Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
File:                     gmkF0cEWiypmBwmtsg80xuTAPX8.mft (raw, json)
Hash identifier:          xKyAfTeWKKRq0+1CLqeCLhlk+O3jTpYVEps7Vunbq1I=
Subject key identifier:   6E:44:DF:65:70:CB:D4:CF:86:94:B4:D3:4B:17:2E:41:3B:1A:E8:64
Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Certificate issuer:       /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Certificate serial:       0199FD6AFD0788BA37B10AB9D394E7EE3EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 17:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:11 +0000
Files and hashes:         1: YsPCa2LhHTzsReR9IeNzv5T3mos.roa (hash: LDFsTcsV1AxqY+xNyJv9Hm+hGyPSKYS1sTcP7lh9G1w=)
                          2: gmkF0cEWiypmBwmtsg80xuTAPX8.crl (hash: YsIpAukZwz1YwDI2Ta005uh+rNrZjEInyNKP9JIMQNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:fd:07:88:ba:37:b1:0a:b9:d3:94:e7:ee:3e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
        Validity
            Not Before: Oct 19 17:01:11 2025 GMT
            Not After : Oct 20 17:01:11 2025 GMT
        Subject: CN=6e44df6570cbd4cf8694b4d34b172e413b1ae864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:88:6c:19:a1:b8:cd:be:75:7e:4a:aa:13:
                    96:f3:4e:6f:b2:d7:c9:50:51:94:53:bf:a7:0f:6e:
                    1e:94:5e:c4:21:f9:cf:dd:af:9a:b5:83:63:e8:aa:
                    69:13:e1:67:33:db:2c:49:10:57:4a:3a:2a:f7:ea:
                    67:b1:df:f1:14:28:75:70:31:42:10:b0:39:0a:7a:
                    1e:d0:c1:51:36:77:89:c8:24:6f:08:4a:bf:d5:44:
                    fe:24:05:f3:db:9e:6c:8c:2b:22:5a:8b:b9:e1:e2:
                    9e:d3:01:7e:06:44:b3:1b:e3:db:e5:da:30:c8:f5:
                    fd:06:c5:b2:3a:65:b4:3a:2d:be:34:aa:94:9f:1b:
                    62:57:ba:40:32:db:f6:ae:9d:f8:26:0c:a8:f1:7c:
                    d4:09:09:5d:74:c1:3a:2e:2c:40:2c:e4:53:10:ed:
                    ed:4d:b6:ab:df:68:07:3a:c3:2e:3c:77:65:bc:76:
                    f9:15:5a:20:13:6f:5f:99:02:3b:d5:99:ce:79:4f:
                    f9:e7:cf:ab:ad:67:98:91:f9:7a:9f:d8:d6:fa:f3:
                    cd:b5:f3:72:59:ec:ea:61:ef:d4:5a:79:ee:4d:4c:
                    2c:02:b4:04:44:e8:1e:96:7a:a2:fe:aa:8a:44:a5:
                    3d:cf:96:b9:f6:b5:d7:12:67:70:db:e3:b6:4b:02:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:44:DF:65:70:CB:D4:CF:86:94:B4:D3:4B:17:2E:41:3B:1A:E8:64
            X509v3 Authority Key Identifier:
                keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1b:27:62:f4:6c:0c:c4:12:88:ad:29:84:ad:b1:a3:1f:f9:
         60:f8:57:56:8c:19:3c:6c:8b:8f:2a:3c:54:ad:ca:6e:7b:89:
         5b:5a:c6:e3:c0:02:fa:07:19:2d:52:dc:f6:be:c5:c4:d7:18:
         d3:ad:2f:1a:ec:66:37:a4:84:35:16:d9:47:bb:18:96:b5:ce:
         2e:b9:00:52:03:82:ad:1c:e4:68:19:a2:9f:4d:72:0d:c7:c0:
         62:3c:69:67:3e:7c:a3:51:46:36:32:96:21:be:25:3c:67:9e:
         62:c3:79:19:70:9c:66:d1:7f:5e:0b:31:54:8d:06:36:73:d7:
         5a:14:d6:19:1c:1c:2d:7d:b9:d0:27:65:32:c1:a4:1a:c2:e0:
         9f:b6:98:81:a0:c0:04:eb:b3:42:c1:90:b8:d4:51:ed:f4:37:
         53:74:ba:8a:b0:48:ee:eb:e4:12:14:e9:ed:2f:ea:ab:a1:ac:
         dc:a4:cd:3c:45:f5:81:4d:fd:b9:70:77:41:ca:ec:dd:4c:f8:
         55:92:ec:b4:10:52:6c:4f:15:0e:19:b2:4e:00:bf:a6:3e:69:
         36:9b:43:29:1b:d4:c2:ff:68:6f:82:9a:18:96:22:4f:a1:ae:
         5a:0e:08:80:ce:a6:e7:26:14:b2:dc:cf:ea:04:ee:03:6d:f3:
         79:f6:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:59 2025 by rpki-client