Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          P4kB51p1Hw/PICEzHAmtDxTeNKrPATHhTvYq+d4qtWo=
Subject key identifier:   9A:4F:0D:AF:E9:D1:71:1C:A9:32:6E:3C:50:A9:E8:B6:02:85:F6:71
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       0199FBEAEA7BF5DAACE978463D0E19AC8E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          0B8A
Signing time:             Sun 19 Oct 2025 10:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:40 +0000
Files and hashes:         1: 2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa (hash: F4E+yi6wuov8nVtjH23YAurT+H1Svha6Z7BC42V28wo=)
                          2: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (hash: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=)
                          3: M2T_h-HT-LjV3MxmhC3AaCL7DR0.roa (hash: JUe0w/L/a5YNGKCvQ5Od3tGqP8OCxA0GZG5F9koR5ws=)
                          4: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: ldAMbl2eqcJaOgZTjDwfwCf8ncQJoZlHjXAYGC/PFaY=)
                          5: hfZ9JmRYsdrX_WsZKnGJG03yjoY.roa (hash: KsXjtR8VJ0gF1kTfS5RfLRCRZJ2gEjdzhxwY2pQ41Hg=)
                          6: rkIPvHIufbwOu-FRJgP9G66-3w0.roa (hash: hME8qBgEoqk0HX2Ob9xc7hNEC72YuwxTDwDbWd+KQQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:ea:7b:f5:da:ac:e9:78:46:3d:0e:19:ac:8e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Oct 19 10:01:40 2025 GMT
            Not After : Oct 20 10:01:40 2025 GMT
        Subject: CN=9a4f0dafe9d1711ca9326e3c50a9e8b60285f671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:e0:5e:8b:3b:d1:ec:63:ea:9f:b7:2d:88:
                    ba:a1:03:01:58:cf:c4:30:bb:34:c2:3f:bb:1e:87:
                    a8:07:1c:56:7c:3a:28:d3:a9:e2:45:7f:a1:c0:82:
                    f9:02:9d:25:51:35:df:01:bb:f0:6d:b3:6c:9f:21:
                    58:5f:fc:08:26:f4:52:3d:33:52:47:c4:28:2a:fe:
                    9d:bf:95:9e:b3:92:35:5d:d8:b9:87:68:dd:55:cc:
                    72:d1:3f:88:da:ea:8a:71:76:93:52:4c:2b:41:17:
                    bc:7c:a7:eb:36:08:da:e6:83:3b:b7:3b:e4:61:4a:
                    47:54:fd:2a:1a:74:27:7c:f1:1f:67:5e:b0:24:c7:
                    f7:64:6f:31:38:04:80:b6:47:06:58:34:3f:d3:e7:
                    28:15:00:7e:94:aa:ed:95:e5:92:91:92:f8:3e:0a:
                    b3:94:75:30:22:75:3c:7a:d5:7f:c6:88:e4:2e:91:
                    9c:48:34:03:93:1e:4b:ef:41:6c:26:dd:fa:1c:e0:
                    8d:c9:08:fc:f5:ab:ab:2a:58:95:16:ee:bf:c6:b0:
                    56:e2:cb:37:9b:4d:2f:bf:f9:37:d3:2a:ab:87:b6:
                    77:86:86:2c:a2:d3:d4:64:97:0e:1f:89:83:d6:d3:
                    a0:56:98:14:fb:e8:b4:b3:86:08:a3:4f:b6:da:cb:
                    22:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4F:0D:AF:E9:D1:71:1C:A9:32:6E:3C:50:A9:E8:B6:02:85:F6:71
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8f:b6:55:8a:00:00:fe:2e:78:3e:53:c7:c5:c2:be:f5:2e:
         30:13:cf:82:8a:0a:46:db:b4:3c:e8:b4:b5:1c:6a:d4:76:98:
         46:1f:85:cc:db:76:82:a3:4e:bf:ff:7a:a3:0a:7e:67:b0:0d:
         37:c7:5c:13:94:f1:ed:66:2b:f0:76:ef:4e:9c:89:d1:3b:98:
         7f:1e:92:ff:b9:19:f3:d2:66:c5:fe:ac:75:ba:50:d9:07:dd:
         ab:0d:d9:f4:bd:f3:c8:1e:0f:0d:9e:22:64:99:99:5f:58:a4:
         d5:c2:32:fb:75:28:2c:f4:8c:3c:8f:be:50:40:d6:35:22:1f:
         3f:6f:da:1e:54:d1:60:db:dd:63:2c:1c:cd:c1:aa:0f:61:7d:
         4a:e9:a9:8a:2f:a5:a0:d8:d0:af:14:12:8e:48:7c:eb:73:21:
         62:bf:3b:43:41:09:d9:ef:30:40:14:4e:eb:16:06:5c:0a:e6:
         d7:46:fd:25:4d:0d:e6:dd:8e:51:29:bd:61:60:e4:c0:31:9e:
         fd:d8:a9:63:e9:26:18:0a:08:8f:37:99:10:17:fc:78:8f:45:
         02:ec:21:60:d2:5d:f5:88:6a:1b:33:d5:75:ca:02:83:48:b8:
         13:7e:35:31:2f:0b:c4:06:bf:ca:8e:30:bb:49:c3:27:1b:69:
         7d:e9:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:26 2025 by rpki-client