Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File:                     gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier:          vx2rq2ADs+QQSmzFMdpLPprZzHCHBITKBfhaYBytcaI=
Subject key identifier:   4D:19:BC:DE:1E:54:51:25:82:A4:2E:94:2B:5E:8A:B3:0B:30:C9:E4
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer:       /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial:       0198D9CE4BC4EF3836C2310DDCA278BC93A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number:          0E8E
Signing time:             Sun 24 Aug 2025 02:00:32 +0000
Manifest this update:     Sun 24 Aug 2025 02:00:32 +0000
Manifest next update:     Mon 25 Aug 2025 02:00:32 +0000
Files and hashes:         1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=)
                          2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: pqdqGh+SECgdrubENGovFZL8bb+RyGWes4EA3aWYnSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:ce:4b:c4:ef:38:36:c2:31:0d:dc:a2:78:bc:93:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
        Validity
            Not Before: Aug 24 02:00:32 2025 GMT
            Not After : Aug 25 02:00:32 2025 GMT
        Subject: CN=4d19bcde1e54512582a42e942b5e8ab30b30c9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:cd:94:2b:98:21:ec:7f:b5:71:e7:22:eb:
                    bd:3d:ed:4a:17:7c:d4:6a:d2:44:ac:f1:df:d8:38:
                    35:a2:9f:58:5d:ee:cf:a0:25:6f:98:0c:a0:09:07:
                    b3:25:c5:5b:e2:5a:a9:e8:f1:fb:14:d0:74:64:6c:
                    53:e6:a7:df:c9:84:25:26:51:f1:48:e6:88:89:cb:
                    88:e7:bc:0e:0b:a3:e2:3e:3e:d8:5a:62:8c:6d:b4:
                    58:b5:88:7c:b3:2f:62:bd:68:82:e2:27:3a:9f:c9:
                    da:02:ef:48:ad:cb:0b:3b:a6:ea:98:f5:3f:c2:f8:
                    66:2e:43:01:88:23:8f:4b:c1:01:a9:56:e8:1d:7b:
                    37:35:23:ca:f1:7c:d1:f6:ad:cd:75:d0:1a:77:53:
                    0b:4c:b1:9d:78:47:ea:23:06:2e:9b:7c:10:31:b4:
                    08:fb:aa:a6:31:74:a0:f8:ca:84:b7:45:e8:9a:e4:
                    82:54:f9:39:1a:03:7b:7e:f4:39:e7:52:b9:1f:68:
                    54:17:85:7a:95:c0:84:a2:eb:d1:10:0b:6f:14:69:
                    9e:7a:4e:15:c7:2c:8b:39:e4:b6:e5:08:d8:a6:ac:
                    29:9c:49:b1:40:0f:18:e2:15:de:ff:f5:e0:8e:b2:
                    c0:6d:a3:1f:4e:32:51:bc:3b:5b:60:90:8a:0d:1b:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:19:BC:DE:1E:54:51:25:82:A4:2E:94:2B:5E:8A:B3:0B:30:C9:E4
            X509v3 Authority Key Identifier:
                keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:eb:4f:3e:42:a3:bd:ed:56:e6:eb:cf:5a:57:48:c3:04:76:
         a7:9e:ea:9a:11:0a:6e:3e:cf:f0:d6:c2:40:7c:0f:c4:39:e0:
         9d:d5:eb:b7:62:25:21:40:7e:47:79:de:d9:5c:29:ea:70:66:
         3e:f3:c8:40:19:08:3a:3b:e9:bc:d9:f5:76:51:82:66:96:df:
         f2:a4:3f:48:9a:3d:e8:a6:a3:2c:a1:a2:ad:f7:b3:96:26:fb:
         cf:f7:33:98:d6:9d:d4:e5:a0:1e:d7:ce:ed:5e:2e:b8:9b:fc:
         22:f2:c6:ac:26:fc:ee:6f:5b:ca:83:05:89:b4:a0:31:29:33:
         f1:b9:09:62:1e:e0:d6:f1:40:17:87:5e:6b:26:47:1b:5d:a6:
         41:c1:a4:47:e5:1c:91:1d:2e:fe:b2:c9:8b:e1:cc:c6:11:66:
         87:f6:86:0a:25:c2:83:29:55:86:b5:13:a6:a1:99:7d:ac:b3:
         5e:d1:70:ea:f0:87:99:7d:f1:d8:a1:48:67:84:70:e8:89:08:
         7a:9e:a7:14:2d:7f:be:19:c4:ea:6a:f5:52:6e:8a:79:09:3e:
         d3:51:38:6a:8e:fe:94:cc:e5:14:4f:bc:3e:8c:6b:67:f7:ed:
         c8:85:40:99:14:8c:d1:82:cf:c5:e2:41:b1:53:12:2e:e9:5b:
         66:43:63:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZzkvE7zg2wjEN3KJ4vJOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWY2ZTlmZjFmYmJmMjFmNjQxM2ExMzdlNzM2N2RkOGE4
YzAzNWMwHhcNMjUwODI0MDIwMDMyWhcNMjUwODI1MDIwMDMyWjAzMTEwLwYDVQQD
Eyg0ZDE5YmNkZTFlNTQ1MTI1ODJhNDJlOTQyYjVlOGFiMzBiMzBjOWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV7NlCuYIex/tXHnIuu9Pe1KF3zU
atJErPHf2Dg1op9YXe7PoCVvmAygCQezJcVb4lqp6PH7FNB0ZGxT5qffyYQlJlHx
SOaIicuI57wOC6PiPj7YWmKMbbRYtYh8sy9ivWiC4ic6n8naAu9IrcsLO6bqmPU/
wvhmLkMBiCOPS8EBqVboHXs3NSPK8XzR9q3NddAad1MLTLGdeEfqIwYum3wQMbQI
+6qmMXSg+MqEt0XomuSCVPk5GgN7fvQ551K5H2hUF4V6lcCEouvREAtvFGmeek4V
xyyLOeS25QjYpqwpnEmxQA8Y4hXe//XgjrLAbaMfTjJRvDtbYJCKDRtfmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0ZvN4eVFElgqQulCteirMLMMnkMB8GA1UdIwQY
MBaAFIIfbp/x+78h9kE6E35zZ92KjANcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUt
NWE5NGFkMTMzMTE4LzEvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUtNWE5NGFkMTMzMTE4
LzEvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+tPPkKj
ve1W5uvPWldIwwR2p57qmhEKbj7P8NbCQHwPxDngndXrt2IlIUB+R3ne2Vwp6nBm
PvPIQBkIOjvpvNn1dlGCZpbf8qQ/SJo96KajLKGirfezlib7z/czmNad1OWgHtfO
7V4uuJv8IvLGrCb87m9byoMFibSgMSkz8bkJYh7g1vFAF4deayZHG12mQcGkR+Uc
kR0u/rLJi+HMxhFmh/aGCiXCgylVhrUTpqGZfayzXtFw6vCHmX3x2KFIZ4Rw6IkI
ep6nFC1/vhnE6mr1Um6KeQk+01E4ao7+lMzlFE+8PoxrZ/ftyIVAmRSM0YLPxeJB
sVMSLulbZkNjSA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:21:05 2025 by rpki-client