Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          aq4ptOH6HZTjl0eHYFJDpYPKOd5aHjYBs3Q2wjSbEzg=
Subject key identifier:   F4:9A:92:91:34:E8:57:E0:DB:B3:91:26:53:3F:25:CC:8B:E1:CB:5E
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       0199FC8F8D81CB8B3B09D00951F9830BCF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 13:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:30 +0000
Files and hashes:         1: 03PqHmjkj4TD2ylDKAOumX_8ZTA.roa (hash: x+gVojJiPW6JgGHksggk6Pxvk6Hei1FVA2Qg8c4io0A=)
                          2: F9dWkDI-kpGgHo1RGxktanl_gRQ.roa (hash: BuoIxKvYOd7Wk6s+uxgqf+pVlc2a+8mJGV3BltAm2us=)
                          3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: m+ue+Qlx1qq6yJsmg7cPjVH5MKqdO3P1BY18QVKIR7g=)
                          4: eWcWfNZ-EfWW-NGvXQCC85ntpH8.roa (hash: JnQ17QGfxQtAemBJMFLXpPFmY/ueJsW7rAduSoORn4I=)
                          5: qa59xb1800lClBGKgPJD3m5Rw8s.roa (hash: g552CxuAT1A0kuubtT8ih3j4BuCostjRts289tICv1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:8d:81:cb:8b:3b:09:d0:09:51:f9:83:0b:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: Oct 19 13:01:30 2025 GMT
            Not After : Oct 20 13:01:30 2025 GMT
        Subject: CN=f49a929134e857e0dbb39126533f25cc8be1cb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:0b:ac:99:06:28:2b:16:55:b9:0a:8a:ea:
                    47:bf:a7:26:b3:fe:15:6e:44:c8:12:28:6b:d0:ee:
                    7d:b9:36:55:48:ac:aa:aa:84:fb:b8:34:07:47:3e:
                    e7:c4:62:be:f7:62:cb:76:06:6c:70:41:df:bc:7f:
                    09:c1:a6:e9:64:69:84:a7:3c:45:a6:a0:99:f3:fb:
                    f4:d9:27:46:fb:bf:d0:d9:dd:5f:16:09:1b:64:99:
                    52:c8:44:7d:47:8e:45:2f:58:00:32:49:31:d2:a0:
                    f9:a5:fa:d6:3f:59:51:4f:2d:17:8d:6c:49:39:7d:
                    06:8f:8a:9d:71:9b:c8:1a:cd:d2:0a:a2:d1:eb:7c:
                    32:71:60:17:db:ae:03:af:5f:ee:b6:b6:ce:4d:be:
                    0d:72:36:3e:80:58:d7:bb:a5:f0:2a:b8:78:77:f8:
                    7e:52:25:3b:7b:ed:aa:fe:f9:20:65:c3:c1:bb:ac:
                    cf:83:e2:df:11:8c:78:d7:53:d8:4d:6c:16:ad:5e:
                    d4:c2:11:0a:4d:7a:40:41:8a:25:c1:ed:2e:cd:1d:
                    f0:bd:58:8a:c5:d1:f1:23:a3:92:7e:1d:df:8b:95:
                    71:fe:61:aa:4b:4c:58:f4:35:23:6d:8f:71:76:d1:
                    78:c1:1a:be:7a:05:c3:81:29:88:3e:2c:13:16:f7:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9A:92:91:34:E8:57:E0:DB:B3:91:26:53:3F:25:CC:8B:E1:CB:5E
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:6c:9b:a5:bf:e7:e0:d5:2c:9a:26:94:37:3b:cd:79:f9:
         53:cb:ad:54:60:7a:04:54:26:92:dd:2d:e3:98:8c:c9:39:99:
         bc:61:ff:ff:e7:5c:27:c0:fc:57:d3:66:bf:50:49:7a:32:1b:
         35:55:f6:0a:86:e7:a4:ec:a3:48:00:4f:5b:eb:7a:53:c8:f7:
         67:60:d5:11:81:ed:d8:f9:87:1c:b5:77:bc:a8:02:e1:8f:b6:
         93:8e:85:e5:0b:af:fd:6a:b0:6f:44:4e:6c:07:eb:ab:1f:2b:
         6b:ed:56:5d:9f:38:0b:53:d5:05:86:09:33:cf:2c:ee:de:dc:
         3f:e0:7b:e4:13:5a:85:63:d9:a0:46:a4:45:b9:c6:c8:01:c8:
         c2:8e:02:90:19:de:20:44:08:fd:73:9d:8e:91:b8:3f:52:d0:
         db:76:30:68:b9:34:a3:13:23:bd:ab:cf:9d:cc:2c:73:60:25:
         31:39:b3:3b:6d:18:9d:19:4c:b8:a2:6a:ff:6d:40:36:f8:cc:
         cb:5d:33:e8:39:82:35:03:fe:c7:fd:98:1e:0e:69:fc:8c:97:
         0a:12:cd:05:8b:0d:14:1e:85:71:c0:9a:54:d4:ac:78:2a:cf:
         8b:95:03:d3:28:a6:ab:23:7d:56:0a:30:00:1a:80:c0:81:90:
         27:8b:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:12 2025 by rpki-client