Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File:                     gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier:          lzuXrXeWf4yhgHH5wltBmggEBayiiHbH/SR5VOMP6xw=
Subject key identifier:   E4:ED:B0:2E:AA:B4:82:67:94:1B:B7:6C:17:88:83:21:42:A8:08:CC
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer:       /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial:       0198D404610C423EB6C8C33E312C48CA52A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number:          0BE0
Signing time:             Fri 22 Aug 2025 23:01:53 +0000
Manifest this update:     Fri 22 Aug 2025 23:01:53 +0000
Manifest next update:     Sat 23 Aug 2025 23:01:53 +0000
Files and hashes:         1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=)
                          2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: F767uXsUf8jHFpobzX4jYY+XMoETe8YqQuWwnNgqMlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:61:0c:42:3e:b6:c8:c3:3e:31:2c:48:ca:52:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
        Validity
            Not Before: Aug 22 23:01:53 2025 GMT
            Not After : Aug 23 23:01:53 2025 GMT
        Subject: CN=e4edb02eaab48267941bb76c1788832142a808cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:ce:d2:f2:b0:fc:5b:41:e5:63:e8:8c:ab:
                    0f:53:44:27:fa:fa:d7:da:b8:6b:cd:b7:e6:c6:b5:
                    34:06:2d:ac:33:24:8d:0d:75:3a:af:41:d3:ad:df:
                    5a:3b:80:e1:57:18:32:37:d5:63:73:9d:c2:4a:d2:
                    8b:99:a8:66:0a:1f:17:09:19:25:79:c3:6b:4f:a1:
                    16:86:83:fe:ba:44:57:a5:68:f0:30:23:8b:5c:df:
                    bf:a6:80:b4:45:81:89:e9:81:e8:ed:33:2c:e3:7d:
                    c5:07:96:42:de:fe:bb:a5:0f:69:d9:46:0f:53:0b:
                    02:c1:48:c0:57:06:63:ff:e6:1b:35:08:64:43:c1:
                    73:58:93:20:35:98:7a:f4:42:5b:4e:1a:0f:22:58:
                    52:aa:df:ec:3d:3d:1b:72:2c:ea:38:14:5b:8d:61:
                    ae:6a:5a:64:7e:f6:1f:12:bd:07:6c:6b:b5:a0:80:
                    2d:17:16:92:7f:46:68:ee:01:95:2b:c8:1c:a2:c0:
                    9a:3d:11:63:72:1c:f9:67:d4:f3:c7:2c:8b:1d:f1:
                    98:b1:7c:24:8a:9e:17:cd:49:5f:6f:b8:af:72:90:
                    1a:7e:22:da:e3:09:be:2b:df:18:84:b5:06:6e:38:
                    09:21:8a:82:9e:70:81:f2:4d:de:d8:0f:f9:a8:d0:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:ED:B0:2E:AA:B4:82:67:94:1B:B7:6C:17:88:83:21:42:A8:08:CC
            X509v3 Authority Key Identifier:
                keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bc:9d:c6:f0:a2:5e:a9:9f:7e:92:ef:d5:e7:26:2e:b5:04:
         9d:2f:d4:30:36:b6:7f:2f:da:93:85:8e:a0:10:8d:56:94:0a:
         41:12:96:cd:db:7f:e0:2c:e0:76:7d:4c:23:e7:09:1a:66:8d:
         cb:bc:3a:24:fc:aa:79:66:5d:46:20:9c:39:e1:1d:d0:79:f9:
         ab:b1:2f:85:ea:41:6e:f1:eb:2a:3d:f6:89:9e:51:3b:13:6a:
         8c:d2:e2:56:b7:98:e5:e2:5a:d9:ce:e0:ab:50:0d:4e:75:85:
         b2:62:13:c4:a2:aa:fd:26:17:64:ac:98:90:d0:f6:d6:98:02:
         53:e3:92:41:c6:bf:62:51:18:02:c5:0a:51:4b:75:a4:da:4c:
         0d:4e:06:b7:40:d1:32:46:e7:94:2b:22:c3:ed:2d:28:1c:c0:
         e3:77:59:48:2b:3f:0e:48:23:45:20:06:1d:13:5e:a6:f9:76:
         c8:89:8b:e6:1b:88:ab:26:1c:6f:b4:35:59:ff:9d:28:16:6f:
         62:81:90:f9:29:c9:ab:f4:13:a5:81:cf:69:af:fa:61:15:c6:
         06:d7:c8:69:93:5c:77:cc:39:1b:54:ec:36:d4:13:f8:69:f2:
         f0:ea:e2:ef:c2:a0:bc:d1:d8:9b:39:d0:0f:38:70:06:60:7c:
         d3:b4:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:45 2025 by rpki-client