Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          kfqXwr9g/W48xNlu3bAcWqKzcFTcp/I2Ejb2bcEwTDg=
Subject key identifier:   38:02:26:92:42:9F:0C:A3:82:71:EF:6C:81:40:61:7D:98:5E:8F:A0
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       0199FCC6C8D31D9713FDE79C9724E29676B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          16EA
Signing time:             Sun 19 Oct 2025 14:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:49 +0000
Files and hashes:         1: DurIZqoPKpw9LYGIPBrHPFq3LHw.roa (hash: zhg8WLRUrYe0q7NH9Wz8ueiA39mg7KprcnCZzHNNbsw=)
                          2: PnB8IMDITEDpen2OPTOxZTtueZw.roa (hash: qeR+1XSa8d/i/SIsn+15UPdwoIkYRW0OqLmRrfqzRas=)
                          3: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: APjd6LXK189XqqpD1xtLvi84N1twJsNxew+lVBviev8=)
                          4: n307rGiwYsk1vOiGMRbS2fV0BSk.roa (hash: tlfldYKCmk1Ckto3uCUJi3f86MeyWZSU+wFP+RVK1Ew=)
                          5: vTNM4m6CbUwbrvUjHBwBVw0_vYs.roa (hash: 7BbpPre0ZtLQJ0mFYOMZGVaoQeJskvISu8hLB2sHUnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:c8:d3:1d:97:13:fd:e7:9c:97:24:e2:96:76:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Oct 19 14:01:49 2025 GMT
            Not After : Oct 20 14:01:49 2025 GMT
        Subject: CN=38022692429f0ca38271ef6c8140617d985e8fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:7f:1c:fb:83:f9:1d:ae:22:2e:a3:e6:93:
                    d1:7a:dc:35:8b:99:a8:26:ba:15:44:65:4e:ae:16:
                    a5:6e:a2:96:7e:43:b9:80:f9:dc:8b:fd:e0:c5:82:
                    ac:4d:d3:78:20:6f:2d:f1:31:d2:d0:12:47:84:53:
                    a2:f2:e9:c2:fe:cb:b5:50:e6:04:20:69:1c:a9:29:
                    e5:fe:8e:fb:b1:55:d0:71:dc:fd:95:c9:e2:36:c2:
                    a3:95:43:de:63:8f:86:b0:4c:85:c8:da:af:d7:88:
                    08:70:b7:03:7f:32:36:c0:bc:00:4f:2a:f7:50:60:
                    4a:f0:b2:86:af:90:82:db:aa:54:b5:5b:4f:25:d5:
                    f9:3d:eb:86:ea:20:0f:67:7d:00:6b:90:6c:56:43:
                    f8:54:3a:ee:23:d1:7e:8f:cc:44:bf:6f:58:94:da:
                    76:ea:f9:c4:4c:6b:14:3e:e2:8b:45:68:59:74:46:
                    6c:a2:8a:76:9e:41:5b:1b:a4:f8:f1:e5:e2:66:15:
                    4c:6b:df:7a:4e:c8:68:9b:04:d4:5a:85:c1:4a:2c:
                    fc:84:33:49:2a:d4:5c:63:2a:07:07:9a:62:36:1b:
                    43:ef:bb:bf:54:5f:4f:68:c4:9d:5c:d9:2a:80:d8:
                    82:4b:67:bb:bd:bc:c8:7f:2e:b6:4e:39:35:60:f8:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:02:26:92:42:9F:0C:A3:82:71:EF:6C:81:40:61:7D:98:5E:8F:A0
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:00:43:9a:5a:a0:a2:fc:b0:d7:95:03:8a:03:7e:73:4d:4a:
         87:28:bd:bc:3f:2f:56:f1:51:86:91:cc:81:83:e9:b3:a5:3a:
         70:f7:ab:c7:49:f3:b4:09:b5:4d:b2:31:14:f1:dc:15:7c:95:
         80:32:54:3d:2c:2a:80:8b:48:54:2a:83:6a:90:7a:a8:d9:e1:
         fb:74:3a:0d:b7:68:55:89:01:3c:d7:87:68:c2:d3:dc:2d:c6:
         3e:73:bb:e3:83:d8:a5:90:48:f8:f8:b4:44:5b:dc:ad:1b:f2:
         38:af:ba:bd:27:c6:cf:4f:66:69:0a:bb:12:8e:ca:f2:07:5e:
         f7:ef:45:8b:52:0c:ee:4c:5f:15:c5:b7:72:45:da:83:be:30:
         2b:55:67:90:c4:26:76:a6:2d:f7:46:f2:33:5a:74:53:1f:10:
         d6:0d:ea:37:45:ff:ec:07:73:f9:35:8f:b7:7e:34:ac:8c:b7:
         7a:5b:ba:94:d1:2b:d7:f4:fd:36:e1:49:32:39:25:5f:ae:fc:
         02:3c:69:db:53:13:b4:2c:7b:e4:29:0a:d9:cb:ec:73:c2:36:
         4f:f9:99:0e:7c:f8:3a:62:78:10:28:06:ce:dd:34:28:cb:49:
         db:c6:b8:c1:a8:a9:2d:39:c8:f9:1b:4e:48:29:bb:31:df:16:
         2b:a8:c2:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xsjTHZcT/eeclyTilnayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNzcwOWU3YjBlZmJhMTI3MDI1YzgzZTVkMzE5NGM3MWJh
NDI4YzMwHhcNMjUxMDE5MTQwMTQ5WhcNMjUxMDIwMTQwMTQ5WjAzMTEwLwYDVQQD
EygzODAyMjY5MjQyOWYwY2EzODI3MWVmNmM4MTQwNjE3ZDk4NWU4ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyl/HPuD+R2uIi6j5pPRetw1i5mo
JroVRGVOrhalbqKWfkO5gPnci/3gxYKsTdN4IG8t8THS0BJHhFOi8unC/su1UOYE
IGkcqSnl/o77sVXQcdz9lcniNsKjlUPeY4+GsEyFyNqv14gIcLcDfzI2wLwATyr3
UGBK8LKGr5CC26pUtVtPJdX5PeuG6iAPZ30Aa5BsVkP4VDruI9F+j8xEv29YlNp2
6vnETGsUPuKLRWhZdEZsoop2nkFbG6T48eXiZhVMa996TshomwTUWoXBSiz8hDNJ
KtRcYyoHB5piNhtD77u/VF9PaMSdXNkqgNiCS2e7vbzIfy62Tjk1YPhUcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgCJpJCnwyjgnHvbIFAYX2YXo+gMB8GA1UdIwQY
MBaAFIB3Ceew77oScCXIPl0xlMcbpCjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgt
YmU5YWQyYmY3MjVmLzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgtYmU5YWQyYmY3MjVm
LzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQBDmlqg
ovyw15UDigN+c01Khyi9vD8vVvFRhpHMgYPps6U6cPerx0nztAm1TbIxFPHcFXyV
gDJUPSwqgItIVCqDapB6qNnh+3Q6DbdoVYkBPNeHaMLT3C3GPnO744PYpZBI+Pi0
RFvcrRvyOK+6vSfGz09maQq7Eo7K8gde9+9Fi1IM7kxfFcW3ckXag74wK1VnkMQm
dqYt90byM1p0Ux8Q1g3qN0X/7Adz+TWPt340rIy3elu6lNEr1/T9NuFJMjklX678
Ajxp21MTtCx75CkK2cvsc8I2T/mZDnz4OmJ4ECgGzt00KMtJ28a4waipLTnI+RtO
SCm7Md8WK6jCTg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:50 2025 by rpki-client