Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
File:                     Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft (raw, json)
Hash identifier:          VyHx+i6OIVX8YC9VHyT7cXV9rnbyl+OihqqI1qP6fPg=
Subject key identifier:   28:47:83:28:F8:AF:B6:1F:65:31:6C:F1:8B:58:A1:9B:88:4E:01:C6
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Certificate issuer:       /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial:       0199FC21C641512EDFACC6466CF60D944F91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
Manifest number:          0651
Signing time:             Sun 19 Oct 2025 11:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:35 +0000
Files and hashes:         1: 4ASzv8VWMQYFKDY_-XGCbimJW5s.roa (hash: 4zLzwFIqB9q7XlogNn2GDLJVXFyYSxghGw7cNNnYtt8=)
                          2: B4_oxATnGbDyQRnpDFsFel2qJro.roa (hash: Eu+Z19cukHF/X5BwY4vJJ3PD89GFZl84ZrwWgUf0Sdc=)
                          3: B627jyelsOrc-4KEk9rr5UX-6bs.roa (hash: emvror6oG2+K4wO+RDr3+Uj+3eP2vVbV6xrjlFdUiWQ=)
                          4: Ba1NqD6_p9vQrWB-kAyp0er5uHU.roa (hash: fRiDqhfW2rBzfJSvdE7QFaE7Ru5cnrq0/b1xWUv4QEU=)
                          5: FJERd9vUT0Kg_8tCO27uUpQBaGo.roa (hash: 12MUnTHhtFQGoQwHqPv1crFdaIeFV1soA/yVgXeNaTs=)
                          6: FY0PnzgS2EpiVOcfFbS9jXQ_rQs.roa (hash: SBku+C0JKoyJVJcQo1U5CGwXGTxRsDeNLCykfjm3tsM=)
                          7: Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl (hash: JO+YGPt6Opc9OLitrw3xHnz7AoR+VaVmvkrIx2bZQVo=)
                          8: K6GiiZJ71L0lYgovFnICdAk-1Ks.roa (hash: 6qHwOyZ8UfE4rkOQqwwP70JdW41FclRsGgCcII3xOE8=)
                          9: M1aqRzQAx0u0GH1aXLjObYZ4Q7k.roa (hash: mN6UichsOlqnG+M84GTpzNqXCEcMKcyFp6FqDGDV0E4=)
                          10: MSXSTFKnAwZwbqobS5_FZAQrg-M.roa (hash: D45Ar0ZBYy4iC6UD1t5qGymD/cKcsHTZdI0FaRgD4/k=)
                          11: PDIQfwBM2G7ffsnUH2YvcCfE3MM.roa (hash: sG/brPxpBzyg1NKJzaV3PK0r4VawovV+khB+BUBPlqs=)
                          12: Sw2GbKoJ8rfrZjEQTkFwYz2FnOg.roa (hash: vokvJGT+Pa2Ai2Kj9IpjJzrJytLkCCqfTkYZIe2tcyQ=)
                          13: VT6si4kLyd6zpNaqVEXQZbgj2Gk.roa (hash: wBULHsK9N7KoZlhMck164GyLKkfZrvnuLnG6dNTvUtU=)
                          14: VyPRPElyLMa64hjFDMtKRmA01ZE.roa (hash: +7F5UqAf5wUUZwuFkWwjFywpzFhfs0Yb0eBzU06/pPY=)
                          15: bgJ7rFWnfoshvC4eV7CAkgZqHG0.roa (hash: PATqRpXU1ld4RrBFHxUB48disbekj/eibE1opPwFCWU=)
                          16: fL9K7tZGGZ0rxKtEuSAiWj4Rpjg.roa (hash: m3RbbbRnXoZDyJVx1OpTbKRsiAgJOpn/2JivbbReHo0=)
                          17: fmODc7MENEc14rO10yX01KjqK28.roa (hash: uJCEf4lpY599iRYVqaOAvP8jY7fLqVDXB1BusGXHNpw=)
                          18: kvTlBi_B8QrdRGJqo_C6nAXRdfc.roa (hash: 6MLCaYZkCCpTI+u5625D24+Iiiya7eil7hcGEmC1dUY=)
                          19: lU9bl4hVEw5hzibuRIs13xmbj9M.roa (hash: ZUdsZ2gex8weJr9deejWFGIwiEepSjgNX4ZZr24MPDg=)
                          20: moCjhy9MjqXiFgMnAR9Fy5SDHgo.roa (hash: LUnUKR1Zotqdb56mM7OX5qPTEb698XgNZZiSiK3MEOQ=)
                          21: o41yDBZggn4lr9NsPB_Gp8GKfBM.roa (hash: KRnKN0lrEk1hL6MxXIHkfLYCNSrhlEIODabcvB9s1Rk=)
