Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File:                     gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier:          /JsLF0lXsbewjw1h5rIa0ZWOg1seS7oixW7P1ROj+rA=
Subject key identifier:   26:4B:EB:51:3F:65:59:7C:56:4E:28:6B:8B:61:C6:13:07:AA:AD:3A
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer:       /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial:       019A503E4DE2F690FF469798CBDA07061E0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number:          170F
Signing time:             Tue 04 Nov 2025 19:00:51 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:51 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:51 +0000
Files and hashes:         1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: 0Lq2+yF0AA8XOYU81haVrComgib1zfMRdP31ev9YBbg=)
                          2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:4d:e2:f6:90:ff:46:97:98:cb:da:07:06:1e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
        Validity
            Not Before: Nov  4 19:00:51 2025 GMT
            Not After : Nov  5 19:00:51 2025 GMT
        Subject: CN=264beb513f65597c564e286b8b61c61307aaad3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f1:d6:56:32:9b:12:e4:96:da:12:f5:06:0f:
                    80:25:7a:2c:8e:96:20:80:7f:96:48:7f:ea:99:03:
                    db:99:2d:33:f3:ab:18:eb:04:45:1e:3f:65:47:e7:
                    e2:84:1f:3c:07:cf:85:31:13:eb:a9:0f:2d:ae:5f:
                    17:f8:30:39:22:b6:61:4d:9a:76:ae:7e:45:f9:83:
                    cb:24:42:3c:a9:90:cc:7d:c6:b9:96:34:6f:57:b4:
                    dc:1a:b6:f1:f6:2e:6f:af:ff:53:8a:4c:45:16:3a:
                    08:c9:84:d9:7f:29:80:ab:70:58:65:28:1d:d4:d0:
                    e6:39:07:8f:26:41:6a:f1:b7:72:ab:7f:18:f3:77:
                    0c:75:fc:f7:67:3f:83:10:58:bf:7b:bb:da:db:80:
                    f4:d6:57:ce:0e:01:92:b0:d2:2c:98:bf:6c:5b:04:
                    7f:19:8c:06:9b:64:54:78:b4:a3:d0:f8:29:2d:eb:
                    fc:a8:70:66:40:17:55:04:73:30:f1:9e:7a:60:5c:
                    97:5b:24:72:da:60:7e:b5:e9:c5:b8:0e:5a:3c:4c:
                    a7:98:b7:f7:90:8a:ca:a0:a5:91:eb:8c:f8:c7:38:
                    73:62:ca:5c:19:cb:22:c5:6a:91:12:02:15:8a:d2:
                    14:d0:92:54:a6:68:18:36:c1:14:45:3e:12:38:c1:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4B:EB:51:3F:65:59:7C:56:4E:28:6B:8B:61:C6:13:07:AA:AD:3A
            X509v3 Authority Key Identifier:
                keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d3:86:d9:33:47:ee:0d:e1:aa:08:a9:0c:e4:c8:cc:58:dd:
         98:75:b5:fa:2f:7a:88:b9:0d:0e:b1:a8:03:f8:f1:5b:a4:e2:
         34:58:50:83:82:88:e2:be:30:eb:8f:a4:56:69:90:80:73:24:
         df:5c:35:d0:c1:8b:5e:8d:db:a8:9b:39:8e:1b:f2:ad:10:08:
         3a:b3:30:02:ac:c1:94:12:15:69:ca:14:c9:7a:07:e0:f0:51:
         62:6c:e3:19:b5:49:f3:bd:e6:bd:d2:48:2a:61:33:8c:df:8d:
         13:15:cb:ed:3b:ab:43:a7:88:41:bd:31:1d:ae:27:46:fd:a8:
         8e:81:47:b7:43:e3:bb:1c:af:63:31:9d:25:76:9b:09:20:6e:
         9e:1e:d7:17:cd:00:46:ee:02:89:84:33:03:72:19:f2:d6:12:
         b8:1f:22:34:90:9a:a4:54:91:84:c4:1e:8d:e5:fb:ae:13:d1:
         45:51:e1:72:36:19:44:6b:32:fa:ae:0c:c2:df:80:f0:0c:37:
         a6:40:5e:10:cc:8a:15:69:cd:dc:64:e2:99:35:09:a4:15:a1:
         db:34:65:44:f0:4d:95:3a:c5:96:31:4a:76:5c:25:9c:ab:15:
         4c:9c:60:0a:31:2f:3d:88:cf:8d:78:2a:35:49:0c:7b:c1:8c:
         28:3c:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:40 2025 by rpki-client