Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File:                     G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier:          uqubQiAUto2ZaoRfoznHQ7//7MiuVZJyrdR77UfjSA8=
Subject key identifier:   37:13:9E:C6:59:1C:43:B3:14:68:E4:0E:32:01:B3:10:F2:9B:C6:93
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer:       /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial:       019A515052DDB2D0611D50A23C407CB2C22A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number:          0B8D
Signing time:             Wed 05 Nov 2025 00:00:09 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:09 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:09 +0000
Files and hashes:         1: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: ygsJffL/g8oWpPv0XOZq5bJZSrN8eyQWUuj6p2GXIwo=)
                          2: ogliIW3uJqaM5LS-fzkMZKt_cLk.roa (hash: LLZA+4CzPtqrtq7hIsuRZwdNW4zECVbIb6kWURR2Rw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:52:dd:b2:d0:61:1d:50:a2:3c:40:7c:b2:c2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
        Validity
            Not Before: Nov  5 00:00:09 2025 GMT
            Not After : Nov  6 00:00:09 2025 GMT
        Subject: CN=37139ec6591c43b31468e40e3201b310f29bc693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:2a:9b:af:89:29:04:f2:2d:05:f3:a8:00:
                    7f:81:9b:bf:23:f9:28:44:0e:dc:57:11:3b:b8:31:
                    bf:91:c5:85:1c:ff:e0:15:4d:1d:68:e8:00:63:14:
                    2b:8e:94:a2:8b:95:99:14:ad:c4:82:d9:2f:42:ac:
                    15:e5:2e:a7:55:c8:df:b0:e4:05:22:35:4e:31:c4:
                    8a:f2:f5:51:48:0e:cc:1d:39:da:f4:d1:2e:f0:64:
                    8b:5a:d4:cd:9d:63:54:92:a1:db:a4:99:ed:8f:8a:
                    66:22:b2:db:fe:b3:87:33:4d:fe:fd:50:48:49:0f:
                    de:6f:26:eb:31:76:1e:c7:46:26:8b:51:32:9f:3f:
                    bb:ba:50:1b:2c:8c:26:61:e4:c4:4d:97:ae:c7:36:
                    e1:8b:cf:8d:36:29:04:24:9c:48:09:e7:9b:91:cd:
                    d8:51:e6:2a:bc:36:5b:04:e5:31:79:55:85:1d:ba:
                    57:d3:18:9e:75:8c:6b:21:f7:17:39:6e:15:ed:15:
                    26:49:4d:a6:b7:cd:cc:a6:98:18:14:11:84:a6:6f:
                    bf:c1:bc:b3:a4:4c:84:9d:4e:39:9e:dc:62:16:75:
                    89:6c:f6:83:41:78:d2:77:3f:29:e4:4a:19:0c:5d:
                    83:73:ed:57:73:4b:d1:c3:73:2b:d4:e5:3d:b9:f0:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:13:9E:C6:59:1C:43:B3:14:68:E4:0E:32:01:B3:10:F2:9B:C6:93
            X509v3 Authority Key Identifier:
                keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:cd:b5:d7:f2:27:42:da:dd:1e:7c:57:5c:46:3b:c6:8a:89:
         4d:57:3b:04:d6:18:04:0d:2e:a8:a7:7c:3b:71:7a:5a:cd:73:
         52:d6:90:58:e4:a3:f8:22:17:ec:13:19:a8:61:75:26:c5:a0:
         ce:f7:11:42:34:2f:27:b7:b1:ad:c3:1d:48:b0:34:c3:f9:c3:
         a5:a2:48:27:f3:a4:36:4b:2d:af:c0:24:34:5f:ad:c6:72:86:
         a6:56:ed:22:bc:ae:d8:27:8e:a3:49:b2:44:52:97:f9:08:9a:
         31:3b:9f:71:85:4c:f8:11:52:4a:d2:0d:da:5e:dc:0f:e9:8f:
         a0:b9:ee:f8:ef:00:dd:11:52:d6:ff:a5:19:8c:e3:46:cd:26:
         19:d0:b5:92:c0:b0:88:da:70:a7:dd:0a:e3:71:14:a7:45:c6:
         17:c5:b5:ec:70:89:15:73:ec:29:ba:8d:21:f4:28:21:72:0a:
         f3:fa:32:72:b1:fe:cb:f3:c5:b6:ea:d2:ae:28:4e:c0:48:f0:
         6f:b3:c3:ba:db:ab:64:84:84:0c:50:ad:7a:d2:be:e7:c7:89:
         23:89:f8:6e:30:b8:19:c5:75:c2:af:25:30:db:09:13:96:c5:
         36:82:db:5d:ea:6f:71:3c:4b:a8:33:10:d8:24:29:ab:22:49:
         99:48:d2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:32:36 2025 by rpki-client