Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File:                     gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier:          8nUjDh3b1AGA5boqL9V5qVTRmi/m5ZmFXKEwDb7Vjak=
Subject key identifier:   7D:0A:ED:40:C5:D5:D7:C2:8E:08:41:D4:5D:C8:A3:D6:C2:6A:9B:02
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer:       /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial:       0199FCFD96C106E9209321A46D3CDE3DB704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 15:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:41 +0000
Files and hashes:         1: FG-bEioa4civ6jvoSnaUtHZPEQE.roa (hash: w4e7tpxeaBQHMoRYqhi0o1qJLopKx8fwD7s6iGDvqgY=)
                          2: aGlvUdVJOWbqaat4vglrkQH1tNo.roa (hash: svvIGknsbQhU6YBIsZkBO7bjTdjQ0GNK1yuIVKiea6E=)
                          3: eZ8arxnGDWk7xkVHJ1bRXWZ355M.roa (hash: AeIoI4f85DUeWbFvZ4SxFOX1IxHcOJjIFceKESNKiJo=)
                          4: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: fP1/L5AMoymNAr1y/Y2fmJfGdnCYWrQly/ITj+9Rao0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:96:c1:06:e9:20:93:21:a4:6d:3c:de:3d:b7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
        Validity
            Not Before: Oct 19 15:01:41 2025 GMT
            Not After : Oct 20 15:01:41 2025 GMT
        Subject: CN=7d0aed40c5d5d7c28e0841d45dc8a3d6c26a9b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:fc:a1:3a:47:1f:50:13:c2:96:52:81:fe:
                    de:bc:40:7f:4a:34:96:b5:33:7a:2f:aa:e3:f8:f2:
                    d0:7e:da:44:cb:85:d8:d0:f7:b0:48:b7:6d:e1:14:
                    df:4a:20:e4:85:ac:1e:bb:0f:af:3b:5e:92:ee:6c:
                    86:91:5e:6f:a6:39:a6:ba:83:29:ec:23:90:b2:5a:
                    ca:2b:86:72:4d:bc:86:ed:d3:6e:2d:d6:17:b1:84:
                    43:c8:a3:ff:ed:65:5e:56:0e:3a:dc:c3:65:54:9b:
                    6d:4b:a2:55:af:c3:f1:d7:5d:1e:60:64:ff:d3:ca:
                    d8:5d:50:41:3e:ac:e9:e7:2b:cb:a4:5e:9b:b9:c6:
                    41:48:9c:ca:52:a1:9c:af:89:03:77:7d:ec:72:48:
                    2e:df:5b:59:da:04:7b:2b:d1:0a:ae:57:0b:5b:c2:
                    68:c4:46:97:9c:db:d0:4e:1c:0a:b4:a8:5b:b4:80:
                    50:de:f9:bd:2b:02:4d:ca:29:66:b0:05:76:67:40:
                    fe:0c:6c:60:8c:55:20:00:74:38:15:37:da:67:cf:
                    ab:cd:ec:77:5c:f1:bc:f7:5a:5c:c7:a4:a1:e0:9d:
                    71:85:a0:47:e3:d9:ac:c4:2d:97:70:48:68:ba:fa:
                    f5:d2:40:98:97:8b:c1:7f:c7:f1:ad:48:be:6b:2b:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0A:ED:40:C5:D5:D7:C2:8E:08:41:D4:5D:C8:A3:D6:C2:6A:9B:02
            X509v3 Authority Key Identifier:
                keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:16:75:5c:35:55:be:c0:99:b3:49:18:4b:08:23:19:09:93:
         ed:04:81:b8:1b:5d:99:98:8e:04:c5:16:ba:6e:d9:70:d8:2b:
         04:18:6c:f2:26:ca:0b:1f:10:c2:3b:c8:56:30:47:ae:a3:d0:
         56:b6:bd:67:a3:7c:8b:84:15:7a:81:70:04:b1:b4:1d:86:77:
         12:f1:00:76:04:e9:fc:e0:03:5a:07:31:84:20:08:29:98:a7:
         5b:93:5a:5d:18:b1:9a:bb:27:2d:4f:f5:6d:6d:9c:32:22:96:
         1f:2f:a4:5f:18:f1:2d:a2:41:7f:9a:f4:f4:17:25:44:54:b6:
         0d:61:e6:32:f1:7a:33:24:77:2f:df:7c:36:f1:39:92:8d:1a:
         ac:6f:2e:b0:83:91:40:80:b9:6d:76:1c:90:69:50:11:e9:4f:
         ff:14:36:3c:a6:f0:30:33:b9:5a:e1:00:e4:05:f5:37:da:82:
         b1:fa:67:a0:de:49:26:ad:0c:78:ba:06:33:bd:62:52:53:30:
         19:68:9b:d5:0a:6f:68:9e:c3:ff:d2:5a:89:d5:95:2e:34:ef:
         ef:3d:97:8b:35:b3:55:74:64:c2:2d:63:36:9a:1f:39:61:bc:
         05:dd:67:ad:c9:0a:0d:f3:65:fa:55:40:db:b8:9e:14:47:70:
         33:72:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:56 2025 by rpki-client