                          22: rW9xL-Blor3a7KeOFcdz4MZUIZ0.roa (hash: m4NWziBJ7p7f8NFdds1mBjp8BH+ppFVvWoMG+PNQoc4=)
                          23: tWCaBWq3ZgV3-7XX1cWsxbC1zrE.roa (hash: 1GYVtpcVNjgzgm/oYqnREnTQrGZnX2ki31par69caoA=)
                          24: u0kiBRm7lPy40aL5Utg1OzaItA4.roa (hash: dKGxS0Em7PGdI3BmuuAWqogEozKj12mYiRlt25Q1BKw=)
                          25: wu6ek6l2NBjXAnMwXL9G8HfYrWQ.roa (hash: RWycgtixOxP0odIoomQLaZ/UwguMZfM+nPBcfd6lNvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:c6:41:51:2e:df:ac:c6:46:6c:f6:0d:94:4f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
        Validity
            Not Before: Oct 19 11:01:35 2025 GMT
            Not After : Oct 20 11:01:35 2025 GMT
        Subject: CN=28478328f8afb61f65316cf18b58a19b884e01c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:88:c8:9f:0e:00:bf:dd:66:c5:b6:d6:f7:
                    ba:21:58:a6:ab:6a:04:17:f4:aa:44:86:44:4a:8d:
                    74:73:93:a5:0b:42:b5:39:92:8e:1e:45:b1:71:15:
                    a3:c5:20:0f:28:c6:b6:b8:82:72:a5:32:31:13:4d:
                    84:9a:7b:21:44:d2:bd:f9:77:30:fb:9b:07:af:9d:
                    36:90:91:eb:8c:3f:a2:b2:6a:07:84:e8:93:5e:e6:
                    c2:c7:ea:ba:d3:9a:79:04:62:72:64:ca:8d:ea:ed:
                    ba:a7:9e:02:2e:dc:de:f1:df:ea:a6:4c:ff:07:92:
                    83:7e:8d:90:01:3d:0d:05:68:c3:15:47:b1:2f:28:
                    94:e6:fe:d9:88:51:73:c8:2e:e4:b1:c8:48:2c:35:
                    39:f5:ca:10:14:35:ea:93:ed:1a:8f:76:db:04:5c:
                    8a:61:9b:39:35:d1:89:0e:d0:ea:b5:04:a6:e5:0e:
                    b0:65:f3:a0:1f:e3:7c:d3:7a:61:8b:80:10:e4:33:
                    54:23:53:c1:fe:19:7a:a4:4b:52:34:1a:8d:9e:33:
                    d4:cb:e8:2f:54:51:ca:a6:8c:a6:9e:6a:a0:0f:17:
                    32:ef:23:69:a4:2c:fb:ee:7e:e7:28:96:5a:96:1a:
                    eb:72:41:89:b7:f4:07:79:bd:bb:bf:94:47:e1:e4:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:83:28:F8:AF:B6:1F:65:31:6C:F1:8B:58:A1:9B:88:4E:01:C6
            X509v3 Authority Key Identifier:
                keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3e:b8:c2:6b:2f:39:1a:9b:67:24:49:bf:c1:11:3e:9a:36:
         69:34:be:70:ed:6f:b7:a8:57:7a:c7:58:a5:2e:ca:b7:97:de:
         79:90:57:46:35:cb:3e:b8:b3:b0:61:0f:46:f6:01:2e:dd:2b:
         23:6d:c1:65:47:c2:dc:25:64:ef:f5:fc:8a:f6:f4:24:fa:33:
         4a:32:f4:cb:11:06:8d:ec:da:90:1e:61:66:10:aa:ae:cb:84:
         f5:4f:2b:72:a1:a7:45:71:9c:7c:f9:f8:3d:1b:89:fe:db:c8:
         f8:44:9d:72:8d:66:73:d7:06:de:6b:0a:a9:2c:0d:70:20:95:
         af:92:80:46:b3:4f:85:26:92:7d:13:42:a7:a4:39:be:4d:9f:
         b0:f7:d8:5d:48:9e:10:4f:bf:83:6a:75:d6:4f:6d:28:64:3d:
         f0:da:cb:f8:b0:f9:a1:d4:91:9a:36:02:1c:06:a5:69:71:20:
         0a:fe:a2:f4:77:79:91:f4:b7:d1:8f:0c:ca:c0:b4:ae:3c:9a:
         ea:a8:fa:bf:53:23:88:08:01:d1:b3:15:7a:08:bf:ab:10:3c:
         c5:f7:08:78:3c:cb:44:4e:8f:69:58:28:c7:e3:bc:2b:35:70:
         09:09:6a:89:b2:ea:d1:0d:4f:a6:6b:4f:4f:ff:99:0a:f6:33:
         9c:a3:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:02 2025 by rpki-client