Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File:                     GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier:          49bEiBulLTCFeqlOf5yGCJGMnmeQP6jJYWGNULj4MuI=
Subject key identifier:   C0:4C:14:D5:6E:B8:62:7D:2A:D1:FD:6D:35:15:13:D6:08:DB:87:BF
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer:       /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial:       0199FC8F2587E647D2EF6DDF2685EC71B46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 13:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:03 +0000
Files and hashes:         1: D2QGXtZvmL4KeLGdXQs__twf4cc.roa (hash: yx8HKD3i4ZtDorjPhtWxamWyQ9PcoYYTYwiIZAy3Cf4=)
                          2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: Ya82rf6q765NPpZ/zLRNKbih/xQ542DqIK6XO54Yc7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:25:87:e6:47:d2:ef:6d:df:26:85:ec:71:b4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
        Validity
            Not Before: Oct 19 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=c04c14d56eb8627d2ad1fd6d351513d608db87bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:b8:ec:47:65:e8:9c:38:22:2f:4c:8f:e2:
                    d6:59:15:f2:0d:2c:1a:b3:f9:b8:38:57:a6:11:dd:
                    80:b7:9f:9e:0c:52:9f:f8:8c:33:59:66:07:67:84:
                    8b:30:28:b1:61:e1:0f:b5:35:a4:8e:c3:3a:5d:f8:
                    02:15:37:a7:d2:d5:68:60:a2:43:eb:22:e5:d5:22:
                    14:80:a5:14:3a:7d:fb:a0:e0:54:8a:4a:db:85:38:
                    20:36:5d:e6:e3:39:d9:28:2f:1f:b6:72:2a:00:cf:
                    e0:7a:a0:64:b2:4f:3f:39:e1:27:4b:06:bd:a9:56:
                    2e:9c:ae:d6:6e:3d:29:a5:27:f6:fc:aa:1c:79:2f:
                    dc:88:ba:7a:a3:65:67:5c:ea:67:53:eb:4e:bf:19:
                    1c:0b:ba:3c:dd:e6:cd:61:0e:3b:42:f2:a8:52:58:
                    a9:22:6a:48:b1:e1:c5:e7:0f:b8:7a:82:28:3a:77:
                    31:eb:7c:2b:9e:92:10:67:6f:3b:6c:92:59:59:19:
                    70:87:03:59:43:78:bb:e2:bd:e5:fb:ff:b0:17:2c:
                    6f:21:59:96:96:31:ed:19:0a:a5:12:f9:c1:03:9e:
                    a2:b5:11:f2:91:69:0a:58:a6:4e:b0:d1:cc:19:3b:
                    e1:bd:e3:04:71:98:b4:f3:e5:66:bd:10:18:6b:8a:
                    6b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4C:14:D5:6E:B8:62:7D:2A:D1:FD:6D:35:15:13:D6:08:DB:87:BF
            X509v3 Authority Key Identifier:
                keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:62:ba:dd:3d:9d:2a:b0:49:8d:0b:83:fa:61:00:44:03:90:
         3a:3e:2d:28:e2:51:2a:35:29:67:b2:cc:bd:60:e6:bf:14:91:
         d1:38:33:a6:fa:11:62:80:e9:78:b8:dc:07:d6:64:0c:28:01:
         1b:26:80:96:7a:70:69:73:1e:af:3a:0d:6f:e8:22:9c:b7:16:
         c3:88:ed:84:62:c1:e8:7d:1d:e8:f7:0f:83:70:48:e7:a9:0d:
         90:05:e0:63:bc:05:20:63:36:f6:c3:49:09:24:b3:a4:9b:16:
         8c:83:e9:11:fd:5c:1a:50:55:8a:b3:a5:db:8c:5f:a0:06:6a:
         2f:8a:38:02:d2:1f:3a:4b:8f:7b:88:d5:f8:9e:b6:5a:7c:8d:
         44:c1:22:ea:60:6f:a3:fd:e7:27:bb:0b:4e:ff:0e:18:1e:8b:
         3f:4e:0c:f1:55:45:2a:83:7e:57:7f:03:31:d3:0f:7d:8e:8b:
         d3:ef:e7:15:99:20:6d:fc:70:4c:82:6d:4e:d2:a8:7c:78:77:
         1d:74:bd:f5:12:26:67:88:bb:b6:4b:79:e7:2d:34:ae:d3:fc:
         b9:aa:96:18:03:d7:f1:6d:0c:33:da:6e:51:ea:28:09:b8:f4:
         de:e9:12:c1:b3:5d:3f:c1:21:50:cc:c9:ae:0e:e8:b2:5e:6a:
         f1:f8:1f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:58 2025 by rpki-client