Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File:                     GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier:          uIoaxzWHDivs3rVWdEQUR84xVpCgz2qUCfY1KA48xEQ=
Subject key identifier:   CA:64:E1:86:F8:DC:3C:91:F9:7C:81:04:67:B4:0B:D9:68:FC:20:63
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0199FBB35C8994223EB54C15A56C3F59F720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 09:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 09:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 09:00:59 +0000
Files and hashes:         1: 31eja_tbnq_0jWNTgyvlK_3Sing.roa (hash: rmbPmmaIu4C2re+gcy24kBfyHlmaf45FfJvIO49/pOs=)
                          2: 3_ZiNbcF_l_fHARs-V4muQ6S87I.roa (hash: u01NktxURzNoH0tA5SjsqobM+AcImV1Of4eOpnXlaxk=)
                          3: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=)
                          4: 9VB1aXOxh3eNHmC250hMI5AYYc4.roa (hash: g7OAsEuuCakaPKvYwJw3TuKmx4U4hqcFPU7PCZgyfGA=)
                          5: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=)
                          6: CMJdala6pFhg-m_hIMesxyzbTAk.roa (hash: dvXeg+DcGeVh1vSS0AnLKUd1rN/dkpdkpg1fDCZ6b5g=)
                          7: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=)
                          8: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=)
                          9: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: tc0vR+LI+LmpbvdXn2pWdseIUb1BIsmZhcuOjpdNJ9A=)
                          10: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=)
                          11: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=)
                          12: UItLZsiO26x7QiRXdGLqfBj5i3A.roa (hash: YEdG4y28dnG+6B0iGrSVjqk69La+oWZl6VDLolSPKHk=)
                          13: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=)
                          14: Z0HFTEB-y-xMkY874DNYvhokt7o.roa (hash: fMTVowfbwy2vdbwi3DPoTLMlTmRBQt2PrhpbkbjG32k=)
                          15: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=)
                          16: cuI5lIMGONC-zhkO0Br-gP7t3DM.roa (hash: HgCokX5nX8AH6l8KDj8If1jUn+noyEm0cg4YnPECwI0=)
                          17: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=)
                          18: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=)
                          19: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=)
                          20: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=)
                          21: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=)
                          22: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=)
                          23: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=)
                          24: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:5c:89:94:22:3e:b5:4c:15:a5:6c:3f:59:f7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Oct 19 09:00:59 2025 GMT
            Not After : Oct 20 09:00:59 2025 GMT
        Subject: CN=ca64e186f8dc3c91f97c810467b40bd968fc2063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bf:be:5f:3b:f4:63:15:91:8c:52:fc:95:62:
                    b1:8e:1c:6e:f2:57:a5:46:19:c1:b0:6c:8c:68:20:
                    75:3d:01:3d:ba:6f:66:92:2e:96:e3:96:37:bb:23:
                    91:41:e8:76:2d:16:6e:15:e9:58:03:ea:aa:81:19:
                    23:a1:df:76:64:a7:b5:9c:9b:9b:c4:3b:47:96:29:
                    b4:6f:2b:4f:c1:19:73:24:74:f9:c7:f1:6f:7b:5d:
                    3e:ad:97:6d:1e:56:95:12:08:4d:a2:86:a8:7c:25:
                    48:26:ee:ac:6c:61:a1:42:a2:08:68:ea:26:43:de:
                    5a:3c:31:72:29:1c:45:ef:bd:99:e6:2c:5a:7a:73:
                    19:dd:f6:3e:33:5d:6c:5e:e3:37:0b:d7:62:3f:7e:
                    79:de:a2:c7:83:96:f6:f2:25:78:74:12:19:2e:56:
                    65:7e:40:66:54:3a:26:2f:33:be:cd:78:4d:a0:66:
                    b8:bd:99:12:c2:15:0a:10:bc:79:fc:6f:30:22:e9:
                    3a:9e:60:c5:d0:1a:14:ae:b5:07:32:20:0c:0b:53:
                    b2:f7:ea:9d:a5:a1:be:5c:44:a5:9f:47:a6:77:1a:
                    c3:9f:4b:7c:39:59:25:ca:c1:53:cc:86:04:b6:4a:
                    b7:2f:df:24:4c:10:ad:60:22:2d:f3:c9:a6:d7:29:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:64:E1:86:F8:DC:3C:91:F9:7C:81:04:67:B4:0B:D9:68:FC:20:63
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a3:c4:4f:a5:c8:47:af:9e:a4:33:26:6b:aa:0b:9a:f5:37:
         89:62:aa:51:51:a7:95:4e:e3:98:7d:bc:75:a3:9d:8d:bd:1e:
         ea:33:3d:a4:1a:dd:52:51:9c:3c:88:f2:26:1b:81:25:71:ad:
         4c:83:2a:40:7f:8d:95:b7:a7:35:25:81:6e:1e:b9:02:9b:9a:
         e7:84:db:a2:57:3a:12:04:a8:d5:0f:6c:ce:f3:f9:5f:74:f5:
         98:9f:fd:6e:7c:1d:e4:7c:90:78:6b:c7:07:f9:84:1a:48:d8:
         bc:ad:06:7b:d1:cc:c7:74:7e:71:cf:10:45:7d:3c:6b:74:1d:
         aa:fa:25:1a:fa:bd:1d:5d:2b:19:96:38:0b:97:34:cb:d0:52:
         ca:d0:b1:a0:f1:b3:58:6c:18:4c:6d:f1:e7:e5:7a:a9:17:a1:
         c8:92:d2:36:2e:4c:d2:44:f9:ec:e7:b6:ea:9e:7d:78:39:76:
         39:91:b7:46:cf:8d:66:6a:55:77:3d:65:d1:65:62:67:8d:e1:
         91:ac:7f:c6:0f:bd:ad:40:c7:ce:d9:a8:f3:6d:c7:75:99:eb:
         b3:b7:ee:40:a1:c8:8c:1c:ea:d3:8a:ef:94:2c:bf:61:78:34:
         a6:6c:eb:ce:12:f2:30:3d:f1:f4:ef:0a:85:30:a3:3f:e1:e0:
         32:b2:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:30 2025 by rpki-client