Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
File:                     GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json)
Hash identifier:          sCpWcUQeZ7rG0JzUJuf/T0OLG02zuEcRqYRyW11Khrs=
Subject key identifier:   10:2A:F4:F5:C1:E5:2D:C8:17:C1:08:D3:1B:5D:15:F0:B7:AD:F4:E3
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Certificate issuer:       /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial:       0199FB7CB3A0AEFFAE9347D9A92368F95136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 08:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:17 +0000
Files and hashes:         1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: yuQDdnus2RCOt/SdgucVzO/Q54pifUTz6grYa+wBbuo=)
                          2: PgHBT14XbyMI_bDsD-5F89TwxvI.roa (hash: yY+dt31JYDSsLmacNs98NxKQjn/3/Xoq5ab4x7nUyV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:b3:a0:ae:ff:ae:93:47:d9:a9:23:68:f9:51:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
        Validity
            Not Before: Oct 19 08:01:17 2025 GMT
            Not After : Oct 20 08:01:17 2025 GMT
        Subject: CN=102af4f5c1e52dc817c108d31b5d15f0b7adf4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:7e:d6:82:a3:59:d9:a7:64:d0:fb:47:cc:
                    61:1e:d9:b8:02:5c:1a:55:a3:59:7c:ed:05:8a:6a:
                    9d:6e:b1:d4:9b:a2:80:28:aa:61:41:8a:e9:34:11:
                    73:73:60:84:22:ec:92:ce:df:3c:23:55:da:ee:3f:
                    16:73:8c:ef:23:c9:22:63:75:bf:38:8c:9f:a9:97:
                    75:07:ee:71:4e:83:4f:d3:fb:6c:7c:91:d2:0a:c6:
                    63:f2:f9:14:20:eb:34:03:88:2a:ad:0a:7b:43:02:
                    db:c7:d8:3c:48:72:3c:8c:dc:dc:e5:33:4c:09:6d:
                    30:c1:a7:74:3f:c4:8b:ae:e4:1e:48:c6:f5:33:08:
                    ea:8f:66:2f:2e:8f:96:a6:e0:6f:c3:37:ae:c3:8b:
                    93:f3:d9:4e:6a:1a:49:68:38:af:bb:7c:71:75:e0:
                    a7:cb:11:91:39:ee:4d:a0:7a:74:75:51:92:bf:b1:
                    85:6f:b1:ad:6c:0d:86:a7:e7:75:c5:1f:e6:5d:ce:
                    79:19:54:4e:d6:b1:4f:39:11:e9:c7:a9:a0:b1:ba:
                    27:e5:81:81:45:93:de:97:c4:10:dc:30:8d:8e:9e:
                    eb:13:9c:42:a9:69:1e:98:c5:3b:9f:0d:66:81:a5:
                    42:bb:e4:8d:24:7e:17:6b:24:26:f2:d4:e9:86:21:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2A:F4:F5:C1:E5:2D:C8:17:C1:08:D3:1B:5D:15:F0:B7:AD:F4:E3
            X509v3 Authority Key Identifier:
                keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:ce:8c:b2:3f:4c:e6:65:d1:be:b9:bf:bb:cd:a7:ef:df:
         7a:c0:80:d5:f9:44:15:63:b9:21:5b:a5:05:30:5d:2d:82:58:
         b2:b1:73:c3:5b:89:05:d9:a6:76:a7:56:30:4f:9e:97:ab:7e:
         ee:3c:1b:3b:73:51:35:15:e1:ef:39:fc:87:e7:7d:df:25:6b:
         3e:29:a6:bb:89:a9:55:f5:b2:77:68:ab:f7:10:d0:a9:1e:ca:
         7c:05:7b:30:ae:c6:77:44:c3:87:91:3e:c3:2f:9e:ba:af:3a:
         fc:45:a3:b4:44:dd:2e:4f:4e:e6:90:92:75:40:f9:f4:d9:ca:
         f0:7c:16:1b:c8:75:86:f1:ca:10:4f:31:ae:c4:fa:82:3e:aa:
         af:95:32:f1:19:1b:b6:58:9f:60:a4:15:eb:7b:70:fe:fb:6d:
         e3:bc:a0:2c:12:a0:23:98:b0:76:68:52:b1:2b:33:e3:e3:cf:
         0e:e6:79:7d:2f:d2:b3:ac:56:72:8f:88:69:c2:f3:cf:8d:ae:
         b0:a7:2c:3a:c2:f8:95:ea:33:02:45:bd:68:bc:90:37:57:84:
         33:16:72:db:b3:a5:8f:88:85:46:5b:37:9e:60:2f:9d:f6:82:
         fd:35:7d:61:e7:50:da:76:ca:34:25:8a:28:ee:01:73:54:a6:
         81:b1:07:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fLOgrv+uk0fZqSNo+VE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTJlMzdkYzhjZjQ1NjM0YjJjZGJjZjNmMTAwNTRhMWM2
MTE2OTcwHhcNMjUxMDE5MDgwMTE3WhcNMjUxMDIwMDgwMTE3WjAzMTEwLwYDVQQD
EygxMDJhZjRmNWMxZTUyZGM4MTdjMTA4ZDMxYjVkMTVmMGI3YWRmNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJB+1oKjWdmnZND7R8xhHtm4Alwa
VaNZfO0FimqdbrHUm6KAKKphQYrpNBFzc2CEIuySzt88I1Xa7j8Wc4zvI8kiY3W/
OIyfqZd1B+5xToNP0/tsfJHSCsZj8vkUIOs0A4gqrQp7QwLbx9g8SHI8jNzc5TNM
CW0wwad0P8SLruQeSMb1Mwjqj2YvLo+WpuBvwzeuw4uT89lOahpJaDivu3xxdeCn
yxGROe5NoHp0dVGSv7GFb7GtbA2Gp+d1xR/mXc55GVRO1rFPORHpx6mgsbon5YGB
RZPel8QQ3DCNjp7rE5xCqWkemMU7nw1mgaVCu+SNJH4XayQm8tTphiFJNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAq9PXB5S3IF8EI0xtdFfC3rfTjMB8GA1UdIwQY
MBaAFBqS433Iz0VjSyzbzz8QBUocYRaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kOGI2ZWEtNzMwYy00NjM5LTk0ZmEt
NDU3MjcyODM3YWE2LzEvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kOGI2ZWEtNzMwYy00NjM5LTk0ZmEtNDU3MjcyODM3YWE2
LzEvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKrOjLI/
TOZl0b65v7vNp+/fesCA1flEFWO5IVulBTBdLYJYsrFzw1uJBdmmdqdWME+el6t+
7jwbO3NRNRXh7zn8h+d93yVrPimmu4mpVfWyd2ir9xDQqR7KfAV7MK7Gd0TDh5E+
wy+euq86/EWjtETdLk9O5pCSdUD59NnK8HwWG8h1hvHKEE8xrsT6gj6qr5Uy8Rkb
tlifYKQV63tw/vtt47ygLBKgI5iwdmhSsSsz4+PPDuZ5fS/Ss6xWco+IacLzz42u
sKcsOsL4leozAkW9aLyQN1eEMxZy27Olj4iFRls3nmAvnfaC/TV9YedQ2nbKNCWK
KO4Bc1SmgbEHEA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:05 2025 by rpki-client