Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
File:                     Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft (raw, json)
Hash identifier:          xrdtQGG7pQtw5oKh0CQZmwKFwdQJ5mUTl3lq9pR6PCQ=
Subject key identifier:   4A:04:92:92:EF:35:7F:84:89:CC:49:B8:C0:48:20:41:EE:18:D7:55
Authority key identifier: 1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
Certificate issuer:       /CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Certificate serial:       0198D6CCE62E874FFC909EDA4DC407305986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
Manifest number:          0929
Signing time:             Sat 23 Aug 2025 12:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:09 +0000
Files and hashes:         1: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl (hash: Tl2smYVdAIzKqzVzjDTgQjrKdsDK18e+a9xMqcC67Ag=)
                          2: tv0huOh6mK0H4w2Pkxi0zxGdHcU.roa (hash: AhjG9w2zaLD4mADBnCLY0U88JMMTl5C2x9ZxBk5L0+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:e6:2e:87:4f:fc:90:9e:da:4d:c4:07:30:59:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
        Validity
            Not Before: Aug 23 12:00:09 2025 GMT
            Not After : Aug 24 12:00:09 2025 GMT
        Subject: CN=4a049292ef357f8489cc49b8c0482041ee18d755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:9a:3d:88:2c:59:dd:ca:e9:ce:3e:0d:63:
                    d9:61:88:4a:bd:8b:cb:7c:67:65:62:2d:dc:38:43:
                    53:1b:72:c0:69:5e:df:90:67:1f:5e:c0:7d:28:67:
                    61:9e:37:ce:02:30:36:ca:af:be:15:43:09:16:11:
                    b2:8b:c9:3a:5e:10:1f:36:af:9c:d8:2a:ee:80:7f:
                    22:ce:a8:c3:da:8a:b3:f3:14:50:2a:41:82:b9:3d:
                    53:c4:1d:11:37:96:92:e0:67:e4:3f:14:3c:5e:a0:
                    7c:49:58:f5:0f:68:f6:59:ee:9b:35:9d:78:25:3b:
                    d5:12:07:7d:a7:9d:e7:9c:9b:18:e9:4a:9f:81:66:
                    e8:f1:1c:9b:a4:a0:c9:53:9c:1f:20:08:af:8d:9d:
                    82:ef:3d:84:f5:26:fc:b5:e3:79:44:37:aa:70:7a:
                    d6:ed:08:ea:1b:88:71:d0:f3:a5:28:73:9e:41:e5:
                    6e:6f:d0:0f:d5:3d:72:f1:d0:9a:3c:e9:4b:5d:a3:
                    6c:55:9f:7f:7b:a3:e7:a2:88:92:5a:2b:3a:9a:bc:
                    a8:b5:9b:50:1a:e0:f8:ab:06:e5:7c:12:49:45:2f:
                    09:0e:65:f7:6e:24:85:ed:cd:0b:53:0f:e9:57:9d:
                    66:b3:1a:4f:41:78:c9:cc:70:f6:12:2c:fb:a2:3d:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:04:92:92:EF:35:7F:84:89:CC:49:B8:C0:48:20:41:EE:18:D7:55
            X509v3 Authority Key Identifier:
                keyid:1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:99:9e:8e:82:a4:4a:2c:92:40:71:33:54:35:e8:8a:d6:20:
         9b:5d:f6:2e:05:56:25:6d:61:f4:10:ca:ae:b9:82:fd:e8:e4:
         1f:1a:2d:a7:4a:be:37:3f:57:cd:21:c6:83:80:e4:ed:6c:7a:
         b6:d5:b7:b0:16:e1:ff:91:fd:71:ed:4a:88:91:7c:84:e9:e5:
         5f:9b:7f:f9:69:a1:8d:8c:bf:e6:13:0e:37:84:c6:ad:09:89:
         de:17:aa:22:d4:e8:60:62:3d:23:1c:dc:59:a4:c4:02:5a:16:
         9d:64:f7:80:81:11:cf:98:80:34:ea:9d:72:a6:3b:1e:cb:d7:
         58:84:3a:5e:36:02:05:c9:9f:40:e8:80:68:a6:72:3c:a8:64:
         7c:f5:10:76:01:07:1f:d2:3c:29:aa:38:2c:fc:2d:79:de:b8:
         21:21:9b:c9:2f:10:eb:58:0d:d3:b6:ab:cd:6d:20:24:83:ba:
         22:82:81:9b:24:b5:46:f2:f6:9e:ca:6d:5c:12:69:c5:6d:c5:
         b4:08:d9:25:73:16:3b:65:12:27:d3:ef:d2:65:47:53:d7:f0:
         b3:1d:4c:8f:8e:89:a9:df:01:77:57:eb:ba:cb:0b:4d:62:8b:
         54:c4:4a:f3:45:09:f7:5f:9b:f6:1e:30:28:d3:46:9c:4e:70:
         74:fe:45:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzOYuh0/8kJ7aTcQHMFmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWM3ZGI1MTkzYzFiM2I3NDg3ZTg0N2Q0MWEzODNlZDVi
MjY2NzEwHhcNMjUwODIzMTIwMDA5WhcNMjUwODI0MTIwMDA5WjAzMTEwLwYDVQQD
Eyg0YTA0OTI5MmVmMzU3Zjg0ODljYzQ5YjhjMDQ4MjA0MWVlMThkNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstSaPYgsWd3K6c4+DWPZYYhKvYvL
fGdlYi3cOENTG3LAaV7fkGcfXsB9KGdhnjfOAjA2yq++FUMJFhGyi8k6XhAfNq+c
2CrugH8izqjD2oqz8xRQKkGCuT1TxB0RN5aS4GfkPxQ8XqB8SVj1D2j2We6bNZ14
JTvVEgd9p53nnJsY6UqfgWbo8RybpKDJU5wfIAivjZ2C7z2E9Sb8teN5RDeqcHrW
7QjqG4hx0POlKHOeQeVub9AP1T1y8dCaPOlLXaNsVZ9/e6PnooiSWis6mryotZtQ
GuD4qwblfBJJRS8JDmX3biSF7c0LUw/pV51msxpPQXjJzHD2Eiz7oj0L5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoEkpLvNX+EicxJuMBIIEHuGNdVMB8GA1UdIwQY
MBaAFBqsfbUZPBs7dIfoR9QaOD7VsmZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNmYxYTQtYTQzZS00N2JkLWExNzgt
YzM2YTk2YzA0MTc3LzEvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lNmYxYTQtYTQzZS00N2JkLWExNzgtYzM2YTk2YzA0MTc3
LzEvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5mejoKk
SiySQHEzVDXoitYgm132LgVWJW1h9BDKrrmC/ejkHxotp0q+Nz9XzSHGg4Dk7Wx6
ttW3sBbh/5H9ce1KiJF8hOnlX5t/+WmhjYy/5hMON4TGrQmJ3heqItToYGI9Ixzc
WaTEAloWnWT3gIERz5iANOqdcqY7HsvXWIQ6XjYCBcmfQOiAaKZyPKhkfPUQdgEH
H9I8Kao4LPwted64ISGbyS8Q61gN07arzW0gJIO6IoKBmyS1RvL2nsptXBJpxW3F
tAjZJXMWO2USJ9Pv0mVHU9fwsx1Mj46Jqd8Bd1frussLTWKLVMRK80UJ91+b9h4w
KNNGnE5wdP5F7Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:47 2025 by rpki-client