Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier:          WHELB+kuAIdKJobMaGhzg/1ga2bB7WqeWg793YMWo3E=
Subject key identifier:   1E:71:65:92:62:E5:0B:0D:A1:DD:7F:B9:C3:EC:8D:4D:B7:F2:E8:74
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer:       /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial:       0199FCC64F26B11113AC560675430AD7AB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 14:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:18 +0000
Files and hashes:         1: BiweuLnHoWiHw0dJtOKVLYe5VXw.roa (hash: v5I7lbo3yrRW4OdIb5Z9T1Oajdn5oMeqluzGbBuYfMA=)
                          2: KyxetZabMrCwSGQGlQiCSSpLezw.roa (hash: lB6fVKgf9Cm2eRE3kdPJEkhSEzxtd0NAC6g5PlzMoxw=)
                          3: SkHxUs-FrIQyM07xjoxzMJo0A-0.roa (hash: pe66sdl4nqsnLQs5V6pFP+Jxy3p0QpIUCzbid73OCcA=)
                          4: _muTs8Yrozyvhukvws4l05B7mTo.roa (hash: LD706s8S0q0ox0+6TKcyKrOGDjOk87XG1dzJqAoo9NE=)
                          5: dvbWlIR_nyOoTtNcYB_wCKbM8x8.roa (hash: vqMhD9X26YxNwUr/WhYc7U9uIGwJ0S9qj2YKPJvFuT0=)
                          6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: I36SF86nvr4ziTLcVofKOUtMWQl0yLdQbLyli+biqZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:4f:26:b1:11:13:ac:56:06:75:43:0a:d7:ab:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: Oct 19 14:01:18 2025 GMT
            Not After : Oct 20 14:01:18 2025 GMT
        Subject: CN=1e71659262e50b0da1dd7fb9c3ec8d4db7f2e874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cd:2a:08:e1:24:2d:13:54:a9:2c:ad:75:b8:
                    cb:d6:4b:35:40:a9:58:83:61:8a:6d:d3:dd:3f:18:
                    ed:9e:19:ec:46:68:36:5e:2e:7a:6d:b0:9c:79:ef:
                    7b:e1:68:06:92:01:e9:63:41:c4:cd:98:3d:eb:e6:
                    e4:88:af:b1:16:32:7e:ec:df:55:e4:93:b0:da:35:
                    1c:cc:8d:5c:7b:a7:3e:81:a6:d8:dd:6e:34:38:91:
                    ca:5e:a1:cc:2f:c2:cf:64:c0:b2:cc:28:b5:16:ab:
                    4c:42:1d:d3:51:bb:a5:62:b7:69:de:51:4d:46:51:
                    aa:f6:da:ba:d4:a8:2f:78:b1:a5:0e:4d:43:bc:a9:
                    f0:a7:fa:ea:1c:d1:7b:e3:be:3a:16:3e:2c:a4:ac:
                    a2:3b:6c:00:eb:5f:32:56:3c:2c:1e:bd:16:a5:ea:
                    b0:56:24:04:1a:1a:54:24:d9:d7:3d:91:bc:4e:79:
                    23:fb:39:18:41:64:74:75:1a:3f:4c:a2:22:fb:f1:
                    c2:51:bf:88:fd:d7:d1:93:7e:5a:02:36:a6:16:66:
                    d5:3c:a8:21:f8:2b:40:44:b5:ff:bf:60:5c:62:02:
                    2f:49:bb:bf:ad:df:9b:73:dc:f4:4e:09:bc:18:61:
