Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File:                     gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier:          xfGoSJMZmeeZhPGrsmYvtfbZwEw6M6QO2MhLCEXM4a8=
Subject key identifier:   55:37:ED:8D:29:D8:62:71:49:C0:F0:6C:D7:B9:38:D3:24:72:71:1D
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer:       /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial:       0199FE46BCB6C2D7CAB6CD0E18004528A510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number:          0809
Signing time:             Sun 19 Oct 2025 21:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:12 +0000
Files and hashes:         1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
                          2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: C4feOrJ410GZ2vQlO5rbl/VEKrwqbUyYK8dUC6cG61k=)
                          3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:bc:b6:c2:d7:ca:b6:cd:0e:18:00:45:28:a5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
        Validity
            Not Before: Oct 19 21:01:12 2025 GMT
            Not After : Oct 20 21:01:12 2025 GMT
        Subject: CN=5537ed8d29d8627149c0f06cd7b938d32472711d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:d7:d9:d8:ad:c9:3c:45:1d:50:7e:2d:f8:
                    0d:4e:6f:60:b6:34:72:1d:60:7f:63:6e:86:92:d5:
                    bb:7a:ad:57:aa:b4:2d:3f:9e:36:c9:90:5c:5b:64:
                    68:9b:82:e3:49:07:f8:b1:15:78:99:23:20:99:d4:
                    50:39:b4:2e:28:d0:ee:67:cc:34:a5:c3:47:63:58:
                    5c:1e:b9:a6:d4:82:64:e4:e5:f5:cb:32:ed:b6:6d:
                    33:ae:88:33:d8:ec:99:f5:44:e9:d7:01:3f:a2:35:
                    e8:de:e4:83:82:0c:60:74:37:a6:21:3b:1f:9b:33:
                    c6:82:7e:3a:9e:89:c7:6a:bc:f5:2e:a9:0d:49:1a:
                    0c:41:a0:8a:38:d5:2d:06:19:cf:c4:e5:38:e2:93:
                    b6:9a:b0:fc:11:b5:1c:34:01:d6:db:33:37:f7:6d:
                    80:71:2c:bc:e3:8c:81:a6:63:4c:e3:be:02:14:ab:
                    57:16:a2:0f:e1:db:d3:e2:c2:1f:c1:69:4d:9a:55:
                    18:1e:db:ed:07:8e:63:19:c7:ff:fa:a4:59:c8:0c:
                    3f:78:98:66:03:06:16:94:c7:40:40:5a:a5:13:ec:
                    48:9e:de:b5:f8:04:af:7e:44:1b:f3:61:65:2f:7d:
                    f6:63:74:9d:e7:29:ae:9a:fe:ac:f1:18:90:b3:42:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:37:ED:8D:29:D8:62:71:49:C0:F0:6C:D7:B9:38:D3:24:72:71:1D
            X509v3 Authority Key Identifier:
                keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:21:47:dd:a7:c8:2c:72:19:bd:bf:57:d7:fe:7f:d1:71:89:
         c6:b2:f3:0e:6e:ae:24:0e:45:6f:5d:f6:35:b8:2d:c7:1a:92:
         15:11:31:86:1c:72:e5:2e:bd:5e:8a:97:19:a0:59:0f:63:34:
         e4:8e:68:05:2c:49:17:5c:b0:90:8d:6e:c5:04:c6:af:59:84:
         78:2c:1f:1a:97:ac:e4:7b:97:51:b3:96:41:bb:9b:35:cd:62:
         5a:1b:99:b3:e1:71:4d:25:14:18:5d:8e:52:78:4d:d8:22:35:
         ac:05:a3:da:c6:b8:a5:6e:ce:51:d6:b6:24:93:4a:73:ea:3f:
         51:26:3f:3e:f8:ed:5f:4d:48:e1:87:e6:c5:95:59:d1:22:ec:
         c8:5c:cc:1c:db:78:f2:03:2c:24:7a:b8:a0:bf:85:b9:07:f9:
         4b:30:36:0a:f1:f4:e0:ae:78:bc:04:20:91:4c:3e:e8:3a:0a:
         18:1f:f4:0f:94:9c:ce:25:f7:58:ed:2b:6e:f0:13:83:0c:be:
         82:63:eb:c3:0c:fb:a4:bb:8f:0d:77:63:98:f0:d2:3c:77:72:
         02:f1:3c:98:1c:ec:43:69:19:aa:0a:f0:4d:9d:c2:c9:1a:2a:
         0b:9b:d8:cb:4f:9c:99:f5:53:b6:6c:fe:5b:f8:9e:07:8d:24:
         a8:5c:34:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rry2wtfKts0OGABFKKUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYjA2MzhiODc2ZjM5NzhjYTdiZDI4ZDdkZTM3MDk5NmIz
OTZhM2YwHhcNMjUxMDE5MjEwMTEyWhcNMjUxMDIwMjEwMTEyWjAzMTEwLwYDVQQD
Eyg1NTM3ZWQ4ZDI5ZDg2MjcxNDljMGYwNmNkN2I5MzhkMzI0NzI3MTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunrX2dityTxFHVB+LfgNTm9gtjRy
HWB/Y26GktW7eq1XqrQtP542yZBcW2Rom4LjSQf4sRV4mSMgmdRQObQuKNDuZ8w0
pcNHY1hcHrmm1IJk5OX1yzLttm0zrogz2OyZ9UTp1wE/ojXo3uSDggxgdDemITsf
mzPGgn46nonHarz1LqkNSRoMQaCKONUtBhnPxOU44pO2mrD8EbUcNAHW2zM3922A
cSy844yBpmNM474CFKtXFqIP4dvT4sIfwWlNmlUYHtvtB45jGcf/+qRZyAw/eJhm
AwYWlMdAQFqlE+xInt61+ASvfkQb82FlL332Y3Sd5ymumv6s8RiQs0JJ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFU37Y0p2GJxScDwbNe5ONMkcnEdMB8GA1UdIwQY
MBaAFICwY4uHbzl4ynvSjX3jcJlrOWo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAt
MTViMDlmNWY2ZWQ3LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAtMTViMDlmNWY2ZWQ3
LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCFH3afI
LHIZvb9X1/5/0XGJxrLzDm6uJA5Fb132NbgtxxqSFRExhhxy5S69XoqXGaBZD2M0
5I5oBSxJF1ywkI1uxQTGr1mEeCwfGpes5HuXUbOWQbubNc1iWhuZs+FxTSUUGF2O
UnhN2CI1rAWj2sa4pW7OUda2JJNKc+o/USY/PvjtX01I4YfmxZVZ0SLsyFzMHNt4
8gMsJHq4oL+FuQf5SzA2CvH04K54vAQgkUw+6DoKGB/0D5ScziX3WO0rbvATgwy+
gmPrwwz7pLuPDXdjmPDSPHdyAvE8mBzsQ2kZqgrwTZ3CyRoqC5vYy0+cmfVTtmz+
W/ieB40kqFw0Fg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:27:34 2025 by rpki-client