Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
File:                     GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json)
Hash identifier:          cOiuOI9XkY8N4DJpQA2sDTOLRh7OCRH0gi/GTzAPffo=
Subject key identifier:   62:9A:D8:D2:89:A3:1B:E9:6D:00:C1:F2:20:4B:59:55:DC:6F:46:55
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       0199FBB372D0DF2CC4383FB6308A0CE2A40D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
Manifest number:          088C
Signing time:             Sun 19 Oct 2025 09:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:05 +0000
Files and hashes:         1: 3NMfZNisec-vqD22vXNPki2ntVE.roa (hash: WaHglmLSlZJ16poYzd5QuYA7KNAkhTFS78CpF4RUX3I=)
                          2: BjnyGiZGjHiQKk_KiK2yHf9VV5E.roa (hash: yPmoHixaBGhSn0ytp1vI4gHgRuEEubgW3Qlg0aIFvLw=)
                          3: ByxFjr3Toz51tTrCgyJcZ9ROTDc.roa (hash: MC65BQj3HwbXh+vS6odPDeaoBTY9byCzkoFUHQFoK8Q=)
                          4: DwaqxzmRSIx0-STl7nKTGpQzuOY.roa (hash: MZmP0bhKRokke3K++mx2NwZxuOVWVJCAYgwxbhXA9iI=)
                          5: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: cfb6ruutldX1YMKDsQjEtY9L1zkFjvIm2/MS61d8qVo=)
                          6: I4lk-K4vzADVCX6yUHNgiwhmEpI.roa (hash: GGA95oFZZ8h6ELEvN/tBAFl4TyZuEFRFl/1TZUQ+VFk=)
                          7: MqSMr4SHl_2pRnKp2kxe3xf9us8.roa (hash: 35jRHvNXfyo825+J2hBOdYQpQKTNSs5hrfo5icVPFJY=)
                          8: OjNkZBsD7_7ya1gvmoZ6C9IcKqA.roa (hash: QIsvbi1JaiVHwDu3LNY+DC4jKpBlQxMAMFNWUB09hyg=)
                          9: PB1BeL4uZ3QF6gY3DHiXfq0456E.roa (hash: yBSu3OCxbV3AaOMypdJ28XmEmDKMRu8A8am1l/di17A=)
                          10: SStPLeYhuVW8ht29Rl4UMKZeE8Y.roa (hash: oIaG74/+nV2sdh79tye5X0ZT2qnqxj3Pq9M6q6XHKAw=)
                          11: UEFTphc5r_X08VC4KXcQxiS2shg.roa (hash: 7dECbcqaLL4E/mWcxOkfhjwmM0MPjpjuitKlI7h4KmU=)
                          12: UX1FG7BPxLN_6ufljGY3tuBoI2k.roa (hash: 2XU8mmir09zmdANIc3P91NSucr1JlTpLnKmXeZUmmHU=)
                          13: XLUh0v_eWb4ByZlyr_8IFlpagYM.roa (hash: OZc6IBFQYjTFaecuhGPDb6Fno7u24w/UXmkci73bi8k=)
                          14: c_ipsLRzEgE5DXpkiVFIk32gy4w.roa (hash: KkfKem9M1oAl2JCMI+RrdXiWdDVk/LRejyZbOohwDvU=)
                          15: d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa (hash: 0RwztfGXYXDxIIQZaqPOXqxbSmC1TrJiJ1GXH53HmB0=)
                          16: izylkdHb8K1XiexJr07bxHzS70o.roa (hash: +WAoXiTTcbRjvuFJ+mdToEXjYNYtqJBIbb39TwPcmHE=)
                          17: qR3RdSbRRb7JtoPItdAFVcmOfm4.roa (hash: 0YUFu35h0q7ZeWw1RWxv5JvuYja078PVd4Tt+tY/B3M=)
                          18: t3YGdwn4XgpiLvqOT8pcW7Y62YU.roa (hash: 2/dq9okwdAS6VebH9nouSwmwpygS4x1CkX0kF3Wm31g=)
                          19: tlIT9EE8YpMp8nWSniI3miatB10.roa (hash: hMUJkDEHVtxIORugCsH16m3DT06lYDeH6qg/65YvGew=)
                          20: yTtcVU9ChNydH2mKs4iN5Ah2HPs.roa (hash: ro/KjPOdv9iitLmrbKrmD5i/eJZ/0hcJVF+hmNRnyAs=)
