Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.mft
File:                     gL7V0Fzqr-RxMOeeZMGOuSNh_I4.mft (raw, json)
Hash identifier:          A4dhggDVSW/hVImi+8HkgyitaW9y1AlS0rFywBz8Xuw=
Subject key identifier:   E8:E9:04:0F:4A:E2:8A:F3:2A:79:95:AA:6D:F0:D4:1B:AB:1A:D5:18
Authority key identifier: 80:BE:D5:D0:5C:EA:AF:E4:71:30:E7:9E:64:C1:8E:B9:23:61:FC:8E
Certificate issuer:       /CN=80bed5d05ceaafe47130e79e64c18eb92361fc8e
Certificate serial:       0199FB7CEE983EF7C0ADD4761ABBFA822EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.mft
Manifest number:          9A
Signing time:             Sun 19 Oct 2025 08:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:32 +0000
Files and hashes:         1: gL7V0Fzqr-RxMOeeZMGOuSNh_I4.crl (hash: hjn5fk/flwcO3DRe81AMqxUrOEQPw8pOXEb6VfPMo/E=)
                          2: ljUmaJOEvMjFI5KpBw7OV5LTgwY.roa (hash: kdzf45jF5P72y49hy1Ud9SGswimupljyU5tNp9nAHJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:ee:98:3e:f7:c0:ad:d4:76:1a:bb:fa:82:2e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bed5d05ceaafe47130e79e64c18eb92361fc8e
        Validity
            Not Before: Oct 19 08:01:32 2025 GMT
            Not After : Oct 20 08:01:32 2025 GMT
        Subject: CN=e8e9040f4ae28af32a7995aa6df0d41bab1ad518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:f8:6f:1c:8d:d8:29:89:e5:e4:14:c4:3e:
                    05:7a:e8:69:00:67:3b:91:bb:fc:ae:67:04:04:4d:
                    93:ed:36:38:cc:f5:47:3f:c8:72:b1:00:2a:ff:c4:
                    eb:dd:d5:b6:1e:c4:67:87:73:35:d7:98:30:1e:9c:
                    9a:78:9e:ea:55:7f:bf:25:82:60:5c:43:c8:bf:3d:
                    1b:ce:a5:05:48:62:d4:81:41:3c:3f:c3:23:b4:99:
                    91:71:fa:57:ca:68:65:9e:4f:3f:34:31:c9:95:bd:
                    07:80:77:6d:db:3d:1b:a7:1c:a8:45:b6:c7:27:55:
                    6a:8e:bc:43:f1:14:07:af:fb:7e:23:f3:c8:35:63:
                    1b:6a:fd:a4:94:e6:26:30:bb:68:5c:4c:23:48:64:
                    fa:7a:19:9a:4c:87:81:49:41:1d:c1:f8:94:02:41:
                    73:cf:a3:a7:05:5f:30:16:66:f1:2f:66:aa:34:0b:
                    1f:41:df:18:09:06:37:26:99:40:36:fa:00:96:47:
                    f3:2a:d0:71:8a:4b:2c:89:74:b3:96:d5:e5:2b:f3:
                    c7:77:70:3d:e1:2e:b8:89:9f:a8:b6:f0:6b:19:74:
                    03:0b:de:39:0e:a6:36:07:e3:ac:fd:15:a0:ba:22:
                    35:4c:0e:4d:32:32:32:a8:b9:ab:2d:98:58:df:cb:
                    d9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E9:04:0F:4A:E2:8A:F3:2A:79:95:AA:6D:F0:D4:1B:AB:1A:D5:18
            X509v3 Authority Key Identifier:
