Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          r1ZofxhzJRqHe+7gzscaYAGpJQt+f4wvxQxJ5C0iziM=
Subject key identifier:   8A:2F:DD:43:B9:35:86:90:67:66:96:53:43:4D:1C:0A:AE:6C:4E:97
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       0199FC215DB66637690F5C0DA7B509AA5074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          16EB
Signing time:             Sun 19 Oct 2025 11:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:09 +0000
Files and hashes:         1: 78X0IG7SGTb_CqUUoAsl9rOEOoQ.roa (hash: dHUSFpGblHkPXU9NYMPaCtIz+bczpLlHXComKZfL/BA=)
                          2: FQcgCQcG__7aM5eRsupFU2EPhlA.roa (hash: xigvLo77r4Zkdva8w7DgHnMdwBCwRTMrZ+SBoUs6iWs=)
                          3: MfGfVoxcZRKcXeryJdrARrFNT30.roa (hash: NP17Awbv8VvBz7g9no++bSqGAeudeK0bPJQ8VG+ovrs=)
                          4: WD7CCMj1boEtISgVQIZGdGTenUQ.roa (hash: 4IOANIE3kXmhVP0/F3MzPDZJAgrgCHcPBEmcnYUkUzc=)
                          5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: SWiftMaB5Yl+mH6AqN92bF6OIw4l2nX3p7Oe+X0v1XY=)
                          6: sjitqywkz9ufiQpRQwXHpL0dJPA.roa (hash: O1YNzqfVoGDW6rve4zWAx2oDjZ7sBc+TeGZe932UNgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:5d:b6:66:37:69:0f:5c:0d:a7:b5:09:aa:50:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Oct 19 11:01:09 2025 GMT
            Not After : Oct 20 11:01:09 2025 GMT
        Subject: CN=8a2fdd43b935869067669653434d1c0aae6c4e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:20:c3:77:5a:45:97:d5:44:fa:99:f7:9b:
                    57:bb:e8:c2:39:00:4a:dd:3d:80:ee:a9:07:1c:f0:
                    4c:1e:b9:eb:a9:77:e2:87:13:87:f9:4f:7d:31:0b:
                    29:ec:e1:9c:50:49:58:d5:aa:ec:d3:7a:e7:d4:f9:
                    91:9d:66:5c:e2:a5:70:9d:53:dc:54:94:30:bf:81:
                    3f:86:b0:e8:75:99:e1:4e:00:d4:d4:e1:62:21:47:
                    11:fd:a7:f7:5c:b7:f5:98:d6:af:4c:fc:d0:5d:7f:
                    64:af:f0:11:77:bf:e2:cd:e0:24:06:e1:74:54:1c:
                    fc:c0:e3:80:38:db:0c:9c:51:b7:b7:36:82:ba:d3:
                    93:fd:53:48:ca:c2:d2:49:e4:56:74:14:48:1c:83:
                    00:90:92:0e:26:0f:92:f0:07:fe:bc:74:da:73:19:
                    fd:b1:52:1a:3b:70:60:11:b5:bc:9f:b4:02:78:e0:
                    1e:d1:0f:d7:e0:1e:86:44:f5:d9:3f:c8:05:8d:37:
                    03:4a:84:ac:2c:e6:04:32:e2:44:22:9a:8b:30:7e:
                    ee:de:94:3f:5c:37:60:8f:f6:43:c2:00:8e:da:51:
                    7d:0f:08:e4:19:af:6a:f4:14:66:e4:82:78:3a:28:
                    4b:76:d3:96:ee:da:54:db:01:e7:0f:82:8c:cc:62:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2F:DD:43:B9:35:86:90:67:66:96:53:43:4D:1C:0A:AE:6C:4E:97
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:31:ad:99:2a:2d:aa:08:6f:ca:00:d7:5c:19:36:97:5a:87:
         c9:19:3c:49:c4:e4:6f:86:0d:2e:0d:cc:49:dd:10:28:26:80:
         05:72:04:49:8a:a3:7e:fc:4c:13:f2:7e:9d:74:95:77:de:f6:
         80:4d:7e:2c:5e:1a:f4:28:fe:1c:7b:e2:a5:c7:28:30:d2:6f:
         ab:99:1b:ac:44:55:32:73:a7:7f:d4:3c:5c:51:6b:23:6c:c4:
         21:9c:b3:b6:1b:fb:e6:63:76:89:f5:b8:50:de:60:79:1a:f4:
         44:d4:44:66:d5:64:71:57:31:55:cb:e8:33:d5:35:ce:cd:1b:
         ff:5b:9a:59:7b:57:09:28:8c:2e:45:2f:da:3c:a6:8f:4d:4e:
         84:19:88:45:c7:d8:20:fa:27:96:ab:96:59:31:ff:b3:65:f4:
         84:b4:e9:d3:2d:64:d2:c7:c0:c5:1c:b3:12:56:b9:7c:11:b8:
         9e:77:71:2d:96:c5:40:82:ee:df:9d:ca:84:7b:70:08:48:d7:
         b6:b3:3d:b0:f0:39:18:a7:88:f7:5d:dc:23:30:0e:99:7a:eb:
         47:b1:75:a3:ef:74:8c:ae:36:c6:0d:86:39:9a:da:a0:65:10:
         89:8a:6f:90:a3:3e:cc:9a:7b:e7:4c:b7:1e:ae:67:2e:e2:5c:
         58:25:06:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:12 2025 by rpki-client