                          21: zl_FIWsQsU9TjHfL29rvbfo1pm8.roa (hash: plWBBKMU1eDxoN+f9JQHw2+baxWKk/tH9YtUnkFUaOw=)
                          22: zowYpDvX28H799XOtT_VcDDQ5qw.roa (hash: OCaDapxirUyOCbcAZjHU0KKvPPI3Jq1Fl4Zm8vwBoJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:72:d0:df:2c:c4:38:3f:b6:30:8a:0c:e2:a4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Oct 19 09:01:05 2025 GMT
            Not After : Oct 20 09:01:05 2025 GMT
        Subject: CN=629ad8d289a31be96d00c1f2204b5955dc6f4655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:d8:09:e7:81:c5:a0:6d:24:2c:c5:98:f3:
                    78:ab:3b:48:90:1e:10:40:69:5f:b7:38:d7:b0:a7:
                    28:3f:31:2e:24:b4:d1:9b:f1:9c:8f:d0:b2:b5:b6:
                    b0:07:0f:60:3f:a1:57:3f:cd:8e:55:65:da:c6:24:
                    d6:6e:f2:3b:f1:34:4a:cf:d8:f5:99:80:cb:3d:ab:
                    12:6e:8b:d9:54:48:fc:b8:67:93:22:03:e0:f6:15:
                    66:ce:42:0e:df:ba:b6:48:c1:53:ff:94:7b:69:61:
                    5f:1b:2d:9a:5a:b7:b7:bb:38:44:99:39:d9:74:49:
                    69:4e:62:9f:4b:6d:0f:75:47:82:a8:dc:7c:33:1a:
                    7d:80:b9:14:f6:97:cc:c6:a4:de:28:2d:79:3e:73:
                    fb:f3:60:26:2a:2d:f2:12:32:f9:9b:9c:26:48:09:
                    46:f6:69:2e:0d:b9:da:44:5d:3d:94:ca:23:ae:b9:
                    67:0d:3c:67:79:bb:07:50:cf:67:b1:8f:bc:26:a7:
                    12:6f:92:81:dd:b3:b9:99:2d:8b:dc:ab:ee:fa:82:
                    95:f8:0b:6c:cc:fe:be:95:83:36:e3:9d:a6:f5:83:
                    a5:11:ff:31:cb:80:99:c1:c0:51:30:5e:00:1f:19:
                    57:c2:17:33:03:74:5e:1f:44:15:5e:49:32:a4:2a:
                    81:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9A:D8:D2:89:A3:1B:E9:6D:00:C1:F2:20:4B:59:55:DC:6F:46:55
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:bb:7d:05:85:21:29:fe:0c:dc:76:34:1e:83:81:b8:c8:
         51:51:89:59:f6:69:17:45:71:37:74:1e:b3:f3:68:4b:ea:8e:
         ba:4e:40:b9:4d:1d:35:8c:4a:ec:3a:73:b1:a8:f4:9f:ed:45:
         e0:d2:6b:6b:f5:db:b1:f0:08:95:e6:30:c8:65:31:a4:61:b5:
         48:f7:51:1f:53:f7:2e:54:8c:86:76:1a:dc:58:a3:cc:2c:07:
         0f:98:69:d1:1d:03:8f:6f:f5:e4:5e:f0:87:8b:e3:39:6d:6f:
         13:42:aa:df:d5:1b:72:92:ee:7e:59:46:93:e1:f7:68:fb:a8:
         8e:c6:58:d5:24:09:ca:50:ac:47:a9:a8:d0:cd:c0:19:c8:c4:
         7a:c9:75:62:58:a0:25:cb:97:2a:bb:6b:ab:76:4d:72:45:63:
         ff:83:6c:27:d3:9e:5a:16:83:dd:26:26:23:a8:08:39:1e:f1:
         40:17:f8:94:ee:cd:36:3c:3f:a4:15:1b:4c:3e:35:29:05:48:
         97:86:33:df:c7:25:1d:2b:25:49:84:b7:74:42:94:7c:75:76:
         80:4f:a0:86:90:22:0d:18:48:ce:fb:71:67:08:85:e2:b5:d6:
         6d:ca:b5:59:18:de:08:72:d9:7c:e5:49:44:e1:b2:af:7a:43:
         c6:43:4a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:52 2025 by rpki-client