Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
File:                     G5gog-Hfv0Yz4IwLWMheif_DIQE.mft (raw, json)
Hash identifier:          Zdvu8Y1ImoFOeD+hMsNczcbyHKHVQ07UaXMnHTrxRgg=
Subject key identifier:   D4:14:39:90:A9:B0:DF:49:9B:27:3C:B3:B9:A0:0F:96:D9:15:6D:B3
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Certificate issuer:       /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial:       0199FBEB7BABF33EE958734C0ADBFD873AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
Manifest number:          0C35
Signing time:             Sun 19 Oct 2025 10:02:17 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:17 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:17 +0000
Files and hashes:         1: 9tT1Sn3Qux2-pUIWCQe_vjURo9M.roa (hash: FairLybhS08hCgrNLc9cEd4IlKo+5RTneSM8eV+/6qk=)
                          2: BmpGigL7yj_vU4YrBcCEXhWHHbI.roa (hash: Ppbu0DUb3G/J7ntuuCJmNlJLWLrlVFHUquuws77rxcY=)
                          3: G5gog-Hfv0Yz4IwLWMheif_DIQE.crl (hash: 4DhTDjsNt1SF/kqzhag6ocxQNfQBJNDNzZ9Hfp8lF3U=)
                          4: KxqqgwhHr1JBau2ZnEJ99DBtg4A.roa (hash: QCOcE3LD/xRpaRa6zgmKhfyxrFbaW8v4jp9GZFELj38=)
                          5: UjncDvFxOlRCkAGtD0tzYyO0vwY.roa (hash: HR/S3qDlN6tb+Q3T8TNZutyXf0XfoqKmAw4PR5qJTgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:7b:ab:f3:3e:e9:58:73:4c:0a:db:fd:87:3a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
        Validity
            Not Before: Oct 19 10:02:17 2025 GMT
            Not After : Oct 20 10:02:17 2025 GMT
        Subject: CN=d4143990a9b0df499b273cb3b9a00f96d9156db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:a3:c8:f9:f9:ad:40:c5:ec:d0:a5:f5:0f:
                    00:49:aa:1d:c1:39:f7:69:41:28:72:3c:8c:02:ca:
                    ae:d5:14:1e:db:d4:59:c0:56:71:9c:3a:bb:1e:9f:
                    d1:60:6d:84:3b:82:62:80:0d:09:c9:c2:17:78:42:
                    6b:7b:dd:5c:d4:13:fd:b3:79:ab:be:75:3a:65:cc:
                    05:8f:cb:e0:cc:7e:e3:32:e1:44:84:b3:cf:61:8f:
                    bc:c4:ba:d3:be:5f:97:51:67:47:f3:82:bd:b4:7a:
                    ad:ab:7f:7d:12:03:0e:6f:72:75:d1:23:2c:8e:29:
                    fe:2c:8a:be:43:2e:df:4a:ca:81:ac:3a:51:8a:bd:
                    e0:2a:1b:ac:9b:7b:27:57:dc:86:29:c1:00:aa:d5:
                    2c:68:47:cb:9c:21:ee:7a:46:38:81:90:92:64:2c:
                    a7:cd:55:d1:c4:a2:a3:f4:13:68:ca:c8:77:0b:d0:
                    23:b1:13:9b:fb:22:dc:30:26:06:f6:52:52:2f:e6:
                    84:2f:05:59:41:d4:dc:bd:33:00:98:af:5a:fe:a4:
                    90:b5:0b:df:41:1b:42:4e:14:4d:5f:c5:6b:5b:9b:
                    94:bb:78:70:a5:14:00:65:ee:af:05:23:23:26:83:
                    94:b7:3f:c3:e7:f7:b5:c8:6a:9f:18:ad:3a:d1:2f:
                    ea:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:14:39:90:A9:B0:DF:49:9B:27:3C:B3:B9:A0:0F:96:D9:15:6D:B3
            X509v3 Authority Key Identifier:
                keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:14:5e:9c:5a:5f:f3:eb:62:f7:13:f8:76:4b:38:d4:63:f3:
         81:2d:74:d6:d5:f5:e6:18:07:ad:ea:88:9c:c1:a2:6a:d3:77:
         a9:92:10:ad:e4:5d:30:16:4b:43:7b:b9:f0:88:bd:0b:04:b5:
         95:d9:bc:d6:35:26:6d:73:1b:33:1f:e5:3d:e0:dd:7d:33:f6:
         e7:82:06:3c:52:46:12:a4:22:05:5c:ea:4c:74:b8:fa:ad:8e:
         1e:a8:91:bf:ad:72:c1:c2:13:be:c5:37:6f:49:54:ba:08:de:
         54:aa:dc:61:2f:50:81:9b:39:16:bc:6b:09:86:96:85:20:0b:
         c0:38:93:28:ee:b0:a6:35:80:9a:0f:97:1f:af:32:60:3d:a3:
         f4:33:e5:f6:b9:f8:26:69:7a:71:79:f0:48:3c:65:65:f4:33:
         06:fa:3c:88:e4:7a:b4:58:a0:47:e3:50:7e:88:b1:4e:23:07:
         30:67:bd:c6:75:46:be:95:28:fc:b7:e2:c4:f3:64:b2:a0:ce:
         57:b5:82:8e:7c:bb:b8:09:bd:78:87:6d:d9:6b:e9:0a:5a:db:
         8a:ca:c6:82:bb:ad:d3:e0:8c:8f:87:ab:89:01:5e:e3:30:ef:
         41:b1:59:7a:96:67:18:df:dc:0f:fd:00:4e:96:ff:5b:25:c6:
         47:f3:a4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:53 2025 by rpki-client