Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File:                     GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier:          z45TU9GeLBpI9nUk3N/z7LsRULcdWnjg2M75xxFJvjY=
Subject key identifier:   28:23:70:1B:78:60:99:D5:B1:55:A3:61:5E:60:9F:58:71:E6:5C:C8
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0199FF9020AB8F12E6CEBCA7B5A4B11AB53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number:          16E9
Signing time:             Mon 20 Oct 2025 03:00:59 +0000
Manifest this update:     Mon 20 Oct 2025 03:00:59 +0000
Manifest next update:     Tue 21 Oct 2025 03:00:59 +0000
Files and hashes:         1: 31eja_tbnq_0jWNTgyvlK_3Sing.roa (hash: rmbPmmaIu4C2re+gcy24kBfyHlmaf45FfJvIO49/pOs=)
                          2: 3_ZiNbcF_l_fHARs-V4muQ6S87I.roa (hash: u01NktxURzNoH0tA5SjsqobM+AcImV1Of4eOpnXlaxk=)
                          3: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=)
                          4: 9VB1aXOxh3eNHmC250hMI5AYYc4.roa (hash: g7OAsEuuCakaPKvYwJw3TuKmx4U4hqcFPU7PCZgyfGA=)
                          5: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=)
                          6: CMJdala6pFhg-m_hIMesxyzbTAk.roa (hash: dvXeg+DcGeVh1vSS0AnLKUd1rN/dkpdkpg1fDCZ6b5g=)
                          7: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=)
                          8: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=)
                          9: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: xLeFQ6VfUpmQxOrvXlAsAgeTqQaY1ahCXNwFXdepJik=)
                          10: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=)
                          11: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=)
                          12: UItLZsiO26x7QiRXdGLqfBj5i3A.roa (hash: YEdG4y28dnG+6B0iGrSVjqk69La+oWZl6VDLolSPKHk=)
                          13: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=)
                          14: Z0HFTEB-y-xMkY874DNYvhokt7o.roa (hash: fMTVowfbwy2vdbwi3DPoTLMlTmRBQt2PrhpbkbjG32k=)
                          15: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=)
                          16: cuI5lIMGONC-zhkO0Br-gP7t3DM.roa (hash: HgCokX5nX8AH6l8KDj8If1jUn+noyEm0cg4YnPECwI0=)
                          17: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=)
                          18: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=)
                          19: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=)
                          20: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=)
                          21: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=)
                          22: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=)
                          23: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=)
                          24: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:90:20:ab:8f:12:e6:ce:bc:a7:b5:a4:b1:1a:b5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Oct 20 03:00:59 2025 GMT
            Not After : Oct 21 03:00:59 2025 GMT
        Subject: CN=2823701b786099d5b155a3615e609f5871e65cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:00:fb:8d:e4:1d:89:fa:e7:db:39:f6:f9:
                    cb:41:1d:b2:82:40:e7:0a:36:e5:1e:34:c8:e7:0b:
                    94:41:18:8f:5b:4b:3e:b3:3f:02:59:a0:f6:e1:99:
                    40:21:5e:f2:36:de:84:1c:24:d1:04:e6:26:60:6e:
                    15:a9:05:57:ff:61:a3:30:a7:e4:97:f1:0a:5d:24:
                    bf:7e:36:77:4e:47:b5:dc:82:79:8d:1e:c8:0b:b2:
                    b4:bc:98:d6:cb:d7:a7:d6:bf:c8:41:38:07:f8:53:
                    1a:34:e9:11:86:55:5a:84:80:1c:92:eb:d3:6f:ba:
                    f1:66:49:b1:fa:da:86:df:20:87:5f:54:14:37:9a:
                    65:c1:bd:e9:c7:3f:29:b9:70:32:a7:67:cc:c3:35:
                    2a:0d:b1:83:7f:c5:b1:67:5b:94:72:0f:db:f2:01:
                    3c:65:3e:3d:21:da:b7:dc:25:12:dd:69:90:41:55:
                    a6:7b:fa:99:8d:1d:73:01:e5:4e:32:25:22:c4:ee:
                    0b:64:9e:a4:10:8e:bf:8c:f8:87:62:79:84:d4:2e:
                    cf:1b:cc:0a:9a:d6:10:08:f3:ce:8b:9c:e9:ab:32:
                    54:90:df:dd:d9:33:2f:7a:38:e7:37:6b:c9:87:c6:
                    bc:94:f4:e4:fc:91:fe:36:83:5c:83:69:59:c1:d2:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:23:70:1B:78:60:99:D5:B1:55:A3:61:5E:60:9F:58:71:E6:5C:C8
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:18:0a:b9:76:e3:b0:9c:e7:3d:72:c4:a2:7e:b9:bc:2b:82:
         bb:c3:3f:97:71:0d:df:bc:e5:84:3b:b2:c4:91:e1:5f:90:e3:
         d7:2d:0f:1c:86:af:29:e7:2e:cf:a1:04:ce:8f:f5:4f:7e:c0:
         cf:55:8b:e2:bb:f0:f9:ea:79:cd:eb:73:f8:7a:dd:af:b4:b0:
         a6:5a:2b:28:cf:a4:cb:a5:ce:83:ff:17:2f:7f:9b:2e:cb:26:
         dd:92:bb:92:38:46:e2:57:50:9a:58:96:c4:39:bb:f6:bb:6d:
         5c:2c:87:ee:9f:a0:bb:b9:a3:d9:6a:49:ac:70:a2:22:44:21:
         0e:9a:fb:b0:58:0e:eb:82:45:c0:9d:da:42:be:14:d5:91:2b:
         e6:48:26:71:a3:a1:d1:c8:09:b0:aa:e9:2a:2d:61:94:46:9f:
         7b:ac:3e:a3:bc:c1:2d:a5:4c:98:be:1d:81:6e:a1:dd:43:e3:
         c6:97:52:6c:2f:4d:b7:38:5a:1b:24:8a:6f:32:d9:bb:af:5d:
         c1:f6:21:08:e1:0f:fd:5f:c0:f5:74:29:ca:c6:fb:24:0e:23:
         30:fb:25:a9:d4:ec:ca:3f:25:f2:de:a1:31:af:d1:21:bf:a7:
         df:ec:4f:19:06:83:05:a2:68:61:74:2f:30:d1:6a:88:c3:92:
         92:f9:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:49 2025 by rpki-client