Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          +opqouQDc5E2Ys5VF8lRFDQSSX5Les2zYLPEEjIB/1E=
Subject key identifier:   69:75:47:F5:F5:06:82:D4:03:7D:1C:B7:41:E1:4C:82:52:E6:D5:9B
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       0199FE470E51636D9D6125D156C0379E5367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 21:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:33 +0000
Files and hashes:         1: 5ekJj6RYdmJBNmKWcQ0sEc6eWgU.roa (hash: gPGy8PS0+ecmm07tEkgKLMFDWfNcEFuAsE09yhAQrNo=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: aZlCl62Qpu8X9ffhKQLkGKDB2RO7sqE0JgRs6oHHCEo=)
                          3: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (hash: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=)
                          4: lCgKihl6lv9I1HmInNqD60nii-E.roa (hash: +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=)
                          5: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (hash: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:0e:51:63:6d:9d:61:25:d1:56:c0:37:9e:53:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Oct 19 21:01:33 2025 GMT
            Not After : Oct 20 21:01:33 2025 GMT
        Subject: CN=697547f5f50682d4037d1cb741e14c8252e6d59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:89:fa:42:43:2c:b2:17:f1:b0:97:83:d8:73:
                    58:b2:f2:99:32:3f:7f:2f:5d:67:6b:ea:f4:78:59:
                    47:83:55:cc:99:38:4a:04:cc:47:e9:a7:91:18:37:
                    ad:49:a9:e1:75:cc:f8:bb:f0:83:86:ac:4a:02:46:
                    56:0f:31:d0:bb:91:9f:50:d4:02:50:27:99:23:6b:
                    4e:4a:52:a3:45:e0:a0:76:b9:33:71:8b:0c:87:c6:
                    a2:78:9d:12:f5:7a:b8:24:bc:40:62:79:36:6d:64:
                    fd:39:7f:40:44:f6:8a:93:d9:be:6d:f0:8c:7d:67:
                    9b:7c:aa:5f:59:83:f0:0e:78:bd:d6:00:2f:7e:63:
                    71:50:42:9c:8c:cf:60:a9:d7:ba:ae:0c:52:50:6e:
                    1c:2a:b6:77:76:4d:34:ec:39:ac:5c:c5:21:68:8a:
                    6d:79:63:a8:ed:a4:d2:23:9f:eb:ee:41:86:2b:ed:
                    f8:18:bf:da:2d:18:ac:54:2c:53:a4:8e:fa:86:a4:
                    8a:ad:10:c5:1d:5b:41:66:de:09:9f:9d:ea:60:fe:
                    5e:09:86:88:d3:4f:e2:20:6b:f8:be:d6:d1:20:50:
                    54:69:a6:e5:fe:36:d9:cc:b6:a5:4c:e3:90:7a:2c:
                    15:8b:18:97:88:cd:f6:cf:3f:92:23:ea:06:84:7f:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:75:47:F5:F5:06:82:D4:03:7D:1C:B7:41:E1:4C:82:52:E6:D5:9B
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:11:fc:f3:03:91:3f:a1:cf:cb:7b:2c:b9:20:89:39:fb:87:
         d5:85:e4:6c:aa:58:3f:e3:65:84:88:8f:b1:e4:f3:15:a1:8b:
         61:15:18:c5:70:8f:ed:3b:98:7f:77:81:6f:a5:66:45:a0:44:
         74:ba:3e:a0:1b:ab:06:9e:c1:9a:2b:02:c1:7f:e4:b8:a8:1c:
         17:22:5d:91:67:40:4a:27:a9:58:75:30:6e:f9:e5:55:82:86:
         e1:b4:84:73:94:d3:7a:b2:ab:13:59:9f:0e:37:71:ac:c1:56:
         a1:89:f1:2e:ec:1d:18:72:67:3d:08:61:23:d3:cb:bc:6e:03:
         83:c9:2a:e7:42:71:07:22:a2:f7:03:c0:19:64:e1:97:ce:fa:
         c7:aa:76:1a:95:9a:72:4d:8a:54:20:d2:98:c2:28:6a:ca:01:
         0d:93:8a:e1:cb:ef:e4:70:a7:6a:f0:97:6a:76:1f:35:f0:64:
         03:b0:91:ab:cd:27:5e:27:78:f6:51:fb:c2:28:3b:21:e6:df:
         e4:f8:20:fa:8d:ad:6a:c2:e8:44:04:3d:7f:be:46:93:f8:b2:
         22:86:c4:97:9f:1f:98:0d:26:b3:54:fa:ca:09:1f:fe:00:b1:
         6f:bd:3f:c3:f3:6a:38:a0:76:e0:76:47:40:bd:df:7b:04:fc:
         24:34:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:10 2025 by rpki-client