Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft
File:                     gm6310-hBxWX-jM5-_iDHC6Vssc.mft (raw, json)
Hash identifier:          /dZacw+G47/aJX7Yx4nPqpxw5TPHAdEvzyjwf0DgG3I=
Subject key identifier:   3E:45:A3:96:E1:8D:7F:65:83:C5:F2:6C:63:9F:C6:A2:95:AD:B0:47
Authority key identifier: 82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7
Certificate issuer:       /CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
Certificate serial:       0199FF2275081833548EE9F2FE3D257904AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft
Manifest number:          16E1
Signing time:             Mon 20 Oct 2025 01:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:12 +0000
Files and hashes:         1: 92eglBFm4UMAVtPH9IkG9URQIWk.roa (hash: bpICQo3Md95UoWjh41NuV2joPCJhpEI/T4pNh3i8ITQ=)
                          2: gm6310-hBxWX-jM5-_iDHC6Vssc.crl (hash: bNAy2x/In71g1+DFabqSA17HVb+O5/TCl88T4Flg7pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:75:08:18:33:54:8e:e9:f2:fe:3d:25:79:04:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
        Validity
            Not Before: Oct 20 01:01:12 2025 GMT
            Not After : Oct 21 01:01:12 2025 GMT
        Subject: CN=3e45a396e18d7f6583c5f26c639fc6a295adb047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:12:9f:8a:00:db:1f:63:5c:aa:8d:0c:5f:
                    d3:f6:a4:06:72:60:c5:ae:41:7a:f4:f8:ef:6b:46:
                    5b:87:3b:ee:94:99:ac:25:60:05:8d:a1:cc:7a:6a:
                    35:2c:d2:d0:9a:4e:91:59:48:a3:d2:74:e5:94:27:
                    18:8d:44:09:43:1f:da:a0:6a:32:7f:1a:c7:0f:bd:
                    bd:a5:67:72:af:ca:bc:6c:49:78:90:f2:ea:94:64:
                    ca:78:29:6f:b7:c8:a9:c7:c1:54:aa:20:5f:60:4b:
                    36:7a:61:29:85:af:6a:82:4e:b9:43:28:a7:1e:36:
                    9a:ab:70:fc:08:58:31:7b:98:7a:b1:30:a3:18:69:
                    a2:64:9f:f2:9b:9b:20:31:54:35:96:e4:a2:a7:56:
                    fe:9e:3f:3c:ae:c2:4e:e7:b6:11:aa:7e:06:71:60:
                    45:8d:03:ff:88:d3:39:83:fc:78:c2:b4:22:9c:26:
                    b5:4e:8d:68:0a:40:80:f1:1a:8f:4d:5b:2e:63:6e:
                    84:0f:76:89:7f:e5:17:20:e0:9a:fb:a5:d6:b1:62:
                    0e:7b:a5:b7:11:71:df:bd:9b:0c:8c:17:f9:07:03:
                    1d:20:c1:4f:87:9d:86:17:59:1c:84:91:77:db:9f:
                    9e:cf:a1:48:41:dd:f3:af:1c:62:88:33:99:39:35:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:45:A3:96:E1:8D:7F:65:83:C5:F2:6C:63:9F:C6:A2:95:AD:B0:47
            X509v3 Authority Key Identifier:
