Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
File:                     gwn4FzfW8X58GtWISa_3HFAGTwQ.mft (raw, json)
Hash identifier:          8IOeA6GhnMOEx9dtRV/IQn/3n9+jILvKUyZC/qSisEc=
Subject key identifier:   F3:1B:2D:14:A9:B6:D7:85:6E:9B:92:D3:A9:D7:94:03:87:3F:60:DA
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Certificate issuer:       /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial:       0199FBEB81BE50F66B1636549091F091F738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
Manifest number:          14C9
Signing time:             Sun 19 Oct 2025 10:02:19 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:19 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:19 +0000
Files and hashes:         1: C29j8BjW64hUTo90rvT2p7vncMk.roa (hash: z1gCCbWIlJIwgYs0Ud8cLUPoe3m6/PGlyP6Xd1WDnws=)
                          2: gwn4FzfW8X58GtWISa_3HFAGTwQ.crl (hash: xvVLtbwgJ22/l3rrDfBDZROuY+jc3GZhKQisAedhqyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:81:be:50:f6:6b:16:36:54:90:91:f0:91:f7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
        Validity
            Not Before: Oct 19 10:02:19 2025 GMT
            Not After : Oct 20 10:02:19 2025 GMT
        Subject: CN=f31b2d14a9b6d7856e9b92d3a9d79403873f60da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:60:09:ae:02:34:b1:7e:46:98:d0:45:5e:5d:
                    74:52:14:50:fd:57:9f:27:f5:5b:cf:ea:30:22:15:
                    ae:01:30:c2:a5:63:bf:4a:f0:a3:05:e2:dd:cd:d7:
                    ce:06:b6:52:45:92:dd:5d:17:96:43:e2:e3:95:87:
                    2b:88:1b:3f:98:d5:39:04:83:d0:1a:78:4f:9e:73:
                    26:3f:ae:ef:29:13:f5:d2:45:dd:af:cf:e1:47:d8:
                    78:7f:8a:de:2c:8d:5b:6d:7c:e6:b5:05:43:de:16:
                    9a:86:5b:c6:57:bf:8d:69:c8:bf:84:9d:60:26:78:
                    a2:c9:62:8d:1b:16:2f:a5:10:f0:50:ae:03:41:5c:
                    f1:7d:5b:81:2e:69:ad:72:54:73:2f:03:fa:cd:02:
                    94:8e:0f:ba:59:6b:c3:5e:7d:23:3a:5a:22:2c:59:
                    c6:2d:6b:8d:ba:b5:34:45:23:0e:ea:3c:56:e2:36:
                    02:b1:7f:80:5b:ce:b5:e2:55:8b:d4:77:41:2f:f8:
                    04:d8:91:35:bf:51:30:aa:82:92:9b:4d:7b:77:d6:
                    73:1e:ba:97:b6:e2:a3:d0:e1:34:df:0d:ff:7a:fb:
                    88:30:12:10:b3:48:f7:f7:bd:4a:f6:3d:d9:2b:e8:
                    07:ee:f8:a1:dd:46:1a:b1:11:e5:eb:04:c9:88:b5:
                    5c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1B:2D:14:A9:B6:D7:85:6E:9B:92:D3:A9:D7:94:03:87:3F:60:DA
            X509v3 Authority Key Identifier:
                keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:28:22:b6:a0:62:6a:81:c3:60:71:a6:bb:ae:c2:ad:6d:eb:
         ab:4c:d4:29:be:91:e8:84:23:ea:64:ed:4b:49:12:78:16:7c:
         75:4b:31:46:33:a2:23:7a:9b:08:06:46:ca:9a:5e:c1:66:6d:
         c3:16:b1:cc:51:ea:9b:6b:a9:03:3c:94:d4:54:43:fc:5b:4c:
         e9:85:75:45:b4:a5:50:d3:da:87:a1:2b:34:3a:b1:ae:22:4f:
         f3:3d:08:cd:c8:a8:10:fa:85:22:8b:4a:e1:d7:f6:9a:fa:20:
         90:e6:9d:a6:f4:2e:d4:99:5b:ef:f2:0b:8b:fa:14:dd:ed:c2:
         6a:a3:26:f4:a0:bf:9f:62:14:c7:27:7d:20:ee:2c:9d:59:ba:
         28:82:22:39:5e:c5:37:96:9c:70:2d:17:c4:c1:3d:d4:d6:8a:
         84:08:35:e5:c5:ca:14:35:fe:ad:6e:31:ee:32:ff:f7:bc:f6:
         07:0d:42:28:c1:10:e8:f8:33:b3:6b:a7:d8:04:e7:e9:d7:3e:
         a0:c7:38:30:3c:f1:38:3f:8c:5b:db:77:7a:e9:23:8f:10:2b:
         78:55:49:00:67:cd:b6:a7:31:3a:19:ff:1a:ab:55:ea:71:10:
         e7:3d:72:b3:ce:66:3a:89:45:10:3e:14:1c:a3:73:e8:86:a6:
         29:a3:dc:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn764G+UPZrFjZUkJHwkfc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDlmODE3MzdkNmYxN2U3YzFhZDU4ODQ5YWZmNzFjNTAw
NjRmMDQwHhcNMjUxMDE5MTAwMjE5WhcNMjUxMDIwMTAwMjE5WjAzMTEwLwYDVQQD
EyhmMzFiMmQxNGE5YjZkNzg1NmU5YjkyZDNhOWQ3OTQwMzg3M2Y2MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52AJrgI0sX5GmNBFXl10UhRQ/Vef
J/Vbz+owIhWuATDCpWO/SvCjBeLdzdfOBrZSRZLdXReWQ+LjlYcriBs/mNU5BIPQ
GnhPnnMmP67vKRP10kXdr8/hR9h4f4reLI1bbXzmtQVD3haahlvGV7+Naci/hJ1g
JniiyWKNGxYvpRDwUK4DQVzxfVuBLmmtclRzLwP6zQKUjg+6WWvDXn0jOloiLFnG
LWuNurU0RSMO6jxW4jYCsX+AW8614lWL1HdBL/gE2JE1v1EwqoKSm017d9ZzHrqX
tuKj0OE03w3/evuIMBIQs0j3971K9j3ZK+gH7vih3UYasRHl6wTJiLVcGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMbLRSptteFbpuS06nXlAOHP2DaMB8GA1UdIwQY
MBaAFIMJ+Bc31vF+fBrViEmv9xxQBk8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3duNEZ6Zlc4WDU4R3RXSVNhXzNIRkFHVHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYTAwMjYtMjg0Ny00Mjc2LTk2YmEt
MTc0NzM3OGU2NTk0LzEvZ3duNEZ6Zlc4WDU4R3RXSVNhXzNIRkFHVHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYTAwMjYtMjg0Ny00Mjc2LTk2YmEtMTc0NzM3OGU2NTk0
LzEvZ3duNEZ6Zlc4WDU4R3RXSVNhXzNIRkFHVHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkygitqBi
aoHDYHGmu67CrW3rq0zUKb6R6IQj6mTtS0kSeBZ8dUsxRjOiI3qbCAZGyppewWZt
wxaxzFHqm2upAzyU1FRD/FtM6YV1RbSlUNPah6ErNDqxriJP8z0IzcioEPqFIotK
4df2mvogkOadpvQu1Jlb7/ILi/oU3e3CaqMm9KC/n2IUxyd9IO4snVm6KIIiOV7F
N5accC0XxME91NaKhAg15cXKFDX+rW4x7jL/97z2Bw1CKMEQ6Pgzs2un2ATn6dc+
oMc4MDzxOD+MW9t3eukjjxAreFVJAGfNtqcxOhn/GqtV6nEQ5z1ys85mOolFED4U
HKNz6IamKaPc9Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:38 2025 by rpki-client