                    0a:34:ab:8d:0e:7b:d2:2d:9a:86:1f:ad:c7:9b:1e:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:71:65:92:62:E5:0B:0D:A1:DD:7F:B9:C3:EC:8D:4D:B7:F2:E8:74
            X509v3 Authority Key Identifier:
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c8:f9:76:f9:3f:c2:11:2f:98:3d:7f:0e:9d:35:95:56:e8:
         6c:a5:76:cf:8d:cf:f7:60:99:1b:ae:89:a2:0f:05:2f:9c:b2:
         fe:38:11:a9:0d:fa:ca:ca:72:12:46:0f:f4:8c:bd:86:a1:61:
         85:4f:d5:42:ff:4e:94:cc:cb:85:7f:49:8d:71:8e:f2:89:bc:
         d5:cc:66:4b:5c:ce:03:64:81:08:f9:cd:49:9e:df:30:ce:0b:
         39:4c:7e:f0:09:aa:2a:35:a4:39:2d:8f:c7:1f:5f:da:d2:cf:
         1f:7e:88:2a:37:59:73:73:d4:cd:31:1f:22:57:db:38:1b:5d:
         c2:46:09:d7:b1:39:b7:cc:32:29:94:92:c4:dd:5f:4e:6c:e9:
         fa:a3:6d:18:c4:82:ad:7b:57:d6:fc:13:f7:36:00:8b:d9:8b:
         a2:18:53:19:f3:c8:6a:d0:85:10:51:3d:15:a2:99:84:af:b0:
         79:8e:ce:fd:da:69:cf:82:af:2a:77:1e:e2:c9:75:9e:74:fe:
         66:88:fe:e9:2c:a2:e1:ba:f6:60:e2:22:f8:51:fb:9c:7c:53:
         42:8b:40:cf:7e:16:3b:ba:87:c7:c9:80:70:ed:72:b8:ed:64:
         f6:11:b9:8f:b4:6b:8f:cf:c5:0d:d4:87:a4:bb:b8:8d:fa:0d:
         ea:4c:c3:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xk8msRETrFYGdUMK16sKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNTFlN2ZiNmI5NjBkNDA2YjIyMzZkMjVlNGUyMGUyNDUz
NTlkYjIwHhcNMjUxMDE5MTQwMTE4WhcNMjUxMDIwMTQwMTE4WjAzMTEwLwYDVQQD
EygxZTcxNjU5MjYyZTUwYjBkYTFkZDdmYjljM2VjOGQ0ZGI3ZjJlODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM0qCOEkLRNUqSytdbjL1ks1QKlY
g2GKbdPdPxjtnhnsRmg2Xi56bbCcee974WgGkgHpY0HEzZg96+bkiK+xFjJ+7N9V
5JOw2jUczI1ce6c+gabY3W40OJHKXqHML8LPZMCyzCi1FqtMQh3TUbulYrdp3lFN
RlGq9tq61KgveLGlDk1DvKnwp/rqHNF74746Fj4spKyiO2wA618yVjwsHr0Wpeqw
ViQEGhpUJNnXPZG8Tnkj+zkYQWR0dRo/TKIi+/HCUb+I/dfRk35aAjamFmbVPKgh
+CtARLX/v2BcYgIvSbu/rd+bc9z0Tgm8GGEKNKuNDnvSLZqGH63Hmx7KNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5xZZJi5QsNod1/ucPsjU238uh0MB8GA1UdIwQY
MBaAFIJR5/trlg1AayI20l5OIOJFNZ2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjct
ZDNhNDg3Mjk1NDkxLzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjctZDNhNDg3Mjk1NDkx
LzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcj5dvk/
whEvmD1/Dp01lVbobKV2z43P92CZG66Jog8FL5yy/jgRqQ36yspyEkYP9Iy9hqFh
hU/VQv9OlMzLhX9JjXGO8om81cxmS1zOA2SBCPnNSZ7fMM4LOUx+8AmqKjWkOS2P
xx9f2tLPH36IKjdZc3PUzTEfIlfbOBtdwkYJ17E5t8wyKZSSxN1fTmzp+qNtGMSC
rXtX1vwT9zYAi9mLohhTGfPIatCFEFE9FaKZhK+weY7O/dppz4KvKnce4sl1nnT+
Zoj+6Syi4br2YOIi+FH7nHxTQotAz34WO7qHx8mAcO1yuO1k9hG5j7Rrj8/FDdSH
pLu4jfoN6kzDaA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:25 2025 by rpki-client