Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File:                     Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier:          TnoOfEUKZTHmjToILyxm4Umu64OiNsa+BqQow0M4vvQ=
Subject key identifier:   8A:B0:6B:FE:9C:87:A7:DF:0E:BE:1F:40:D3:90:F3:55:60:DA:CA:8F
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       0199FC5857B96096D8B41184252E327BF768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 12:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:11 +0000
Files and hashes:         1: FPpOTBKmvHdioInyAceH2PiTSvg.roa (hash: 7KPVyyz4s0tMlqQlKNiyZSMIJyFa//iS/eNcNHIUsks=)
                          2: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: 7r2Zca2IO2THtjYM/5J8buts4wTpo02htnkRmfAcLMc=)
                          3: YUvzYRFbDZwpo5_LDw6OQYXrOWU.roa (hash: A9tNEkwBv00N9f8wPpHIeu7SSAIiBzAHZmfokT+2re4=)
                          4: fbMdnuR0es_HjgTaYkDoz6AE4eQ.roa (hash: b27haQtyNO61SdNpnuLEVI2t6aVsy/NGgbKBT4i0JIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:57:b9:60:96:d8:b4:11:84:25:2e:32:7b:f7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: Oct 19 12:01:11 2025 GMT
            Not After : Oct 20 12:01:11 2025 GMT
        Subject: CN=8ab06bfe9c87a7df0ebe1f40d390f35560daca8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:99:cf:fd:29:1d:c6:00:5f:61:96:65:8a:
                    ff:1d:eb:8b:9b:d7:69:36:bd:cd:33:ed:24:44:9d:
                    03:0a:1d:2d:63:f6:86:96:e3:8e:cf:78:55:60:88:
                    19:97:58:6a:ae:0e:d7:b9:07:17:20:09:44:55:82:
                    f3:31:26:73:30:e4:63:39:76:a7:65:26:20:ff:93:
                    e5:54:c2:c1:78:9c:82:0a:87:c7:20:1c:68:7d:15:
                    d4:89:f5:e3:60:c2:81:90:14:94:86:b3:45:72:e2:
                    31:47:1d:63:4a:dd:78:ee:19:16:3e:13:fe:21:09:
                    58:11:28:9b:a3:72:e3:6c:7c:b3:31:c8:b0:d6:67:
                    e7:af:c5:2b:ac:04:30:c6:fe:53:d1:d2:98:5f:f5:
                    7c:b9:c2:9b:1d:c4:63:3b:f6:19:01:cd:cc:24:bb:
                    a9:b8:22:55:e4:23:f4:c3:81:2e:e3:4d:33:b8:41:
                    f9:fe:ab:a1:34:04:0e:4d:5b:86:94:a1:53:10:0a:
                    1a:08:c9:47:83:89:3d:99:f7:45:d4:1b:1a:9c:3d:
                    b4:a0:89:68:37:67:ab:4e:e5:50:48:8e:f1:f2:dc:
                    5e:ff:85:ef:93:4a:ab:d3:f9:6b:45:54:33:80:38:
                    f3:6c:ff:ab:ea:06:66:2e:71:80:00:5a:a9:79:aa:
                    45:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B0:6B:FE:9C:87:A7:DF:0E:BE:1F:40:D3:90:F3:55:60:DA:CA:8F
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:96:33:45:85:75:5a:0b:4f:84:12:43:1c:fc:a0:8f:df:
         fc:28:10:54:60:c3:b6:3b:8d:90:18:d0:b4:c8:81:46:c1:89:
         b8:54:b9:3e:b0:8e:23:30:68:07:d7:4b:34:35:98:78:ba:01:
         27:0b:b5:29:e5:98:01:3d:c0:ac:6b:de:a4:5e:77:20:ab:e4:
         c2:08:79:4f:9f:93:77:ff:7a:34:c6:5c:c6:b4:90:ef:fc:77:
         bf:23:86:cc:54:c7:84:14:f6:04:ba:ad:a0:42:38:8b:a0:a1:
         9c:50:a3:76:81:b1:04:88:7e:8c:2d:de:fd:3d:c0:90:07:4b:
         be:5a:de:bb:57:13:1f:65:2f:06:60:2f:d4:99:11:98:43:2e:
         fe:30:1b:52:74:04:90:36:07:e8:93:ad:f8:a3:21:c4:53:63:
         87:c8:ea:46:2c:c0:17:ed:f9:55:49:b3:00:af:22:60:cd:8d:
         05:b0:08:19:a5:b6:9e:1c:e7:e3:33:10:91:f7:71:9c:88:15:
         e0:6c:f1:1c:d1:be:21:5f:00:bb:29:a1:59:47:4a:b5:ea:3a:
         b9:1f:bf:7b:cc:6a:00:88:99:df:f3:de:e4:3f:97:23:68:6b:
         cb:ca:01:b0:7a:f4:cc:de:d4:11:a1:69:66:95:90:6a:d8:bd:
         e8:eb:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:29 2025 by rpki-client