Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
File:                     gPI_QpUEIDwYlzeiB05T8u_GT8c.mft (raw, json)
Hash identifier:          NvRvD7KLTVUVX/Ct8+07+CALpyEAc6X2OOOfoCdBo5A=
Subject key identifier:   CB:86:49:28:16:6D:3A:1F:09:80:AE:35:F1:1A:65:33:7D:47:FE:2C
Authority key identifier: 80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
Certificate issuer:       /CN=80f23f429504203c189737a2074e53f2efc64fc7
Certificate serial:       0199FC21A6F48732619574278F699ED072DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
Manifest number:          0187
Signing time:             Sun 19 Oct 2025 11:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:27 +0000
Files and hashes:         1: 5v0hUEBxgEJ_Wz85dg0QD5wiMr4.roa (hash: AOgJD9izw5WZn+hE7i6Z6aoy52p5jFj9e/Qz0bGyFWk=)
                          2: gPI_QpUEIDwYlzeiB05T8u_GT8c.crl (hash: 0DOMGFGu/kuTqZBKME1pUaOh4lb9mdatiOUynjyjeyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:a6:f4:87:32:61:95:74:27:8f:69:9e:d0:72:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f23f429504203c189737a2074e53f2efc64fc7
        Validity
            Not Before: Oct 19 11:01:27 2025 GMT
            Not After : Oct 20 11:01:27 2025 GMT
        Subject: CN=cb864928166d3a1f0980ae35f11a65337d47fe2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:d3:49:2d:98:5d:30:76:b1:1a:8f:0c:dd:
                    cb:64:5d:7b:d2:ad:21:83:55:4a:c4:f7:eb:e5:b1:
                    82:96:a4:fd:b9:37:06:1f:2f:f7:e5:c9:5f:66:4c:
                    d1:79:1b:75:4a:d9:fa:67:be:1f:f6:dc:0c:04:13:
                    c7:e4:0b:d3:4d:2b:84:32:13:16:94:b2:2f:d3:cf:
                    2f:06:29:bb:bb:10:2f:6e:2b:34:32:80:a4:f0:29:
                    2f:c1:f2:ef:f5:a6:92:34:f6:46:c4:59:6e:0c:f6:
                    c1:a7:11:df:c0:a3:da:28:5e:09:3c:38:f1:95:48:
                    9d:80:b4:83:ff:04:db:fb:5c:05:b2:ae:65:26:d3:
                    26:7c:a0:47:3e:44:7a:28:7b:4e:62:9a:9f:b4:53:
                    23:70:e8:31:f1:69:01:cc:4e:5c:29:78:8a:1f:b5:
                    d0:97:f6:68:51:0b:de:ed:a7:aa:d1:9d:94:38:0d:
                    f7:18:e7:c1:61:bd:b8:1c:d3:5d:62:a2:31:a2:93:
                    bb:ee:e0:cb:98:16:31:04:34:5e:da:81:38:05:e9:
                    ca:34:5e:5f:84:4d:f0:b9:35:0a:6d:a4:4d:1d:20:
                    0e:17:19:57:ca:ae:5a:7f:ac:55:ca:70:32:aa:75:
                    a4:bd:ee:49:13:aa:32:89:ee:fa:9b:e8:50:d1:b3:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:86:49:28:16:6D:3A:1F:09:80:AE:35:F1:1A:65:33:7D:47:FE:2C
