3:A7:75:03:FD:02:11:D9:00:FA:19:B3:ED:33
            X509v3 Authority Key Identifier:
                keyid:18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:42:53:e8:b8:ed:90:58:aa:97:17:d4:f1:a4:72:38:e3:2d:
         fe:03:86:02:42:6c:d0:c8:35:e6:1a:36:f5:80:10:57:45:e5:
         51:39:b3:51:99:fb:a5:42:8c:ba:8e:1b:39:48:8c:40:df:6f:
         3e:0e:a3:f7:c8:90:7a:76:82:c8:86:0a:d7:c4:d0:ab:96:59:
         5c:7e:79:13:59:23:27:09:0c:24:21:38:5a:71:25:a2:2b:51:
         f4:1b:c3:ae:51:13:26:42:ca:c0:3f:31:50:5f:5e:b0:66:37:
         e0:88:ab:de:5d:41:90:9d:44:88:87:45:af:8f:07:2b:af:d6:
         48:94:97:ad:66:1b:18:f4:f6:71:f2:74:87:cb:b9:d7:31:61:
         d2:b4:3d:a1:97:7e:ac:18:53:a7:b5:da:c2:10:fc:2a:8b:92:
         01:40:27:4c:5a:69:ad:63:6c:04:a7:37:27:ec:2f:5b:5e:76:
         6a:5c:90:e0:d5:c3:1d:ed:8d:38:59:d1:13:50:ca:00:87:80:
         77:d7:0d:6d:17:05:ed:81:7d:16:6c:45:83:07:cb:75:fb:fa:
         ff:0b:59:86:44:98:7d:66:5c:eb:f5:39:7b:31:31:d7:37:35:
         a5:c6:21:3b:82:00:1a:f9:96:6a:7c:ef:f7:12:3c:c3:b0:d1:
         cc:b4:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:15 2025 by rpki-client