Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
File:                     GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft (raw, json)
Hash identifier:          xKRK0UMeUVoeOKGzFe02WLt0DD2UX9Oyg+sFFtjvo2M=
Subject key identifier:   26:BD:F7:27:D2:F6:B5:AC:44:9F:57:0E:F4:AF:7E:AB:01:61:1F:0B
Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
Certificate issuer:       /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Certificate serial:       019A533F9AE8844181CF05EE3A927D869747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
Manifest number:          0336
Signing time:             Wed 05 Nov 2025 09:01:08 +0000
Manifest this update:     Wed 05 Nov 2025 09:01:08 +0000
Manifest next update:     Thu 06 Nov 2025 09:01:08 +0000
Files and hashes:         1: GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl (hash: TEENLUdXaEU6sw8jjADQkMBL9CXCAJblCPk349SZ/cY=)
                          2: SFyTfsWyq2coBx8ydbZroSS50xQ.roa (hash: ZZpymtBw1D9nPwu2cf1P4YkyaGccufHXZlJkybCGFMw=)
                          3: TNkzBPyNieqNtFJ7OZ5WQ2BFAFM.roa (hash: yD3hqpWrk6f2s5tXbai7Hu4KRhgeNHLLkovFRVk/JKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:3f:9a:e8:84:41:81:cf:05:ee:3a:92:7d:86:97:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
        Validity
            Not Before: Nov  5 09:01:08 2025 GMT
            Not After : Nov  6 09:01:08 2025 GMT
        Subject: CN=26bdf727d2f6b5ac449f570ef4af7eab01611f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:c4:78:86:ca:59:49:20:49:95:60:f3:c7:
                    9b:ef:6d:6f:bc:32:9f:ed:28:e0:c0:4f:2d:4a:ad:
                    72:64:90:32:9f:53:26:f3:42:b6:3c:c2:24:1b:d6:
                    ea:de:f4:ec:e3:d1:54:f0:34:63:a7:9b:68:79:86:
                    55:b7:f4:7b:fc:51:af:57:3d:3f:ad:65:ee:ff:ad:
                    5f:30:0f:48:9f:6e:d7:a7:f9:94:d5:07:5c:8b:66:
                    12:c9:97:60:ef:e9:6c:60:10:48:f1:1c:8a:d7:20:
                    81:b9:6f:c9:6e:e3:de:a5:8d:5e:31:23:c4:e3:4f:
                    1d:35:0b:4d:e8:11:27:82:eb:4c:8e:ad:24:3a:fe:
                    29:6f:f5:7b:6d:20:af:a2:7e:c2:72:b0:b8:97:d9:
                    c2:0f:9d:36:43:2f:f0:84:6d:ac:71:8e:71:cc:f6:
                    b9:fa:0c:fb:ce:a9:d4:8b:e7:c9:2b:bb:32:64:81:
                    a1:c8:7e:5b:b1:86:b3:ab:09:e7:5a:7a:59:43:71:
                    69:08:1b:b3:fd:6d:32:2d:ce:c0:50:96:62:dd:90:
                    f4:ea:f9:82:6b:33:a6:c7:6c:31:ac:4f:5d:01:9c:
                    4c:6c:b9:ee:49:a6:58:da:b8:82:98:2a:11:52:c1:
                    f8:05:65:bb:b5:d0:95:3e:4f:c6:1a:71:38:70:b6:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BD:F7:27:D2:F6:B5:AC:44:9F:57:0E:F4:AF:7E:AB:01:61:1F:0B
            X509v3 Authority Key Identifier:
                keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:86:bd:02:6b:d0:e3:30:f4:6e:0a:1a:05:8b:33:b1:7a:
         21:8b:32:17:07:65:7c:ef:86:83:5e:a2:7b:59:39:1e:df:f2:
         f4:6b:77:2f:d1:8e:ba:be:11:8d:e8:73:e7:88:43:f9:45:a7:
         47:c0:9a:eb:00:33:3d:19:80:7f:9d:1d:85:67:92:47:f4:0e:
         ae:04:3d:3e:bc:93:32:ed:33:d4:4b:67:af:38:a4:a6:33:52:
         d8:33:12:33:e1:e1:3e:9d:cb:ab:02:5a:85:89:06:75:6c:3e:
         5c:69:81:56:f5:36:d2:25:70:32:70:df:04:16:48:fa:b4:1c:
         f4:3a:29:16:47:4f:76:80:01:d9:c1:c2:0f:65:69:5b:22:48:
         60:48:43:0f:f4:55:90:7a:96:c0:fc:25:07:c8:2f:27:59:25:
         d2:de:da:df:f6:30:5b:39:d9:71:be:29:38:af:d5:b4:03:66:
         ed:48:d3:5f:48:e1:03:ba:42:3c:9b:c5:70:1d:ed:68:24:a9:
         25:a6:cb:ea:fa:68:43:17:ca:9a:d1:4e:e6:a8:a3:55:36:45:
         3f:c1:70:8c:c6:7e:f8:10:90:49:43:ee:fb:9c:18:20:ad:53:
         32:14:6b:e4:b8:2d:65:93:2a:03:ff:fa:ae:62:10:e9:2b:51:
         99:47:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:16:37 2025 by rpki-client