Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
File:                     gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json)
Hash identifier:          dR5IE/BPBPZBVtAyr2hmhTjkLwDMbe7NgAzLysmxh+o=
Subject key identifier:   34:F6:41:8F:3C:7F:89:E0:0C:D2:DE:00:D7:0A:F3:97:98:69:BF:59
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Certificate issuer:       /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial:       0199FD340435C814BFB602B004BB1111FC67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
Manifest number:          163F
Signing time:             Sun 19 Oct 2025 16:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:08 +0000
Files and hashes:         1: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: /aSVoFMoobOC1wrlN2FKrgavU/e1ssbcXYH9dF/cdBA=)
                          2: oqdpV3Xk0NT7skwENXjSQjVV8BM.roa (hash: 16NskiWXB3ABFUN6srz9/Gadxy8aqe8x+NDzXv8hAB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:04:35:c8:14:bf:b6:02:b0:04:bb:11:11:fc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
        Validity
            Not Before: Oct 19 16:01:08 2025 GMT
            Not After : Oct 20 16:01:08 2025 GMT
        Subject: CN=34f6418f3c7f89e00cd2de00d70af3979869bf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:13:c9:eb:be:b9:c7:dc:b2:71:5a:c4:cb:
                    eb:87:d9:57:bf:f0:e5:30:4b:31:68:d0:b1:38:6b:
                    83:34:e9:8c:4e:32:94:17:20:75:02:44:41:80:2c:
                    32:e9:b0:41:d9:03:38:16:13:3f:87:bb:64:f4:4b:
                    66:11:1f:f1:d1:49:06:af:69:9b:2e:d6:7c:d7:d1:
                    ac:65:e1:47:71:61:63:94:66:dd:20:11:95:06:66:
                    99:9d:d1:5f:82:96:24:31:89:a3:74:8d:c3:3f:05:
                    01:63:f1:c6:6b:5e:8e:08:16:10:cd:3c:18:7e:6c:
                    1d:2e:e3:43:18:c1:99:e3:79:b6:61:7f:82:a3:ac:
                    cf:5a:98:b2:9a:7f:9e:52:de:6f:cc:db:75:a3:24:
                    d4:45:d9:d2:a0:a7:2f:48:b8:66:5e:71:5b:ff:12:
                    c9:91:54:18:1f:d1:54:2a:04:82:a4:28:31:12:57:
                    65:eb:79:01:37:a9:be:2c:a0:c9:40:89:07:20:57:
                    a2:eb:06:6e:ab:9b:e9:81:fe:6b:87:dc:3a:74:01:
                    f1:3d:98:f5:25:a4:2c:d7:59:3d:c6:f6:15:c4:cd:
                    80:ac:e6:5e:b4:99:c9:72:fd:ed:91:3e:ca:70:be:
                    fd:03:1c:bd:31:54:00:61:6d:35:0f:26:6f:4b:b5:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F6:41:8F:3C:7F:89:E0:0C:D2:DE:00:D7:0A:F3:97:98:69:BF:59
            X509v3 Authority Key Identifier:
                keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9f:29:89:b6:15:4a:71:9f:57:c8:f0:3d:46:f9:41:ed:05:
         7d:fb:85:a5:92:8c:f3:c4:8c:98:70:2e:fe:23:ae:ea:82:d4:
         cf:38:87:fd:0a:f6:4e:e9:bd:a4:da:c8:55:c6:68:cb:d2:2d:
         f4:d8:57:ff:ff:bb:7a:69:61:97:bf:f5:f9:3c:d1:8f:3b:3c:
         92:a0:14:66:52:ec:91:86:db:45:cc:0a:48:16:40:b3:57:cb:
         db:91:bc:1c:f4:67:87:87:82:f9:53:55:8a:ac:87:71:3c:b0:
         44:73:54:b9:21:a1:56:b9:df:e7:f0:6b:e6:38:64:4e:e8:89:
         a8:dd:0b:58:d3:3f:f1:57:72:fa:2a:97:43:fe:3a:47:ba:34:
         0f:1d:b1:42:6d:b2:bd:38:2b:e5:35:b6:99:76:15:12:1f:4e:
         c2:c8:dd:01:4f:65:cc:03:ae:b1:ac:f8:58:c7:81:c0:a1:ae:
         07:8e:69:e5:8b:a1:54:39:76:ee:b8:31:e3:a2:9e:fe:7f:3d:
         43:58:0b:9a:cd:5a:96:f6:f4:2e:32:ab:d0:7b:24:a4:61:81:
         6d:bd:5a:7c:3f:ad:e3:7b:c6:e9:7e:bb:c7:be:8f:f5:63:14:
         b2:8d:7f:26:65:41:1f:9f:11:2d:3b:54:43:9a:43:fe:7f:cf:
         27:c2:c7:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NAQ1yBS/tgKwBLsREfxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNDY4YjUzOTY3NTQ1ZTI4ZTkyNjdjY2JmMDA2OWQ4N2Iy
NTk4NjkwHhcNMjUxMDE5MTYwMTA4WhcNMjUxMDIwMTYwMTA4WjAzMTEwLwYDVQQD
EygzNGY2NDE4ZjNjN2Y4OWUwMGNkMmRlMDBkNzBhZjM5Nzk4NjliZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8MTyeu+ucfcsnFaxMvrh9lXv/Dl
MEsxaNCxOGuDNOmMTjKUFyB1AkRBgCwy6bBB2QM4FhM/h7tk9EtmER/x0UkGr2mb
LtZ819GsZeFHcWFjlGbdIBGVBmaZndFfgpYkMYmjdI3DPwUBY/HGa16OCBYQzTwY
fmwdLuNDGMGZ43m2YX+Co6zPWpiymn+eUt5vzNt1oyTURdnSoKcvSLhmXnFb/xLJ
kVQYH9FUKgSCpCgxEldl63kBN6m+LKDJQIkHIFei6wZuq5vpgf5rh9w6dAHxPZj1
JaQs11k9xvYVxM2ArOZetJnJcv3tkT7KcL79Axy9MVQAYW01DyZvS7WhlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT2QY88f4ngDNLeANcK85eYab9ZMB8GA1UdIwQY
MBaAFIJGi1OWdUXijpJnzL8Aadh7JZhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85Y2RhY2YtNTNlOS00MTM5LWJiNGEt
OGFjMmJhZjY5NmM4LzEvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85Y2RhY2YtNTNlOS00MTM5LWJiNGEtOGFjMmJhZjY5NmM4
LzEvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp8pibYV
SnGfV8jwPUb5Qe0FffuFpZKM88SMmHAu/iOu6oLUzziH/Qr2Tum9pNrIVcZoy9It
9NhX//+7emlhl7/1+TzRjzs8kqAUZlLskYbbRcwKSBZAs1fL25G8HPRnh4eC+VNV
iqyHcTywRHNUuSGhVrnf5/Br5jhkTuiJqN0LWNM/8Vdy+iqXQ/46R7o0Dx2xQm2y
vTgr5TW2mXYVEh9OwsjdAU9lzAOusaz4WMeBwKGuB45p5YuhVDl27rgx46Ke/n89
Q1gLms1alvb0LjKr0HskpGGBbb1afD+t43vG6X67x76P9WMUso1/JmVBH58RLTtU
Q5pD/n/PJ8LH2g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:16 2025 by rpki-client