Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File:                     GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier:          tLKuRHJkynnetloBypgoB3q56C5+hQDbUvWDwP5rRGc=
Subject key identifier:   6D:D0:39:BB:A9:36:86:01:EE:6C:EA:95:65:AB:FC:2C:45:C4:00:B2
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer:       /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial:       019A4F9936587242F0930A8BF6BF082BB4B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number:          1710
Signing time:             Tue 04 Nov 2025 16:00:32 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:32 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:32 +0000
Files and hashes:         1: Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa (hash: sSWEBAjRZaqtAdwjOfykVqgf7b7OWWPQ8cRcY8XqZmU=)
                          2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: vcSeupK0Z3ELw5Sq0Vu7+u0tlKi+YOlgu7za37HR0dk=)
                          3: LASNDVJFR7nISIIuLJuen3qOehA.roa (hash: zvljnKWMuxdFNbiIQd7aWSR9xyeCp6tRJSsTE0UC5w8=)
                          4: y0q_mnHeqqODRkh3mN1XsHcA07o.roa (hash: vPYM1qZGBQlB55R1ITXDPJhnP7mpA1SIlCNpOTcVP6w=)
                          5: zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa (hash: N6qZrGzU3tG6EdhOgnUHNSlOSI1pX79eNnDUPpj91So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:36:58:72:42:f0:93:0a:8b:f6:bf:08:2b:b4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
        Validity
            Not Before: Nov  4 16:00:32 2025 GMT
            Not After : Nov  5 16:00:32 2025 GMT
        Subject: CN=6dd039bba9368601ee6cea9565abfc2c45c400b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:8b:58:66:1d:20:3e:3e:6a:ff:34:ca:02:
                    b2:07:d1:59:6c:24:16:3c:17:ad:dc:71:5e:33:91:
                    e3:97:d0:73:cb:04:84:9d:56:51:e0:d5:72:6c:e4:
                    f1:96:a8:4a:be:0a:3c:85:8f:cb:2d:72:83:a3:97:
                    d4:0c:1b:ac:29:5f:85:7e:1e:05:1b:ca:7d:dc:04:
                    6b:23:d6:09:78:fd:f3:16:fd:28:c0:94:a6:cc:ba:
                    b8:4b:56:cc:19:24:4e:d4:26:cf:97:4f:3d:4a:2f:
                    e5:46:97:50:bf:9b:b6:31:44:57:04:4f:ac:52:ad:
                    a7:bf:5f:6f:f5:07:fa:f0:34:c4:70:0f:7d:59:79:
                    3f:b7:13:92:66:2b:8c:e1:d9:a2:e6:8b:08:22:90:
                    d6:20:c1:d0:e7:10:ad:19:f7:2e:42:f4:ff:6a:7b:
                    57:5f:83:a7:cb:e6:06:ad:8c:29:c6:3f:d8:4e:82:
                    f5:e4:a6:57:f9:2b:c0:97:44:2d:ae:46:a6:ea:7d:
                    37:5f:11:15:1e:6d:0a:3d:65:dd:c5:b2:dd:61:2b:
                    77:bb:15:9c:e1:4d:bd:ff:96:46:9b:c3:be:2a:5e:
                    fa:20:0c:92:74:ad:6b:31:b4:e9:35:e6:f1:95:f0:
                    0a:33:13:e1:77:3e:91:a0:99:2c:e6:ad:8b:a6:e6:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D0:39:BB:A9:36:86:01:EE:6C:EA:95:65:AB:FC:2C:45:C4:00:B2
            X509v3 Authority Key Identifier:
                keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:cd:56:59:51:e0:a0:6c:6b:65:c3:41:06:46:f1:a4:34:f8:
         2d:de:77:a2:ad:01:2f:70:b4:62:a2:5d:f5:fc:d2:ec:01:45:
         ed:32:30:6c:c1:e7:3a:9c:0e:a2:f1:4b:ad:86:65:31:03:01:
         6b:1a:cf:fb:4e:52:dc:bf:11:b6:fe:e0:b1:ec:b8:85:28:ac:
         3a:d8:e5:3c:38:0d:93:ab:61:eb:e2:50:79:b2:a2:c6:cb:ad:
         d0:3c:30:6b:23:d6:c3:ae:e3:e2:5b:cb:95:7b:9c:a4:06:85:
         42:fc:c1:b1:dd:ff:84:5c:88:c0:8d:48:8d:f3:3a:ae:34:72:
         c4:b1:36:1f:5d:6f:12:66:f3:e7:2e:96:ab:60:81:ac:11:e2:
         bc:bd:7e:10:69:f4:f8:3b:f3:e0:5e:8a:80:e4:37:45:61:72:
         b3:85:77:3b:cc:36:13:ab:a4:50:ca:fe:0a:3e:32:72:ad:cd:
         cd:4f:b9:f7:7f:9b:3a:11:9d:f9:06:b3:e1:c2:e0:54:fc:71:
         a6:10:bd:94:9a:f2:35:ad:15:82:a6:27:4b:81:e1:31:4d:9b:
         51:51:7a:b4:c2:55:3d:4a:9d:d4:4a:b9:ed:b5:5a:09:f2:5e:
         61:11:76:32:8c:9c:75:86:e7:05:b4:8f:7e:75:e5:09:e3:95:
         7a:71:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:23 2025 by rpki-client