Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File:                     gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier:          0sApzx0UVhfGw3g9k9zb5dCyhM7nGm154vAkM5AX3Eg=
Subject key identifier:   13:55:41:EB:35:D2:35:71:0C:16:1A:B2:3A:5E:00:CB:F0:A3:C8:44
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer:       /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial:       0199FF23183EF15CAA32DE045DBA45E8B176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number:          0AA0
Signing time:             Mon 20 Oct 2025 01:01:54 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:54 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:54 +0000
Files and hashes:         1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
                          2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
                          3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
                          4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: TsnAysN+ZK9lRk5Be8eTsicZVvEcFP9fnp625pMrVRY=)
                          5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
                          6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
                          7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
                          8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:23:18:3e:f1:5c:aa:32:de:04:5d:ba:45:e8:b1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
        Validity
            Not Before: Oct 20 01:01:54 2025 GMT
            Not After : Oct 21 01:01:54 2025 GMT
        Subject: CN=135541eb35d235710c161ab23a5e00cbf0a3c844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:e3:92:a7:15:61:4f:b3:b5:e9:79:9e:21:
                    a2:bc:5a:cc:41:8c:65:ef:8d:84:ab:8b:79:a4:33:
                    f8:b8:ed:29:da:49:5b:e8:0b:2d:61:9b:c1:48:36:
                    be:35:ed:ca:62:f9:3a:32:7a:f5:49:80:19:62:7c:
                    c2:79:49:68:8b:4d:6c:dc:c5:9c:a5:68:ec:45:25:
                    d0:73:f6:9e:c5:17:4a:7f:c6:29:1b:b8:93:3a:d8:
                    e0:4f:df:ca:d3:dc:55:27:3d:39:1f:8d:af:8b:11:
                    7e:38:f8:95:fa:1c:3f:e2:21:fa:46:a8:4b:0f:40:
                    5b:85:67:18:00:a3:e1:ff:27:51:6c:36:78:f9:33:
                    71:67:fc:2f:6e:a8:e9:b0:8e:01:b5:79:8f:45:94:
                    c4:30:f2:d1:eb:a7:41:ce:18:3e:73:8c:a5:df:aa:
                    c0:6c:06:5e:10:bd:87:5d:f3:e7:b2:30:50:3b:ce:
                    6b:d0:de:5d:06:30:66:84:b4:b2:6f:f6:2e:bc:66:
                    40:e3:66:85:cf:4c:13:86:33:c5:f7:7a:e2:57:b7:
                    f3:33:44:d5:ea:ab:b8:34:c1:ae:00:36:7e:4b:0b:
                    e6:6b:8b:11:c8:59:35:86:a0:0a:a1:35:01:68:b1:
                    6c:c2:44:34:24:ee:54:4e:a1:24:d8:87:b9:90:72:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:55:41:EB:35:D2:35:71:0C:16:1A:B2:3A:5E:00:CB:F0:A3:C8:44
            X509v3 Authority Key Identifier:
                keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:d3:49:c3:03:ea:ac:40:b0:43:2c:b5:56:55:64:5f:a2:
         87:8d:a2:b2:6b:ff:54:c5:8d:63:dc:df:58:8d:1f:a0:69:92:
         6f:f1:6e:e8:68:31:bd:45:d8:8b:a2:cb:87:5d:5a:45:d9:1e:
         96:87:61:06:75:82:71:6b:eb:3a:a4:5c:bd:a8:6c:2c:a6:4f:
         36:ca:a8:f6:e0:bb:9c:74:c0:6a:8e:0b:1a:ae:20:c3:45:8c:
         ac:85:92:41:bf:39:84:f5:89:8c:b4:b4:1e:ee:40:0e:17:57:
         7c:62:6c:06:19:6a:51:1b:43:6e:41:d5:f9:ce:7d:40:e7:7a:
         42:0b:72:44:75:ba:8b:df:8e:91:81:f5:b0:88:74:bd:1b:94:
         55:bb:68:fb:a3:8f:66:56:8a:6c:6d:ba:d0:32:1e:4f:3d:f6:
         db:a6:c7:60:01:98:96:74:82:2f:12:4d:87:58:4a:c4:3e:01:
         b5:e4:e4:5c:33:76:0a:46:7b:44:2a:41:85:cd:54:76:8b:69:
         5a:ed:81:ce:3f:51:9f:e7:4d:30:42:86:99:08:01:ee:6c:3b:
         64:52:fd:db:a3:a4:8c:21:4c:a1:50:d8:11:1a:57:4d:8d:43:
         12:df:78:22:ec:42:d4:5c:a2:d8:94:38:9e:66:60:87:3d:7a:
         f3:b1:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:42 2025 by rpki-client