                keyid:80:BE:D5:D0:5C:EA:AF:E4:71:30:E7:9E:64:C1:8E:B9:23:61:FC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:be:d3:da:fc:ae:16:2e:ea:71:79:98:bf:66:49:38:16:08:
         5a:4d:a3:77:27:63:ad:1e:cf:69:15:4e:55:cb:8a:1c:4c:62:
         53:d1:0c:66:47:16:9d:04:e3:c2:80:59:87:b2:27:8d:9c:b1:
         3f:86:22:2d:e3:1b:ba:4a:dc:12:d3:b0:dc:83:6c:98:55:98:
         2b:cd:83:9c:f8:14:c8:cd:e2:90:2c:db:e0:f8:5f:b9:6a:29:
         b9:a3:be:9b:53:83:f3:e4:e6:13:24:ad:99:54:ab:d8:69:59:
         a8:f2:98:ed:32:70:aa:74:44:b4:c4:24:b8:f6:71:1f:02:27:
         18:5b:29:4e:1b:c2:30:69:e0:3a:67:e6:90:6f:25:9d:b6:9c:
         e8:7a:8b:54:e3:a9:61:b9:8a:94:21:ed:78:e9:d1:68:5a:d3:
         d3:9e:af:6e:3a:15:24:ea:32:a1:66:18:c2:b0:d3:f0:9f:69:
         69:7e:32:3a:f3:fe:69:bf:e0:cc:80:43:73:16:26:54:97:8f:
         7a:91:ca:09:5c:12:04:d3:b4:4e:4b:5e:3c:84:72:cb:c0:47:
         f9:b4:30:64:43:33:c5:c5:30:0b:e5:e7:22:93:b4:a4:43:ac:
         fe:5e:1b:43:69:9e:98:bd:4d:2f:81:09:17:08:d3:8b:1f:48:
         df:26:38:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fO6YPvfArdR2Grv6gi6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmVkNWQwNWNlYWFmZTQ3MTMwZTc5ZTY0YzE4ZWI5MjM2
MWZjOGUwHhcNMjUxMDE5MDgwMTMyWhcNMjUxMDIwMDgwMTMyWjAzMTEwLwYDVQQD
EyhlOGU5MDQwZjRhZTI4YWYzMmE3OTk1YWE2ZGYwZDQxYmFiMWFkNTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32L4bxyN2CmJ5eQUxD4FeuhpAGc7
kbv8rmcEBE2T7TY4zPVHP8hysQAq/8Tr3dW2HsRnh3M115gwHpyaeJ7qVX+/JYJg
XEPIvz0bzqUFSGLUgUE8P8MjtJmRcfpXymhlnk8/NDHJlb0HgHdt2z0bpxyoRbbH
J1VqjrxD8RQHr/t+I/PINWMbav2klOYmMLtoXEwjSGT6ehmaTIeBSUEdwfiUAkFz
z6OnBV8wFmbxL2aqNAsfQd8YCQY3JplANvoAlkfzKtBxikssiXSzltXlK/PHd3A9
4S64iZ+otvBrGXQDC945DqY2B+Os/RWguiI1TA5NMjIyqLmrLZhY38vZkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjpBA9K4orzKnmVqm3w1BurGtUYMB8GA1UdIwQY
MBaAFIC+1dBc6q/kcTDnnmTBjrkjYfyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0w3VjBGenFyLVJ4TU9lZVpNR091U05oX0k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODhhMmEtNTk2NC00NjFjLTlmZmMt
NmU0NTAwZWE0YWE4LzEvZ0w3VjBGenFyLVJ4TU9lZVpNR091U05oX0k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ODhhMmEtNTk2NC00NjFjLTlmZmMtNmU0NTAwZWE0YWE4
LzEvZ0w3VjBGenFyLVJ4TU9lZVpNR091U05oX0k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc77T2vyu
Fi7qcXmYv2ZJOBYIWk2jdydjrR7PaRVOVcuKHExiU9EMZkcWnQTjwoBZh7InjZyx
P4YiLeMbukrcEtOw3INsmFWYK82DnPgUyM3ikCzb4PhfuWopuaO+m1OD8+TmEySt
mVSr2GlZqPKY7TJwqnREtMQkuPZxHwInGFspThvCMGngOmfmkG8lnbac6HqLVOOp
YbmKlCHteOnRaFrT056vbjoVJOoyoWYYwrDT8J9paX4yOvP+ab/gzIBDcxYmVJeP
epHKCVwSBNO0TktePIRyy8BH+bQwZEMzxcUwC+XnIpO0pEOs/l4bQ2memL1NL4EJ
FwjTix9I3yY4gg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:54 2025 by rpki-client