Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File:                     gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier:          rWdPZszdei/bNx+JllCSNvtF7SrSgZXX2Lu05+/1uGY=
Subject key identifier:   33:D5:27:47:08:B9:B4:DD:07:EA:01:4F:72:93:6D:DF:32:7A:4E:E0
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer:       /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial:       0199FE7DCAD26B611FAD290FB9A8449EF5C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number:          16EE
Signing time:             Sun 19 Oct 2025 22:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:20 +0000
Files and hashes:         1: HahR5soNktUlYKPgZEbE7H3aKhs.roa (hash: lStniR/EONynfdLx+qNvUDgudFR2+K1QsCmoIxTWUXU=)
                          2: VpDc8u2rAhCHY8dw5A-uURm2uTo.roa (hash: TnPUye+699meF5Ik4Elk4nVoV3KO8X7ti0DlB40uigY=)
                          3: ZkqOfmuhubAXa5wjbsE6j4_ahXs.roa (hash: Hey5kTZ4283sFnXZkMTOrQ0P+6y/gPOLg1iSKQS0uK8=)
                          4: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: YhXyeUfgBNOVCmwYoNw2FwVIqwJp5Stg+irwm1dDHsM=)
                          5: j1-fP3sdEayV1bR9GGOFSeW4cN0.roa (hash: z2Cs0c66T/XL7AZnx0VV9qMsM3hsvemjVWPE/YF4p8M=)
                          6: kgWUcLVwnlHQ9N0edYU-mPTihYQ.roa (hash: Rkf4hqgx8RyOM/raBR82mKj09VXl9DozZJeQyPvjCIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:ca:d2:6b:61:1f:ad:29:0f:b9:a8:44:9e:f5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
        Validity
            Not Before: Oct 19 22:01:20 2025 GMT
            Not After : Oct 20 22:01:20 2025 GMT
        Subject: CN=33d5274708b9b4dd07ea014f72936ddf327a4ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:09:96:18:32:86:20:85:f9:45:cb:b0:33:
                    ab:de:16:39:6c:3f:45:55:76:c3:f6:f3:32:f5:42:
                    79:36:12:7f:6a:35:6f:1c:25:b8:99:a3:e0:d9:13:
                    2d:d1:8c:99:56:87:00:3c:f6:f2:9f:e3:65:df:55:
                    fb:3f:6a:f8:4b:f2:74:d9:6c:53:68:16:3e:6a:af:
                    28:be:41:06:2f:4c:b7:ab:03:40:9f:a4:53:6a:18:
                    53:c8:3d:e0:16:f7:85:50:80:18:81:7b:ce:af:d1:
                    a8:85:fd:09:b5:49:92:e5:9b:21:fd:f5:a1:32:b5:
                    c2:38:06:77:93:74:72:1e:b3:ee:97:fd:cd:d0:e2:
                    d1:4f:5e:c5:ad:93:bc:a3:3f:f2:8a:0a:5a:55:ea:
                    9e:e4:37:c3:41:79:1a:bf:7a:86:c0:b3:bb:0c:c3:
                    30:78:6d:4a:36:a0:4b:91:e2:0e:7d:ac:59:6d:1a:
                    88:a5:30:8c:6b:fa:79:90:d6:a4:39:40:16:fd:22:
                    17:a9:d8:00:65:8a:90:af:4a:84:88:8d:35:8e:46:
                    52:6e:11:c6:94:24:bc:5e:c9:cd:d8:cd:4a:2f:b4:
                    61:bb:72:69:66:ab:8e:87:5b:52:1e:6c:5a:15:0d:
                    94:25:7b:38:2b:66:35:c1:f4:7c:fe:2a:c2:04:72:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D5:27:47:08:B9:B4:DD:07:EA:01:4F:72:93:6D:DF:32:7A:4E:E0
            X509v3 Authority Key Identifier:
                keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ef:a9:b3:e4:82:eb:39:9b:fb:48:69:87:48:2d:2d:e9:be:
         e9:10:b6:8a:93:28:df:88:08:31:12:74:6b:b9:da:f9:be:35:
         a4:8f:a3:26:79:5a:3a:cc:de:d2:45:ad:f7:26:d2:87:95:74:
         c6:1f:ba:ce:3c:6d:b7:e8:6c:96:da:04:f2:aa:cd:fa:6b:fa:
         c0:da:de:80:1c:03:33:8a:8a:ad:e6:2f:93:c7:64:f1:c9:33:
         6e:ae:1d:a7:f6:f5:d2:36:fa:5a:89:b6:36:8b:df:0c:45:9b:
         91:a1:1b:8b:e3:c9:53:7a:22:20:5e:9c:2e:73:d2:00:fd:0f:
         e6:b2:b5:70:de:37:46:9d:00:e5:36:e9:f3:44:d8:89:aa:76:
         43:03:5f:2f:f3:60:34:c7:7a:30:d2:f4:c5:a5:c7:38:a7:30:
         70:c2:d5:d0:73:91:a3:09:ae:ab:22:4c:3d:8e:69:b8:68:59:
         71:48:62:2e:e6:23:b3:23:e9:4c:be:7e:5e:c5:08:4f:80:53:
         c6:f2:57:b6:ee:ee:5d:a2:65:e0:60:1f:4f:d9:a4:0a:23:fc:
         d2:9a:36:00:29:3f:7e:2a:f9:81:8c:1e:20:23:3f:82:e1:c8:
         0c:f7:31:30:4e:d8:46:61:14:ca:04:c0:d8:5e:7e:ec:4f:2f:
         b2:19:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:22 2025 by rpki-client