Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
File:                     GxubyMfg_Ee_iwpXLRpXLWppa7c.mft (raw, json)
Hash identifier:          07hQBRIYYoQYTbzfYNRuQXKr/N5E/ECGbc5aZpyctNE=
Subject key identifier:   14:F3:01:C4:25:AB:26:95:40:22:B1:32:F1:F4:86:BA:01:82:CE:E7
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Certificate issuer:       /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial:       0199FC8F5DA0DEAEA9749903BF9137C1486C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
Manifest number:          0F07
Signing time:             Sun 19 Oct 2025 13:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:18 +0000
Files and hashes:         1: GxubyMfg_Ee_iwpXLRpXLWppa7c.crl (hash: Rhna0zYyxGkxAWxr+UHGy55DlVRo6nORiz2VptB7Wgw=)
                          2: xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa (hash: kcCBBOjP/JTwKy7Io6Y4tXVkBszU8YzDmmO1xZCayZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:5d:a0:de:ae:a9:74:99:03:bf:91:37:c1:48:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
        Validity
            Not Before: Oct 19 13:01:18 2025 GMT
            Not After : Oct 20 13:01:18 2025 GMT
        Subject: CN=14f301c425ab26954022b132f1f486ba0182cee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:6d:14:6a:af:af:15:69:c1:97:e7:f9:bc:
                    34:06:03:19:58:0f:07:a0:13:7b:78:cd:f0:e4:5b:
                    01:a1:71:07:60:ce:71:2c:70:3e:3b:3f:f6:d4:d0:
                    11:1d:02:d9:2b:61:31:98:50:0f:d3:ed:ea:8b:0d:
                    3f:c1:92:ef:95:34:3e:96:a6:42:d7:aa:ad:a0:5e:
                    16:7e:cc:f1:96:b6:55:e7:ea:08:be:39:01:a3:80:
                    09:26:9d:c6:ea:ef:b7:59:9b:ca:5f:bb:27:38:ce:
                    c1:1b:e8:69:b5:22:36:80:6c:3c:88:47:95:86:76:
                    77:6d:71:43:56:b8:36:0e:85:d0:1d:8b:bf:d9:40:
                    32:c3:a8:c5:13:d5:3f:a7:6a:7c:20:60:c5:68:77:
                    8a:f1:36:2d:96:50:70:09:b1:c4:a8:0d:99:1c:3a:
                    bf:85:e5:28:ca:72:4c:aa:f7:d0:dc:7c:6a:1d:6f:
                    69:fe:b8:a2:ca:b4:11:a5:ac:53:89:08:73:be:b4:
                    c3:a9:8b:59:47:0a:9e:b1:f1:2d:0e:39:6a:70:74:
                    15:1d:ae:42:bf:fb:5b:fd:ce:2d:a6:fd:57:e5:6e:
                    6c:de:5e:7d:91:2d:77:b4:af:b5:22:75:9c:39:d6:
                    28:5b:9b:d1:87:50:18:8d:97:0d:a8:47:93:e7:c9:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F3:01:C4:25:AB:26:95:40:22:B1:32:F1:F4:86:BA:01:82:CE:E7
            X509v3 Authority Key Identifier:
                keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f2:59:00:36:1a:c5:ac:34:f8:38:e4:0e:3c:b0:11:15:91:
         dc:9a:d0:3d:6d:56:7d:f6:4d:83:fc:77:4b:06:2c:84:9f:37:
         01:7f:7f:c7:5e:a6:2e:5c:20:4b:28:68:14:a0:91:a1:1a:79:
         7b:31:ab:f5:f1:55:be:ac:29:ee:91:61:0c:e5:49:b6:e1:6e:
         d1:48:8a:fa:2a:32:ea:7f:8f:09:51:f7:2e:7d:64:86:e5:86:
         d5:18:2e:ee:da:79:1d:57:cd:85:67:57:ea:06:cb:73:b5:9a:
         42:8c:45:38:e9:d5:96:c3:a7:43:a6:9d:72:1f:bb:b6:93:d7:
         72:6c:f9:6e:e4:14:e6:50:ea:c6:e1:61:e6:8c:0d:1b:f7:b9:
         66:c8:71:87:be:15:44:26:19:08:dd:c1:b0:6f:8e:bb:08:b8:
         b7:fc:64:6a:e0:cc:ba:e5:e8:19:58:dc:98:6c:55:13:3a:ac:
         ee:30:c3:e3:78:a6:61:03:6c:c5:0e:6b:af:22:e0:1c:9d:4d:
         b9:50:51:08:0c:5e:b5:f1:97:52:29:06:58:29:17:7b:60:a7:
         14:62:39:11:a6:d5:68:26:6f:eb:37:ff:25:aa:83:7d:00:f0:
         6e:9e:30:a5:d1:ab:ae:b4:68:5e:2a:1b:15:70:c9:5f:82:db:
         7b:aa:b8:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j12g3q6pdJkDv5E3wUhsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMWI5YmM4YzdlMGZjNDdiZjhiMGE1NzJkMWE1NzJkNmE2
OTZiYjcwHhcNMjUxMDE5MTMwMTE4WhcNMjUxMDIwMTMwMTE4WjAzMTEwLwYDVQQD
EygxNGYzMDFjNDI1YWIyNjk1NDAyMmIxMzJmMWY0ODZiYTAxODJjZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu09tFGqvrxVpwZfn+bw0BgMZWA8H
oBN7eM3w5FsBoXEHYM5xLHA+Oz/21NARHQLZK2ExmFAP0+3qiw0/wZLvlTQ+lqZC
16qtoF4WfszxlrZV5+oIvjkBo4AJJp3G6u+3WZvKX7snOM7BG+hptSI2gGw8iEeV
hnZ3bXFDVrg2DoXQHYu/2UAyw6jFE9U/p2p8IGDFaHeK8TYtllBwCbHEqA2ZHDq/
heUoynJMqvfQ3HxqHW9p/riiyrQRpaxTiQhzvrTDqYtZRwqesfEtDjlqcHQVHa5C
v/tb/c4tpv1X5W5s3l59kS13tK+1InWcOdYoW5vRh1AYjZcNqEeT58lwywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTzAcQlqyaVQCKxMvH0hroBgs7nMB8GA1UdIwQY
MBaAFBsbm8jH4PxHv4sKVy0aVy1qaWu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80ZDJhOWYtNmY3OC00Y2M2LTlhZDYt
MGY2Yjg0NjhjNzlkLzEvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80ZDJhOWYtNmY3OC00Y2M2LTlhZDYtMGY2Yjg0NjhjNzlk
LzEvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/JZADYa
xaw0+DjkDjywERWR3JrQPW1WffZNg/x3SwYshJ83AX9/x16mLlwgSyhoFKCRoRp5
ezGr9fFVvqwp7pFhDOVJtuFu0UiK+ioy6n+PCVH3Ln1khuWG1Rgu7tp5HVfNhWdX
6gbLc7WaQoxFOOnVlsOnQ6adch+7tpPXcmz5buQU5lDqxuFh5owNG/e5Zshxh74V
RCYZCN3BsG+Ouwi4t/xkauDMuuXoGVjcmGxVEzqs7jDD43imYQNsxQ5rryLgHJ1N
uVBRCAxetfGXUikGWCkXe2CnFGI5EabVaCZv6zf/JaqDfQDwbp4wpdGrrrRoXiob
FXDJX4Lbe6q4hg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:44 2025 by rpki-client