Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File:                     gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier:          uGFkfzblGWoErk3mBdQjU0rWd/Z/T0WAwKS5aEOeepg=
Subject key identifier:   61:50:2B:CC:FC:3A:EF:91:06:68:B7:1B:F2:1F:C5:01:77:4F:64:33
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer:       /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial:       0199FAD7FD12600966D9B005B181FFCC9EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 05:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:22 +0000
Files and hashes:         1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
                          2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
                          3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: EPZ6KXrfvDrEB0jWwrhxq9B/MqKreO+6ln04qHIlqr8=)
                          4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:fd:12:60:09:66:d9:b0:05:b1:81:ff:cc:9e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
        Validity
            Not Before: Oct 19 05:01:22 2025 GMT
            Not After : Oct 20 05:01:22 2025 GMT
        Subject: CN=61502bccfc3aef910668b71bf21fc501774f6433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:0b:9d:a7:d7:7b:71:71:e7:4b:95:eb:e2:
                    b2:f2:0c:1a:79:7e:cf:19:8f:4a:20:2c:ab:eb:7f:
                    7f:3e:62:a7:08:61:8a:61:0d:8f:12:02:fb:a4:b8:
                    86:c4:0a:05:45:a6:2a:46:61:a4:76:3e:c0:17:4a:
                    d8:c7:08:a2:0b:98:30:2c:c9:ea:e7:e7:86:f5:55:
                    0b:1b:20:c9:ba:51:81:04:4f:b6:49:e6:2d:8c:42:
                    f9:5b:c7:5d:d4:82:a7:09:0a:c0:e3:6a:c7:70:1e:
                    8d:27:e2:4f:5d:6d:3f:cb:ce:7c:23:e6:6a:84:05:
                    87:19:22:a4:7f:c3:cb:10:36:90:1f:38:45:0f:fe:
                    e8:66:bd:06:5e:2f:27:75:d4:34:04:b2:ac:70:6f:
                    00:5d:a4:63:87:59:ce:20:3e:26:cd:33:c1:e7:96:
                    bd:8c:9f:4c:b6:39:7b:ae:92:20:b6:9f:8e:41:8e:
                    68:f7:0f:e6:87:a4:ae:33:88:ba:23:23:cb:71:45:
                    a8:66:5e:56:25:64:25:de:00:4f:dc:fe:98:aa:7b:
                    ec:54:e2:85:2a:38:b3:c4:07:71:00:c0:26:2b:3d:
                    8c:3b:32:c0:dc:32:e3:6d:a5:04:78:a5:80:6f:d9:
                    8e:eb:fd:1d:29:be:20:5d:77:de:61:3e:78:11:ad:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:50:2B:CC:FC:3A:EF:91:06:68:B7:1B:F2:1F:C5:01:77:4F:64:33
            X509v3 Authority Key Identifier:
                keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:b3:8d:60:6a:bd:6f:65:e5:65:3d:57:31:5c:e7:15:d7:
         c2:da:0a:56:9c:0e:18:f1:68:7f:97:b5:ab:30:ae:d2:9d:d2:
         e4:b2:c4:f1:ca:11:36:cb:23:7d:99:2a:26:7c:60:29:4e:58:
         c1:a9:4f:21:86:d6:40:e5:ca:15:06:bb:35:f0:74:a2:48:4b:
         a4:0e:3e:95:61:b9:74:6e:9b:e8:48:b6:4d:77:76:44:f0:0b:
         7f:b9:f3:4c:60:4d:68:57:af:30:f4:a2:00:2d:35:1e:2f:e5:
         a9:13:5a:13:b7:31:7b:9c:f2:ce:30:d5:ee:85:d7:f2:9b:75:
         e8:24:8c:be:34:65:76:27:cb:fa:56:0e:aa:a1:09:ef:15:74:
         eb:61:41:9c:6c:20:94:4e:70:a1:ee:a2:be:0c:97:31:a2:c1:
         90:1d:79:db:3b:4c:e3:36:9d:79:0b:be:6c:88:69:7e:85:6f:
         e9:fa:d5:81:68:5e:62:90:f2:b5:cd:a0:47:ba:4b:34:1a:96:
         85:15:76:8c:6f:5c:06:3f:b5:34:75:ce:3c:c2:6d:4a:68:a5:
         1e:92:01:f5:36:ea:53:56:45:cf:f3:ac:17:63:6b:70:22:a1:
         fa:54:c1:95:0d:11:f0:81:d2:51:16:08:65:5f:27:2e:cc:d3:
         6c:11:a5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61/0SYAlm2bAFsYH/zJ77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UwZTQ4MDQxMWI5Yzg4ZTkxNmRlZjkwZmMzYTkwMTAy
NjM5NGEwHhcNMjUxMDE5MDUwMTIyWhcNMjUxMDIwMDUwMTIyWjAzMTEwLwYDVQQD
Eyg2MTUwMmJjY2ZjM2FlZjkxMDY2OGI3MWJmMjFmYzUwMTc3NGY2NDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz8LnafXe3Fx50uV6+Ky8gwaeX7P
GY9KICyr639/PmKnCGGKYQ2PEgL7pLiGxAoFRaYqRmGkdj7AF0rYxwiiC5gwLMnq
5+eG9VULGyDJulGBBE+2SeYtjEL5W8dd1IKnCQrA42rHcB6NJ+JPXW0/y858I+Zq
hAWHGSKkf8PLEDaQHzhFD/7oZr0GXi8nddQ0BLKscG8AXaRjh1nOID4mzTPB55a9
jJ9Mtjl7rpIgtp+OQY5o9w/mh6SuM4i6IyPLcUWoZl5WJWQl3gBP3P6YqnvsVOKF
KjizxAdxAMAmKz2MOzLA3DLjbaUEeKWAb9mO6/0dKb4gXXfeYT54Ea1/BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFQK8z8Ou+RBmi3G/IfxQF3T2QzMB8GA1UdIwQY
MBaAFIM+DkgEEbnIjpFt75D8OpAQJjlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMt
NmMyMGViYWYzMGE5LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMtNmMyMGViYWYzMGE5
LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgqzjWBq
vW9l5WU9VzFc5xXXwtoKVpwOGPFof5e1qzCu0p3S5LLE8coRNssjfZkqJnxgKU5Y
walPIYbWQOXKFQa7NfB0okhLpA4+lWG5dG6b6Ei2TXd2RPALf7nzTGBNaFevMPSi
AC01Hi/lqRNaE7cxe5zyzjDV7oXX8pt16CSMvjRldifL+lYOqqEJ7xV062FBnGwg
lE5woe6ivgyXMaLBkB152ztM4zadeQu+bIhpfoVv6frVgWheYpDytc2gR7pLNBqW
hRV2jG9cBj+1NHXOPMJtSmilHpIB9TbqU1ZFz/OsF2NrcCKh+lTBlQ0R8IHSURYI
ZV8nLszTbBGlrQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:07 2025 by rpki-client