Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
File:                     GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft (raw, json)
Hash identifier:          9tuMVhVR4aBUVUx2JSDdXFMv/8OitagIQYj71Haf//E=
Subject key identifier:   24:D9:9F:E0:5F:A2:6C:7C:A9:E8:F1:82:9F:3C:12:FC:97:67:EF:E5
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Certificate issuer:       /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial:       0198D6609664B30543FC7D17BF14B928EEE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:01:50 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:50 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:50 +0000
Files and hashes:         1: FpuR0y9APVvFEzZNqfMzupE3ra4.roa (hash: GpOZZgRFNoAGIu1wspT0GzMUn0LG62S5x4bgRa8l/A4=)
                          2: GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl (hash: 41AeTJ1PJ9qWnPz4J2zq+/IXt8fAzzKOSeqLGYYznJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:96:64:b3:05:43:fc:7d:17:bf:14:b9:28:ee:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
        Validity
            Not Before: Aug 23 10:01:50 2025 GMT
            Not After : Aug 24 10:01:50 2025 GMT
        Subject: CN=24d99fe05fa26c7ca9e8f1829f3c12fc9767efe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:9f:be:f3:28:e4:53:1b:45:e3:02:6d:cf:
                    c0:d3:89:a1:67:f4:be:07:72:13:2a:ad:4e:71:6d:
                    f1:90:4d:fa:6c:c7:b4:29:bc:c5:8e:bd:47:a7:7f:
                    41:aa:da:41:ad:54:9f:cd:c2:5c:2c:1f:9c:31:b5:
                    df:d7:54:41:87:28:e2:5e:aa:ce:27:c7:7f:39:81:
                    8c:4d:7f:9d:9e:cb:6b:31:97:cd:40:9c:80:99:76:
                    a2:0d:d8:bf:2c:7d:a3:2d:1e:26:7c:2e:ea:4c:6f:
                    b4:a0:77:6d:13:b5:ef:7f:2c:0e:ff:0c:f1:1c:d4:
                    c9:5c:43:25:61:5f:00:d8:68:3b:e6:ed:39:dc:9a:
                    33:c8:01:c0:d1:ba:e1:50:61:98:44:93:38:3a:b8:
                    f3:9e:47:00:73:1a:f1:6d:a5:45:e2:66:dd:56:05:
                    5b:70:c1:97:7d:a5:a4:9d:3d:a4:6a:3a:db:0c:51:
                    78:e1:96:82:f4:68:15:e7:2a:81:51:63:a8:9e:c0:
                    c9:f1:09:ee:fd:c8:62:8e:07:55:a6:5c:bb:63:65:
                    78:d9:05:20:a3:35:04:e7:d9:74:88:41:d5:5c:31:
                    5f:8e:20:59:f5:dc:cf:8f:ff:8e:60:8d:3d:86:16:
                    41:e5:dd:21:47:36:fb:e6:48:74:4b:a3:81:43:71:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D9:9F:E0:5F:A2:6C:7C:A9:E8:F1:82:9F:3C:12:FC:97:67:EF:E5
            X509v3 Authority Key Identifier:
                keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:01:ea:b7:fc:44:fb:3b:08:49:f7:ea:d9:cf:51:a5:35:7e:
         e7:70:3f:39:62:e7:11:9e:6e:e0:b4:99:e2:3c:df:c2:db:3d:
         3d:74:74:c7:e7:d5:8f:7b:0c:ff:70:9c:60:96:17:0b:19:f1:
         23:0d:0a:93:af:15:9a:b6:53:0c:8d:3b:39:42:b4:34:43:55:
         3a:00:b5:17:72:50:ca:dc:2d:54:f6:61:03:a5:62:8e:fc:05:
         8e:3e:56:f8:48:f9:ac:90:f6:a5:21:1c:7c:dd:be:76:4c:15:
         92:2f:b9:30:42:f3:fc:b0:c4:90:1e:3e:1a:d4:54:79:fa:78:
         67:6a:de:cc:45:fd:c6:48:da:41:52:59:26:7c:ed:38:79:7d:
         9f:cd:68:68:e5:4e:53:91:57:b2:e8:40:4a:e7:af:27:b8:2f:
         84:03:91:b3:72:ef:e2:aa:4b:1c:0e:28:40:76:a3:d3:0d:63:
         34:48:12:f1:6f:88:c8:ff:7c:c9:47:21:ab:1a:7e:4f:f6:ca:
         9b:7d:9a:5d:75:1a:ad:f9:6b:28:68:bc:e4:b5:b3:01:31:30:
         64:fe:fb:85:1e:b1:a9:ca:74:4c:97:28:6f:f8:7d:62:03:fe:
         f5:03:1e:fd:0f:40:06:3f:05:73:43:22:10:35:bc:b0:a2:d0:
         ed:fd:8c:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYJZkswVD/H0XvxS5KO7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjI4MTgzNDkwYWM2YjI1MjNkYmZjYzA4N2MxMzgxNmY5
YzI2MTIwHhcNMjUwODIzMTAwMTUwWhcNMjUwODI0MTAwMTUwWjAzMTEwLwYDVQQD
EygyNGQ5OWZlMDVmYTI2YzdjYTllOGYxODI5ZjNjMTJmYzk3NjdlZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJefvvMo5FMbReMCbc/A04mhZ/S+
B3ITKq1OcW3xkE36bMe0KbzFjr1Hp39BqtpBrVSfzcJcLB+cMbXf11RBhyjiXqrO
J8d/OYGMTX+dnstrMZfNQJyAmXaiDdi/LH2jLR4mfC7qTG+0oHdtE7XvfywO/wzx
HNTJXEMlYV8A2Gg75u053JozyAHA0brhUGGYRJM4OrjznkcAcxrxbaVF4mbdVgVb
cMGXfaWknT2kajrbDFF44ZaC9GgV5yqBUWOonsDJ8Qnu/chijgdVply7Y2V42QUg
ozUE59l0iEHVXDFfjiBZ9dzPj/+OYI09hhZB5d0hRzb75kh0S6OBQ3HxbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTZn+Bfomx8qejxgp88EvyXZ+/lMB8GA1UdIwQY
MBaAFBoigYNJCsayUj2/zAh8E4FvnCYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2Mt
NjljNGU4NTMzNTIxLzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2MtNjljNGU4NTMzNTIx
LzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgHqt/xE
+zsISffq2c9RpTV+53A/OWLnEZ5u4LSZ4jzfwts9PXR0x+fVj3sM/3CcYJYXCxnx
Iw0Kk68VmrZTDI07OUK0NENVOgC1F3JQytwtVPZhA6VijvwFjj5W+Ej5rJD2pSEc
fN2+dkwVki+5MELz/LDEkB4+GtRUefp4Z2rezEX9xkjaQVJZJnztOHl9n81oaOVO
U5FXsuhASuevJ7gvhAORs3Lv4qpLHA4oQHaj0w1jNEgS8W+IyP98yUchqxp+T/bK
m32aXXUarflrKGi85LWzATEwZP77hR6xqcp0TJcob/h9YgP+9QMe/Q9ABj8Fc0Mi
EDW8sKLQ7f2MZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:11 2025 by rpki-client