Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
File:                     G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json)
Hash identifier:          W16+3GkAFGIA7/ERB22W9pnvKRp8wf4/LRg4GlJSZwI=
Subject key identifier:   8F:0A:D3:4C:17:26:B6:D1:DA:CD:4C:1D:07:20:33:9F:CD:8E:F8:61
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Certificate issuer:       /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial:       0199FB45F51BE93C1FADD6A847804BBE1267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 07:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:29 +0000
Files and hashes:         1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: 5iZM0ajte3RGNrm7dsduTxCqHfTK4N4KWl6azFOuIFI=)
                          2: jFeXSLOcmKjdy19dvekbxvl1dmc.roa (hash: 52Ov8zQceO7HlblWWc/Kf8ebS6bj291XEV6Vi2okLGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:f5:1b:e9:3c:1f:ad:d6:a8:47:80:4b:be:12:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
        Validity
            Not Before: Oct 19 07:01:29 2025 GMT
            Not After : Oct 20 07:01:29 2025 GMT
        Subject: CN=8f0ad34c1726b6d1dacd4c1d0720339fcd8ef861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2d:4f:1d:1b:9b:1d:dd:36:c8:7b:3c:85:46:
                    b6:cf:cd:17:b4:03:ad:06:0e:0a:f7:ce:52:18:f1:
                    3a:b0:eb:52:dd:bf:dc:85:0c:35:3b:be:f9:46:8c:
                    c4:08:0b:c0:4c:07:ff:d3:16:b9:e7:31:e2:44:b1:
                    c5:52:72:69:9f:1e:4f:24:a7:b7:79:23:b1:7b:72:
                    27:0f:17:66:55:29:a2:26:0c:44:ce:45:8f:01:28:
                    50:2b:0e:4f:7e:33:40:b4:22:8f:27:2a:e2:22:b8:
                    60:9a:7f:d2:8f:b9:41:77:aa:49:46:1b:58:db:c9:
                    4d:bd:cb:b9:da:a0:49:aa:cb:62:9d:e0:2e:00:f4:
                    b7:e7:05:f3:51:1d:a1:f0:ae:15:82:41:66:33:44:
                    c3:b8:c2:40:3c:d0:a4:a6:52:4e:70:f2:6e:6c:a2:
                    39:69:25:37:47:df:75:0c:20:4f:3f:ad:60:f2:b0:
                    f3:90:6e:ad:97:c0:3c:85:9b:ad:11:f1:a4:95:19:
                    9e:14:59:ec:5b:e0:1f:77:80:22:00:df:88:b6:c4:
                    e0:24:c5:d0:30:23:e4:56:c1:06:69:c5:60:03:25:
                    19:d8:bd:f3:a2:2b:57:d8:6a:5e:72:34:31:5e:c9:
                    2d:09:b2:c7:e1:01:de:c2:50:03:d0:d6:a5:51:01:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0A:D3:4C:17:26:B6:D1:DA:CD:4C:1D:07:20:33:9F:CD:8E:F8:61
            X509v3 Authority Key Identifier:
                keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a8:bc:2b:9c:25:34:4d:a6:a3:61:a9:ef:84:3a:5a:62:b6:
         8b:13:d0:d7:6c:5e:d2:2c:c0:13:e8:94:25:dc:64:4c:e9:86:
         3f:e7:3d:55:5d:b1:54:5d:86:7a:79:28:44:74:1f:99:fe:7d:
         11:a9:56:c0:8e:87:23:1c:84:fd:f9:9e:06:e4:e1:c8:c3:13:
         31:4d:b2:2a:77:30:4d:54:42:73:cd:42:81:af:97:b4:07:b3:
         31:f8:c5:10:c5:9f:81:9c:cb:0c:f8:b0:51:9f:99:bf:14:f7:
         65:6b:b2:eb:28:1f:78:9a:99:97:93:0a:fb:07:c9:fd:c5:4b:
         27:e8:06:4e:fc:48:69:8e:af:da:2c:4e:dc:65:f0:d2:11:ac:
         36:8f:ae:2f:30:5b:05:f2:22:92:82:14:08:4a:4c:1c:bd:eb:
         55:64:0c:c5:d9:c5:f2:bc:2d:25:96:87:71:41:c6:25:e9:4e:
         67:c9:6d:e9:11:fa:d8:8a:9c:e9:93:f1:aa:03:f0:a5:9f:bc:
         87:a8:60:99:a3:12:af:be:12:e6:09:19:ae:8f:c0:bc:0a:05:
         91:df:f4:78:b3:a2:43:ba:05:cf:ee:be:5b:d0:03:d3:e2:ff:
         84:3e:66:50:77:5a:48:e1:eb:9c:63:be:6e:2d:0a:c9:a7:2a:
         48:7b:a2:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RfUb6TwfrdaoR4BLvhJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTgwZjIyYTU5NTJhNGVmOWE0ZWM0YTllMGQwYzM1MWZl
Yzk0NTQwHhcNMjUxMDE5MDcwMTI5WhcNMjUxMDIwMDcwMTI5WjAzMTEwLwYDVQQD
Eyg4ZjBhZDM0YzE3MjZiNmQxZGFjZDRjMWQwNzIwMzM5ZmNkOGVmODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC1PHRubHd02yHs8hUa2z80XtAOt
Bg4K985SGPE6sOtS3b/chQw1O775RozECAvATAf/0xa55zHiRLHFUnJpnx5PJKe3
eSOxe3InDxdmVSmiJgxEzkWPAShQKw5PfjNAtCKPJyriIrhgmn/Sj7lBd6pJRhtY
28lNvcu52qBJqstineAuAPS35wXzUR2h8K4VgkFmM0TDuMJAPNCkplJOcPJubKI5
aSU3R991DCBPP61g8rDzkG6tl8A8hZutEfGklRmeFFnsW+Afd4AiAN+ItsTgJMXQ
MCPkVsEGacVgAyUZ2L3zoitX2GpecjQxXsktCbLH4QHewlAD0NalUQEXxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8K00wXJrbR2s1MHQcgM5/NjvhhMB8GA1UdIwQY
MBaAFBuYDyKllSpO+aTsSp4NDDUf7JRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYt
MzQ3YjU2NmRkYmQxLzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYtMzQ3YjU2NmRkYmQx
LzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqi8K5wl
NE2mo2Gp74Q6WmK2ixPQ12xe0izAE+iUJdxkTOmGP+c9VV2xVF2GenkoRHQfmf59
EalWwI6HIxyE/fmeBuThyMMTMU2yKncwTVRCc81Cga+XtAezMfjFEMWfgZzLDPiw
UZ+ZvxT3ZWuy6ygfeJqZl5MK+wfJ/cVLJ+gGTvxIaY6v2ixO3GXw0hGsNo+uLzBb
BfIikoIUCEpMHL3rVWQMxdnF8rwtJZaHcUHGJelOZ8lt6RH62Iqc6ZPxqgPwpZ+8
h6hgmaMSr74S5gkZro/AvAoFkd/0eLOiQ7oFz+6+W9AD0+L/hD5mUHdaSOHrnGO+
bi0KyacqSHuiEg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:31 2025 by rpki-client