            X509v3 Authority Key Identifier:
                keyid:80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:54:94:47:f0:af:2e:63:b3:10:c0:44:b3:82:9b:45:39:16:
         cd:c1:c2:f2:77:5c:dc:5b:58:29:bf:e6:37:6e:a3:90:0a:73:
         dd:66:34:34:02:b4:20:ad:25:fe:15:f8:3e:e7:56:ea:47:f1:
         92:c9:ec:ac:13:44:d0:cc:88:c6:6b:e5:d8:60:47:29:2c:cf:
         e0:ac:4f:6b:2e:bb:28:f8:b9:af:f6:71:a2:ae:9d:d1:e8:d4:
         82:c5:2d:d5:4b:6e:0d:1c:45:64:e4:3d:1d:0c:44:07:4c:ed:
         8d:34:ac:d4:fc:d6:84:f6:92:fe:ec:63:55:fc:a6:88:3b:6e:
         bb:c2:1b:fe:11:1f:54:e0:7a:a4:03:3c:66:ae:1c:1a:19:fe:
         d9:1a:4c:62:4f:00:20:8c:15:b5:13:e0:b2:f1:9b:4c:c3:08:
         9e:f1:2c:a3:69:94:4b:2a:6b:5a:c6:be:83:9e:0e:ca:73:38:
         ba:cc:49:c8:32:0e:f7:9d:64:c5:6e:6d:41:72:10:67:11:58:
         b4:3c:90:2e:c1:5e:76:fe:9e:2a:4b:5e:98:d0:08:ee:dc:5d:
         45:4f:c7:aa:00:da:a2:a5:d5:c5:f9:a4:2e:ea:32:a1:de:ff:
         5e:6a:43:90:f0:cc:76:5b:58:c7:cc:ed:88:c8:c6:be:5e:45:
         e7:61:ca:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Iab0hzJhlXQnj2me0HLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjIzZjQyOTUwNDIwM2MxODk3MzdhMjA3NGU1M2YyZWZj
NjRmYzcwHhcNMjUxMDE5MTEwMTI3WhcNMjUxMDIwMTEwMTI3WjAzMTEwLwYDVQQD
EyhjYjg2NDkyODE2NmQzYTFmMDk4MGFlMzVmMTFhNjUzMzdkNDdmZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxnTSS2YXTB2sRqPDN3LZF170q0h
g1VKxPfr5bGClqT9uTcGHy/35clfZkzReRt1Stn6Z74f9twMBBPH5AvTTSuEMhMW
lLIv088vBim7uxAvbis0MoCk8CkvwfLv9aaSNPZGxFluDPbBpxHfwKPaKF4JPDjx
lUidgLSD/wTb+1wFsq5lJtMmfKBHPkR6KHtOYpqftFMjcOgx8WkBzE5cKXiKH7XQ
l/ZoUQve7aeq0Z2UOA33GOfBYb24HNNdYqIxopO77uDLmBYxBDRe2oE4BenKNF5f
hE3wuTUKbaRNHSAOFxlXyq5af6xVynAyqnWkve5JE6oyie76m+hQ0bPuyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuGSSgWbTofCYCuNfEaZTN9R/4sMB8GA1UdIwQY
MBaAFIDyP0KVBCA8GJc3ogdOU/Lvxk/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNzljYmMtODQ4ZC00ZjNlLThkYzEt
ZDUxMTQxY2NkYzA2LzEvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mNzljYmMtODQ4ZC00ZjNlLThkYzEtZDUxMTQxY2NkYzA2
LzEvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFSUR/Cv
LmOzEMBEs4KbRTkWzcHC8ndc3FtYKb/mN26jkApz3WY0NAK0IK0l/hX4PudW6kfx
ksnsrBNE0MyIxmvl2GBHKSzP4KxPay67KPi5r/Zxoq6d0ejUgsUt1UtuDRxFZOQ9
HQxEB0ztjTSs1PzWhPaS/uxjVfymiDtuu8Ib/hEfVOB6pAM8Zq4cGhn+2RpMYk8A
IIwVtRPgsvGbTMMInvEso2mUSyprWsa+g54OynM4usxJyDIO951kxW5tQXIQZxFY
tDyQLsFedv6eKktemNAI7txdRU/HqgDaoqXVxfmkLuoyod7/XmpDkPDMdltYx8zt
iMjGvl5F52HKsQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:44 2025 by rpki-client