Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File:                     GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier:          ssZ2i1oYtpKfQhFqXEW5iECKsrzr8+MxLoQk1NYkOL4=
Subject key identifier:   53:78:07:FD:14:D2:D5:F0:72:10:E7:59:FB:61:21:E3:5C:17:72:6F
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer:       /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial:       019A003558E8700D71FAA5ADC18E7E9DCDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 06:01:27 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:27 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:27 +0000
Files and hashes:         1: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: 79XTL9ZY9FwT+eVLr2JqS6eb2pOZOVZY8t1l4od4Sf0=)
                          2: GujVnYJoAkzfCvxrFRrdm3vJm2A.roa (hash: M0aXCNhnx8CphMMO7CXVpEcNI+LOkAqIy/QV9QRD+Yc=)
                          3: cPOk9XaYMPnXv3i4A_ZWhKLa-c0.roa (hash: DgpoUG8V1y8nR1k4pl9K8GHgZay1hvO5tnK0jFOLUl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:58:e8:70:0d:71:fa:a5:ad:c1:8e:7e:9d:cd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
        Validity
            Not Before: Oct 20 06:01:27 2025 GMT
            Not After : Oct 21 06:01:27 2025 GMT
        Subject: CN=537807fd14d2d5f07210e759fb6121e35c17726f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:f5:95:d2:c9:b0:b4:20:eb:74:9a:e8:b2:
                    25:69:c2:a7:25:dc:bc:6b:66:ef:18:4d:ba:06:50:
                    74:0c:82:21:60:c1:9c:0d:c3:14:e5:81:81:97:1c:
                    c5:5e:3c:91:56:4a:05:99:e6:42:ab:bc:4e:82:3d:
                    75:50:4c:9e:e4:84:2a:08:3f:b2:cc:9f:29:7c:be:
                    7c:0b:4a:2c:7b:a0:01:f5:f1:87:24:a9:00:f7:c5:
                    34:8b:18:d0:9e:57:39:f2:0b:dd:66:ce:3c:69:b9:
                    7b:6d:8e:1e:91:9a:f8:98:72:cf:e2:73:a0:33:f7:
                    64:a6:46:bb:33:6c:f2:51:c6:41:15:a4:fd:0c:75:
                    3c:dd:bf:d6:5c:99:6d:f0:99:f8:e2:3a:bd:95:62:
                    46:e0:a8:1d:1f:fa:f2:09:11:25:ff:a1:3d:85:fa:
                    e9:5c:ea:5d:a2:60:56:33:e1:db:26:91:d2:02:91:
                    99:1d:58:45:b4:b9:85:dd:77:1b:6d:e8:a1:f2:6d:
                    c0:0e:4b:7a:8e:2a:1b:2f:53:85:a0:6d:71:ef:ce:
                    aa:47:09:39:23:a4:16:5d:0c:99:65:28:f8:30:4c:
                    e3:04:d8:ca:5e:cc:23:c0:fe:22:f2:65:b8:a2:a8:
                    20:7d:e1:b5:fa:57:05:50:4f:3f:c2:37:0b:0e:4d:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:78:07:FD:14:D2:D5:F0:72:10:E7:59:FB:61:21:E3:5C:17:72:6F
            X509v3 Authority Key Identifier:
                keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:94:f2:67:10:00:ee:f3:37:76:52:88:6e:94:86:98:71:
         d4:0f:2d:3b:02:8c:fa:16:b8:45:45:6f:9d:3f:f6:f4:04:01:
         f4:cf:70:6a:e2:fe:04:ff:61:1b:73:d8:6f:63:35:de:35:3a:
         0f:c5:cb:e7:34:b8:2c:1a:b3:14:e7:2b:01:db:e2:83:fb:0c:
         29:e2:9a:d6:11:44:a5:1c:90:b4:e1:8c:00:6e:c8:3c:d7:77:
         34:2f:b3:16:1d:7b:41:bc:22:0d:2d:94:e1:f1:25:00:30:29:
         f8:e1:09:b5:8d:fa:ba:a5:95:06:71:0a:7e:da:21:b6:60:53:
         60:45:41:63:22:b3:64:15:48:86:ab:b4:cf:32:00:2b:85:03:
         f3:c8:69:eb:2b:34:f6:6f:c1:d8:03:ef:99:56:80:94:73:9a:
         ba:f6:e8:d9:5b:43:17:e0:0c:b5:d9:81:5f:0d:42:c6:8f:a1:
         78:cc:ba:1d:c9:7f:fc:27:76:e4:8d:f5:9a:5b:cf:71:56:68:
         3a:52:dd:f1:00:8c:ea:8b:29:c0:69:e8:9a:06:0f:d9:d8:44:
         9d:cc:21:cc:0a:c4:45:b2:13:51:f4:92:30:e0:02:12:de:48:
         f1:dc:ed:74:9e:7b:d5:b8:72:7f:62:40:fa:fc:3e:e6:30:9e:
         41:c1:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:06:37 2025 by rpki-client