Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File:                     Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier:          8Yvomyf3qkzGwuNjr4ec0KzK/30UohM0f/W5yBJkUK8=
Subject key identifier:   F7:3A:28:CB:7C:98:B3:41:7B:DE:7B:59:B9:43:E5:37:E9:98:D0:D4
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       0198D4DFEA943EE4738BD4F1BF40646C0B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 03:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:41 +0000
Files and hashes:         1: FPpOTBKmvHdioInyAceH2PiTSvg.roa (hash: 7KPVyyz4s0tMlqQlKNiyZSMIJyFa//iS/eNcNHIUsks=)
                          2: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: GsqglLvBWo66iCDbx/tn27LQ9oz+WEaUILkSUkYQJQ0=)
                          3: YUvzYRFbDZwpo5_LDw6OQYXrOWU.roa (hash: A9tNEkwBv00N9f8wPpHIeu7SSAIiBzAHZmfokT+2re4=)
                          4: fbMdnuR0es_HjgTaYkDoz6AE4eQ.roa (hash: b27haQtyNO61SdNpnuLEVI2t6aVsy/NGgbKBT4i0JIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:ea:94:3e:e4:73:8b:d4:f1:bf:40:64:6c:0b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: Aug 23 03:01:41 2025 GMT
            Not After : Aug 24 03:01:41 2025 GMT
        Subject: CN=f73a28cb7c98b3417bde7b59b943e537e998d0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:32:52:96:b6:e8:01:7b:6b:a8:e5:9f:33:
                    1b:65:13:d9:34:8a:65:3d:6f:c8:38:38:b1:c0:bd:
                    61:d6:7e:36:bb:a2:ba:45:39:06:99:90:58:da:49:
                    19:15:f6:31:d5:63:dc:d8:f5:2e:3e:cc:30:4e:28:
                    98:02:56:d1:06:d5:8d:24:c7:ad:bf:b6:8c:5a:4e:
                    5a:50:f1:ca:c1:fb:f5:fe:c4:b9:8a:56:c1:49:66:
                    24:0f:af:84:2e:f6:5c:a6:4b:19:f3:17:5d:e4:29:
                    54:17:59:dd:5d:b4:82:54:2d:dc:28:1f:e9:ad:9b:
                    04:d5:bf:26:c6:ef:eb:8a:2c:4f:2a:62:fa:a7:d2:
                    36:48:87:07:4d:3d:71:79:12:c8:55:63:1f:32:b7:
                    f2:69:5f:9a:65:8a:50:b1:14:d0:34:69:f5:d9:3b:
                    b9:0b:2c:fd:7c:4c:25:85:99:3a:fb:26:5b:d8:61:
                    b5:e6:2f:4b:0a:89:3d:72:b0:6c:e1:93:74:83:60:
                    fd:b1:a1:b5:9e:c4:4f:2c:d5:a4:45:7c:62:3c:a3:
                    f0:76:c0:b5:be:12:f8:78:04:94:f8:88:3d:1c:d7:
                    0e:10:9d:9b:66:e1:3e:5d:4a:c6:e6:9a:d1:9d:be:
                    d4:9c:da:5d:0b:66:12:65:1c:e1:ec:66:59:9d:db:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3A:28:CB:7C:98:B3:41:7B:DE:7B:59:B9:43:E5:37:E9:98:D0:D4
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c3:d0:b9:70:a8:65:6c:59:99:12:ba:94:c5:e4:67:2d:e9:
         cc:43:00:b6:3d:79:6b:5e:af:a7:a7:b7:c8:f5:ba:d7:0b:d6:
         c2:d4:8d:b6:bf:5c:de:12:87:0b:93:b9:43:59:65:ad:da:17:
         f6:a4:69:10:31:96:33:1c:6f:8d:6c:43:c8:c3:fd:24:85:32:
         d1:f8:d3:54:e6:44:4f:2a:91:49:43:d4:e2:63:02:ad:74:0e:
         e0:91:17:78:d8:f9:bc:d5:d0:e1:29:91:42:6e:10:0a:32:53:
         2a:d5:59:a5:50:46:19:f2:bc:fd:50:c7:f9:95:bb:86:92:d3:
         67:81:ed:99:9c:09:b8:50:c5:3b:11:1c:21:47:a2:69:6a:0a:
         aa:4b:4e:14:a0:13:b2:61:04:e0:29:cd:1a:a8:7b:4e:ea:30:
         e5:04:a9:ed:19:a9:be:aa:3f:52:bf:1d:91:f5:3e:7b:2e:1b:
         75:f9:1b:23:c7:8c:61:d4:34:22:72:50:51:b6:b1:94:1f:17:
         ff:5e:25:77:42:29:e9:93:31:bb:6a:01:eb:71:64:fb:d7:ba:
         b5:bb:7d:e1:ab:da:cc:d9:c6:4b:88:e7:bc:a2:5a:75:5e:35:
         4b:3c:f3:1d:eb:cf:f5:74:36:fd:fa:fb:6e:0d:00:8d:b8:0a:
         22:18:bf:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3+qUPuRzi9Txv0BkbAuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWEyMmRiYzhkYmQyZDcyNDhkZWFmZjQ3ZTMzOTBmNzdm
YjRiMGIwHhcNMjUwODIzMDMwMTQxWhcNMjUwODI0MDMwMTQxWjAzMTEwLwYDVQQD
EyhmNzNhMjhjYjdjOThiMzQxN2JkZTdiNTliOTQzZTUzN2U5OThkMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9oyUpa26AF7a6jlnzMbZRPZNIpl
PW/IODixwL1h1n42u6K6RTkGmZBY2kkZFfYx1WPc2PUuPswwTiiYAlbRBtWNJMet
v7aMWk5aUPHKwfv1/sS5ilbBSWYkD6+ELvZcpksZ8xdd5ClUF1ndXbSCVC3cKB/p
rZsE1b8mxu/riixPKmL6p9I2SIcHTT1xeRLIVWMfMrfyaV+aZYpQsRTQNGn12Tu5
Cyz9fEwlhZk6+yZb2GG15i9LCok9crBs4ZN0g2D9saG1nsRPLNWkRXxiPKPwdsC1
vhL4eASU+Ig9HNcOEJ2bZuE+XUrG5prRnb7UnNpdC2YSZRzh7GZZnds33QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPc6KMt8mLNBe957WblD5TfpmNDUMB8GA1UdIwQY
MBaAFBpaItvI29LXJI3q/0fjOQ93+0sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUt
MTVkMzI3MDliZDBmLzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUtMTVkMzI3MDliZDBm
LzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8PQuXCo
ZWxZmRK6lMXkZy3pzEMAtj15a16vp6e3yPW61wvWwtSNtr9c3hKHC5O5Q1llrdoX
9qRpEDGWMxxvjWxDyMP9JIUy0fjTVOZETyqRSUPU4mMCrXQO4JEXeNj5vNXQ4SmR
Qm4QCjJTKtVZpVBGGfK8/VDH+ZW7hpLTZ4HtmZwJuFDFOxEcIUeiaWoKqktOFKAT
smEE4CnNGqh7Tuow5QSp7Rmpvqo/Ur8dkfU+ey4bdfkbI8eMYdQ0InJQUbaxlB8X
/14ld0Ip6ZMxu2oB63Fk+9e6tbt94avazNnGS4jnvKJadV41SzzzHevP9XQ2/fr7
bg0AjbgKIhi/5g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:37 2025 by rpki-client