Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File:                     GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier:          HaDHR63Zt6lUrSgfgzF6a1uGhf7wVnA2UEIMt6304w0=
Subject key identifier:   2D:14:33:93:0A:AA:FC:09:49:9A:9F:65:95:2F:7A:DE:3A:77:0E:8C
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer:       /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial:       0199FB0EC111B593416B13E5AED24A0B4EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number:          11F8
Signing time:             Sun 19 Oct 2025 06:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:12 +0000
Files and hashes:         1: 97TEoE2zAQxZI3sREml1jxvx638.roa (hash: 88Edm2WqicmrATpjZjEgq8BI+OITrMBwRffegS2fN0U=)
                          2: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: ujz2vyzLbMh4eEmm4/fi4kp/SqXi8lf4pdKik/mflwA=)
                          3: q9SsxYbRIp9e4XDgj9J3VkZ0CgM.roa (hash: vHSPBUTKHvDa0CMaWz0/b1NLlD2hxXAs+Bnl2Vh/Iqc=)
                          4: ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa (hash: M4nmdu5lLDUg1zn32w5JxWA1YF5KBgjR54KBKiRLUIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:c1:11:b5:93:41:6b:13:e5:ae:d2:4a:0b:4e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
        Validity
            Not Before: Oct 19 06:01:12 2025 GMT
            Not After : Oct 20 06:01:12 2025 GMT
        Subject: CN=2d1433930aaafc09499a9f65952f7ade3a770e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:ed:8d:0e:67:52:a3:ce:b6:64:68:86:db:
                    60:84:95:b3:e1:f5:38:bd:29:79:42:da:82:38:09:
                    6a:5c:69:da:5d:b2:b6:b1:63:85:09:64:28:5c:24:
                    e8:5c:4a:25:1d:b7:1b:78:96:89:aa:b0:c3:17:21:
                    f5:05:89:ab:f7:c1:58:d7:20:be:66:88:ac:73:31:
                    32:c5:00:df:45:a8:b9:08:27:57:70:30:43:2e:82:
                    52:d4:77:2b:de:56:86:78:f5:53:5a:b1:99:cb:57:
                    6f:fc:7f:38:b5:8f:25:99:2d:1e:63:48:45:4c:5b:
                    7d:54:47:f4:e2:e5:cf:21:6c:a6:e1:06:94:58:bd:
                    ff:96:6d:ac:18:a3:4e:02:fd:ad:a5:f1:5b:82:bc:
                    f3:d7:74:3b:88:2f:18:2a:d9:86:6d:87:40:af:d5:
                    a9:40:39:be:17:2d:46:86:67:b5:72:09:61:88:b5:
                    d5:8f:72:ee:0d:a9:0f:89:e4:04:ed:cd:36:0c:22:
                    8c:8d:22:21:9b:d3:0c:32:17:e2:1c:d4:69:3f:9d:
                    f1:98:64:1b:6b:e9:41:ff:6a:59:d3:61:0d:96:4b:
                    6a:42:48:88:66:6d:63:25:0d:17:9d:27:d2:73:d6:
                    bf:0c:60:48:ae:c6:d0:8a:8a:6c:d8:3a:30:8d:80:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:14:33:93:0A:AA:FC:09:49:9A:9F:65:95:2F:7A:DE:3A:77:0E:8C
            X509v3 Authority Key Identifier:
                keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:32:de:81:68:dc:5e:51:fb:28:d3:5c:87:d5:86:75:08:fa:
         08:9b:c2:c8:ca:2c:5b:ba:15:2b:8d:0b:22:fa:8c:1c:ee:21:
         9a:dc:f0:ae:01:0c:eb:08:88:49:60:32:38:fe:0a:cb:96:f7:
         2e:f2:ea:9a:5b:0c:40:dd:95:c6:ed:35:c2:28:72:b9:24:dc:
         e6:09:6e:15:ea:9b:b5:a9:b7:ec:88:2a:eb:58:bc:e4:20:41:
         64:6c:95:dd:6d:04:6d:6c:40:12:e5:ca:0e:26:5a:bb:eb:44:
         fb:18:bb:bb:85:49:f1:3b:6d:04:99:1d:68:f7:22:3a:e1:8c:
         1a:ac:65:28:55:3d:d0:d6:1b:55:d7:27:6f:84:a4:bb:73:c8:
         13:76:0a:5d:8c:13:9f:6f:d3:f4:eb:92:70:a4:5b:00:29:cf:
         de:67:e2:c2:bf:5f:38:2e:e7:65:93:14:f6:f2:37:22:cf:74:
         f8:d2:78:ac:39:34:ef:a7:4a:47:ad:76:6f:18:09:20:1c:b4:
         fa:63:32:60:50:9d:b1:b4:c1:25:3b:10:c7:3f:6f:06:1b:b3:
         01:d3:74:65:3e:9b:75:00:8b:fe:39:7a:e7:02:25:4f:03:c8:
         27:28:4f:17:1d:71:5d:e5:09:bb:71:32:1a:9e:8e:28:80:cd:
         a5:0e:15:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DsERtZNBaxPlrtJKC07xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZmI1NmFkYzkwNzFkNWU5ZmRhMmI2Njk0MzhiOTJiZjg2
M2U1OGYwHhcNMjUxMDE5MDYwMTEyWhcNMjUxMDIwMDYwMTEyWjAzMTEwLwYDVQQD
EygyZDE0MzM5MzBhYWFmYzA5NDk5YTlmNjU5NTJmN2FkZTNhNzcwZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5jtjQ5nUqPOtmRohttghJWz4fU4
vSl5QtqCOAlqXGnaXbK2sWOFCWQoXCToXEolHbcbeJaJqrDDFyH1BYmr98FY1yC+
ZoisczEyxQDfRai5CCdXcDBDLoJS1Hcr3laGePVTWrGZy1dv/H84tY8lmS0eY0hF
TFt9VEf04uXPIWym4QaUWL3/lm2sGKNOAv2tpfFbgrzz13Q7iC8YKtmGbYdAr9Wp
QDm+Fy1Ghme1cglhiLXVj3LuDakPieQE7c02DCKMjSIhm9MMMhfiHNRpP53xmGQb
a+lB/2pZ02ENlktqQkiIZm1jJQ0XnSfSc9a/DGBIrsbQiops2DowjYAqiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0UM5MKqvwJSZqfZZUvet46dw6MMB8GA1UdIwQY
MBaAFBn7Vq3JBx1en9orZpQ4uSv4Y+WPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUt
NjNlZWJlMDMyNWVjLzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUtNjNlZWJlMDMyNWVj
LzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTLegWjc
XlH7KNNch9WGdQj6CJvCyMosW7oVK40LIvqMHO4hmtzwrgEM6wiISWAyOP4Ky5b3
LvLqmlsMQN2Vxu01wihyuSTc5gluFeqbtam37Igq61i85CBBZGyV3W0EbWxAEuXK
DiZau+tE+xi7u4VJ8TttBJkdaPciOuGMGqxlKFU90NYbVdcnb4Sku3PIE3YKXYwT
n2/T9OuScKRbACnP3mfiwr9fOC7nZZMU9vI3Is90+NJ4rDk076dKR612bxgJIBy0
+mMyYFCdsbTBJTsQxz9vBhuzAdN0ZT6bdQCL/jl65wIlTwPIJyhPFx1xXeUJu3Ey
Gp6OKIDNpQ4V+A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:51 2025 by rpki-client