Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File:                     guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier:          YoezRi77OqCaW+/zaxWIsuQZzHxUAmzS+Oz2DxcqEVw=
Subject key identifier:   81:F8:FF:27:37:29:49:C1:E4:BC:42:37:F1:FF:29:C9:75:5A:B2:92
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer:       /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial:       0199FFC79C52EC8ED9F0E28CC69C6D84F16A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number:          16E4
Signing time:             Mon 20 Oct 2025 04:01:35 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:35 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:35 +0000
Files and hashes:         1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: pqP14X6uSOx/CN1nKCBjrTMpsIAuyuBJGv402B/2+8w=)
                          2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:9c:52:ec:8e:d9:f0:e2:8c:c6:9c:6d:84:f1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
        Validity
            Not Before: Oct 20 04:01:35 2025 GMT
            Not After : Oct 21 04:01:35 2025 GMT
        Subject: CN=81f8ff27372949c1e4bc4237f1ff29c9755ab292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:84:3f:c2:c3:4a:60:25:f2:90:80:b0:8c:
                    23:1c:29:1c:fc:96:84:40:e4:ad:c8:bf:8c:14:40:
                    51:32:2d:19:06:88:6d:4d:65:c1:df:f5:a8:0e:cf:
                    2d:b8:a3:87:8e:39:06:ed:22:1c:d1:70:0a:72:e4:
                    ec:d5:06:76:08:da:99:0b:67:04:e9:63:6f:91:57:
                    89:93:7a:c4:de:34:6e:af:44:0c:97:aa:1a:b0:66:
                    f3:42:1c:19:30:4e:a2:41:63:3d:cd:ff:e1:30:9b:
                    94:93:63:c9:09:59:44:1c:d6:57:ae:14:a3:44:3a:
                    89:fc:02:76:37:87:b1:99:93:98:17:a5:96:95:26:
                    6b:ea:d8:42:23:48:4e:11:b5:2b:ce:8d:89:10:b5:
                    6f:ed:15:40:ae:02:c2:6a:1b:df:8b:f9:7e:73:18:
                    7e:da:39:95:1a:f1:fc:01:1b:e9:c1:ff:d9:2f:50:
                    ff:7d:7b:25:e9:7b:3d:75:d9:15:61:cd:0a:d8:22:
                    78:47:12:14:f2:75:8d:83:30:dc:f0:f9:a9:db:32:
                    67:69:0a:d1:9c:5f:f6:78:89:06:71:71:ea:ba:db:
                    c0:33:e8:f5:3c:32:88:a4:16:7f:b4:2f:f5:30:e6:
                    af:ff:79:19:ef:af:6a:be:b4:d8:7c:12:e5:3f:f5:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F8:FF:27:37:29:49:C1:E4:BC:42:37:F1:FF:29:C9:75:5A:B2:92
            X509v3 Authority Key Identifier:
                keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:93:cc:27:e0:e5:da:b7:eb:58:ab:4f:3c:a7:a6:19:74:de:
         36:bd:e3:e2:7e:61:5c:71:72:75:31:8b:94:8b:95:0f:fe:0b:
         f1:c4:cd:d0:be:cc:dc:c1:a1:3b:96:5d:46:81:b2:c4:6a:37:
         9f:bd:a1:76:e8:71:79:6b:25:83:72:5b:3d:e3:50:44:55:fa:
         a0:3f:af:57:41:57:0e:72:3e:91:49:e8:69:61:a7:5e:a9:1a:
         4d:86:df:e7:9a:81:fc:3b:80:30:83:88:a2:0f:d1:4b:cf:8b:
         c9:80:c8:69:8d:eb:0a:60:5f:c3:fa:0d:f8:f2:c5:a6:8a:67:
         f6:9c:0b:5e:7b:89:de:62:99:30:e7:0f:95:95:a5:b8:11:d1:
         26:08:2b:96:f4:9c:6d:ee:ed:e6:35:5a:76:6a:25:d4:39:69:
         a7:0e:cf:c4:56:a4:36:70:b2:ab:95:53:59:14:f8:05:b5:cf:
         0d:1c:35:29:f3:24:9b:6a:7f:30:51:6f:50:a7:d0:21:ce:4a:
         2e:c5:aa:75:47:46:ca:9e:5f:23:0e:ce:c1:64:2a:3a:54:29:
         8f:cd:2e:71:7e:23:a2:f6:4d:61:7c:83:60:b5:60:07:3f:ff:
         70:66:21:d2:5d:b5:4a:c4:4f:6d:80:11:f2:46:cd:9e:28:51:
         f5:df:01:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x5xS7I7Z8OKMxpxthPFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTIyZGE5YmYwYTc0MTcxZWViYjRjZDk4ZmMyNWYzMDQx
YWRkMmYwHhcNMjUxMDIwMDQwMTM1WhcNMjUxMDIxMDQwMTM1WjAzMTEwLwYDVQQD
Eyg4MWY4ZmYyNzM3Mjk0OWMxZTRiYzQyMzdmMWZmMjljOTc1NWFiMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHWEP8LDSmAl8pCAsIwjHCkc/JaE
QOStyL+MFEBRMi0ZBohtTWXB3/WoDs8tuKOHjjkG7SIc0XAKcuTs1QZ2CNqZC2cE
6WNvkVeJk3rE3jRur0QMl6oasGbzQhwZME6iQWM9zf/hMJuUk2PJCVlEHNZXrhSj
RDqJ/AJ2N4exmZOYF6WWlSZr6thCI0hOEbUrzo2JELVv7RVArgLCahvfi/l+cxh+
2jmVGvH8ARvpwf/ZL1D/fXsl6Xs9ddkVYc0K2CJ4RxIU8nWNgzDc8Pmp2zJnaQrR
nF/2eIkGcXHqutvAM+j1PDKIpBZ/tC/1MOav/3kZ769qvrTYfBLlP/WNGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH4/yc3KUnB5LxCN/H/Kcl1WrKSMB8GA1UdIwQY
MBaAFILiLam/CnQXHuu0zZj8JfMEGt0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjIt
NWMyOTE5ZGE4ZGYzLzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjItNWMyOTE5ZGE4ZGYz
LzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpPMJ+Dl
2rfrWKtPPKemGXTeNr3j4n5hXHFydTGLlIuVD/4L8cTN0L7M3MGhO5ZdRoGyxGo3
n72hduhxeWslg3JbPeNQRFX6oD+vV0FXDnI+kUnoaWGnXqkaTYbf55qB/DuAMIOI
og/RS8+LyYDIaY3rCmBfw/oN+PLFpopn9pwLXnuJ3mKZMOcPlZWluBHRJggrlvSc
be7t5jVadmol1Dlppw7PxFakNnCyq5VTWRT4BbXPDRw1KfMkm2p/MFFvUKfQIc5K
LsWqdUdGyp5fIw7OwWQqOlQpj80ucX4jovZNYXyDYLVgBz//cGYh0l21SsRPbYAR
8kbNnihR9d8BHg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:08 2025 by rpki-client