                keyid:82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:fb:22:63:b1:f2:c4:cd:fe:88:21:a5:5a:61:b4:d3:0a:
         71:95:10:de:a9:c7:7e:c6:a1:3f:aa:9d:47:c3:40:07:52:53:
         23:c3:0e:99:50:6b:b5:37:f7:c6:4c:72:d7:8a:28:eb:90:46:
         ce:f6:1e:78:2e:cd:05:f2:29:59:8b:87:cf:85:22:81:96:ae:
         4e:02:e3:cd:79:9b:e6:0f:44:03:ff:7f:db:dc:19:43:24:e1:
         41:7f:e9:df:4c:73:49:5e:41:16:00:af:89:10:98:99:12:f1:
         a1:6d:7e:22:1e:19:c7:aa:9a:ba:95:46:57:23:94:7b:f1:95:
         cf:a0:86:ae:ed:aa:6b:b9:f1:cd:f8:4d:a1:02:23:28:72:a1:
         f7:8d:ae:80:ab:b1:f8:83:64:e2:ef:a4:eb:ed:90:29:2d:6c:
         dd:06:22:6f:a4:40:eb:6e:30:63:5f:4b:94:6a:93:86:48:f5:
         f1:d4:9a:60:e1:92:5c:85:0e:56:bf:e0:6a:70:f2:2c:9c:0f:
         22:80:ac:09:2b:f8:0e:12:5f:de:10:9b:dc:69:c9:b5:4f:29:
         8a:f3:95:f1:b0:63:82:c5:e0:21:71:de:db:3d:17:6c:77:cb:
         56:0d:9a:8d:cc:56:78:23:44:32:be:9a:e3:da:b6:d3:46:e6:
         23:d6:37:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/InUIGDNUjuny/j0leQStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNmViN2Q3NGZhMTA3MTU5N2ZhMzMzOWZiZjg4MzFjMmU5
NWIyYzcwHhcNMjUxMDIwMDEwMTEyWhcNMjUxMDIxMDEwMTEyWjAzMTEwLwYDVQQD
EygzZTQ1YTM5NmUxOGQ3ZjY1ODNjNWYyNmM2MzlmYzZhMjk1YWRiMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vQSn4oA2x9jXKqNDF/T9qQGcmDF
rkF69Pjva0ZbhzvulJmsJWAFjaHMemo1LNLQmk6RWUij0nTllCcYjUQJQx/aoGoy
fxrHD729pWdyr8q8bEl4kPLqlGTKeClvt8ipx8FUqiBfYEs2emEpha9qgk65Qyin
Hjaaq3D8CFgxe5h6sTCjGGmiZJ/ym5sgMVQ1luSip1b+nj88rsJO57YRqn4GcWBF
jQP/iNM5g/x4wrQinCa1To1oCkCA8RqPTVsuY26ED3aJf+UXIOCa+6XWsWIOe6W3
EXHfvZsMjBf5BwMdIMFPh52GF1kchJF325+ez6FIQd3zrxxiiDOZOTVyeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5Fo5bhjX9lg8XybGOfxqKVrbBHMB8GA1UdIwQY
MBaAFIJut9dPoQcVl/ozOfv4gxwulbLHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ202MzEwLWhCeFdYLWpNNS1faURIQzZWc3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wMjE4Y2YtZDFhOC00NzI1LWJhOTYt
NTI2NWE3MjNmOGQ0LzEvZ202MzEwLWhCeFdYLWpNNS1faURIQzZWc3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wMjE4Y2YtZDFhOC00NzI1LWJhOTYtNTI2NWE3MjNmOGQ0
LzEvZ202MzEwLWhCeFdYLWpNNS1faURIQzZWc3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/j7ImOx
8sTN/oghpVphtNMKcZUQ3qnHfsahP6qdR8NAB1JTI8MOmVBrtTf3xkxy14oo65BG
zvYeeC7NBfIpWYuHz4UigZauTgLjzXmb5g9EA/9/29wZQyThQX/p30xzSV5BFgCv
iRCYmRLxoW1+Ih4Zx6qaupVGVyOUe/GVz6CGru2qa7nxzfhNoQIjKHKh942ugKux
+INk4u+k6+2QKS1s3QYib6RA624wY19LlGqThkj18dSaYOGSXIUOVr/ganDyLJwP
IoCsCSv4DhJf3hCb3GnJtU8pivOV8bBjgsXgIXHe2z0XbHfLVg2ajcxWeCNEMr6a
49q200bmI9Y3vw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:25 2025 by rpki-client