Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File:                     G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier:          5IrGEXkABKDsZdAgKaEw62p4lb8R2ToIWBAU9GdI/3U=
Subject key identifier:   3B:05:B5:EC:79:6D:82:EC:52:DE:A3:62:83:D9:61:A4:D5:5B:CC:61
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer:       /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial:       019A0147B689DB254401E74CF9C82D67FB74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number:          15BE
Signing time:             Mon 20 Oct 2025 11:01:08 +0000
Manifest this update:     Mon 20 Oct 2025 11:01:08 +0000
Manifest next update:     Tue 21 Oct 2025 11:01:08 +0000
Files and hashes:         1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
                          2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: qP/pgGztcdaKdf4MQERxhHkXAiRc2qojuZKhJCUtB/Y=)
                          3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:47:b6:89:db:25:44:01:e7:4c:f9:c8:2d:67:fb:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
        Validity
            Not Before: Oct 20 11:01:08 2025 GMT
            Not After : Oct 21 11:01:08 2025 GMT
        Subject: CN=3b05b5ec796d82ec52dea36283d961a4d55bcc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:e1:c7:7c:e1:7d:d7:5a:6d:e8:f4:c7:c0:
                    21:00:77:dd:1f:14:f5:53:40:7b:ac:fe:c7:45:9d:
                    fe:30:ef:5c:9d:5c:d0:2b:01:26:51:5c:35:cd:47:
                    62:e1:19:7f:d4:f8:59:9b:7e:50:2e:89:c5:a5:10:
                    71:4b:5a:ae:7e:59:42:49:0d:97:15:e2:a1:01:45:
                    47:08:3e:6e:db:73:a5:4f:dc:7b:fa:d1:5a:a9:ab:
                    5a:e6:ac:30:05:50:92:24:26:c3:e9:88:3a:1d:23:
                    ca:37:ef:99:28:bc:ae:84:77:b5:1e:24:6b:e7:ea:
                    3e:b9:ea:7c:96:32:96:e9:02:3b:ea:1b:b5:f3:ae:
                    8a:77:7e:e3:de:2c:0d:74:d1:16:9f:13:65:6c:f9:
                    99:4c:e1:af:bf:e3:d3:c8:6d:de:05:54:b9:7f:ae:
                    cd:7b:0b:4c:e8:2b:05:45:5e:16:bd:d1:d4:b2:73:
                    48:ea:45:77:21:8e:d1:99:73:63:48:8b:71:95:64:
                    ec:1e:cd:bd:e2:f4:4b:27:e0:f5:0d:5a:03:4b:75:
                    14:c5:0d:ba:66:fc:08:cc:f0:37:ef:ab:a9:6c:8b:
                    c9:df:30:16:90:e0:8e:d0:60:b5:ac:e4:b3:dc:6b:
                    f3:ed:2e:80:12:2c:e2:e0:bd:47:ba:0d:d2:ff:84:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:05:B5:EC:79:6D:82:EC:52:DE:A3:62:83:D9:61:A4:D5:5B:CC:61
            X509v3 Authority Key Identifier:
                keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fe:ca:6e:b6:24:e7:8b:7a:6c:f2:67:1b:1d:1d:94:1d:ef:
         db:d7:a2:97:c1:33:8e:f0:10:11:96:cf:42:2e:31:4a:4a:ca:
         00:01:44:ab:38:b3:5a:0f:1a:d5:03:06:b8:d4:12:be:e5:86:
         3b:aa:09:9e:1f:be:f2:9a:38:02:78:85:49:90:4c:24:cf:f3:
         51:3c:b5:fe:7f:5c:6a:13:08:2b:7e:70:11:29:74:5d:75:c3:
         5d:30:85:fb:40:10:47:fa:9a:e2:09:de:3f:56:88:69:49:15:
         6e:c4:40:a4:a4:0a:c1:a3:22:85:e0:e2:e6:79:d1:c5:11:17:
         95:19:a0:89:bc:22:81:28:ce:2c:7d:ea:54:b7:80:8a:ac:67:
         9c:aa:a6:bc:95:21:1c:40:ad:d2:5b:ec:7b:c7:e3:5f:a0:a0:
         4a:47:c5:81:46:c6:9d:06:15:26:82:8f:f5:49:94:44:ff:08:
         b0:3c:80:0b:3f:42:83:f3:b8:7d:cd:f9:cb:99:2d:70:76:ec:
         e3:16:ac:1a:c9:6c:eb:db:f2:6d:f6:96:10:e2:d3:7b:fc:30:
         3f:db:59:93:ef:ad:97:d2:24:bb:42:ea:02:03:42:09:d9:f7:
         78:72:c8:9e:19:7c:16:e5:16:cc:dc:f9:c9:aa:6b:c3:6c:f8:
         61:e6:f2:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBR7aJ2yVEAedM+cgtZ/t0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJhMDEzNjU1YjliYjBjYWEyODVkNzVjMTQyYzFlZTMw
Zjg4NTQwHhcNMjUxMDIwMTEwMTA4WhcNMjUxMDIxMTEwMTA4WjAzMTEwLwYDVQQD
EygzYjA1YjVlYzc5NmQ4MmVjNTJkZWEzNjI4M2Q5NjFhNGQ1NWJjYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdzhx3zhfddabej0x8AhAHfdHxT1
U0B7rP7HRZ3+MO9cnVzQKwEmUVw1zUdi4Rl/1PhZm35QLonFpRBxS1qufllCSQ2X
FeKhAUVHCD5u23OlT9x7+tFaqata5qwwBVCSJCbD6Yg6HSPKN++ZKLyuhHe1HiRr
5+o+uep8ljKW6QI76hu1866Kd37j3iwNdNEWnxNlbPmZTOGvv+PTyG3eBVS5f67N
ewtM6CsFRV4WvdHUsnNI6kV3IY7RmXNjSItxlWTsHs294vRLJ+D1DVoDS3UUxQ26
ZvwIzPA376upbIvJ3zAWkOCO0GC1rOSz3Gvz7S6AEizi4L1Hug3S/4QgbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsFtex5bYLsUt6jYoPZYaTVW8xhMB8GA1UdIwQY
MBaAFBvboBNlW5uwyqKF11wULB7jD4hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUt
ZDRlZGYxNmUwOTc4LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUtZDRlZGYxNmUwOTc4
LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApf7KbrYk
54t6bPJnGx0dlB3v29eil8EzjvAQEZbPQi4xSkrKAAFEqzizWg8a1QMGuNQSvuWG
O6oJnh++8po4AniFSZBMJM/zUTy1/n9cahMIK35wESl0XXXDXTCF+0AQR/qa4gne
P1aIaUkVbsRApKQKwaMiheDi5nnRxREXlRmgibwigSjOLH3qVLeAiqxnnKqmvJUh
HECt0lvse8fjX6CgSkfFgUbGnQYVJoKP9UmURP8IsDyACz9Cg/O4fc35y5ktcHbs
4xasGsls69vybfaWEOLTe/wwP9tZk++tl9Iku0LqAgNCCdn3eHLInhl8FuUWzNz5
yaprw2z4YebyYQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:35:17 2025 by rpki-client