Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File:                     gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier:          ZnYJwlOz0MqumRZFaKZVGr/kSR64TVYaTg4AIeIssyM=
Subject key identifier:   87:61:31:CB:31:B8:34:C4:BE:5F:CF:20:C9:BC:62:97:A2:A5:FC:0B
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer:       /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial:       019835A817751378E78C0B3F3D19344C3801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number:          0B8E
Signing time:             Wed 23 Jul 2025 05:01:05 +0000
Manifest this update:     Wed 23 Jul 2025 05:01:05 +0000
Manifest next update:     Thu 24 Jul 2025 05:01:05 +0000
Files and hashes:         1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=)
                          2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: +fiDADKTVJoDnKpFoJ+LK0gp0bR3AnoUMnORwzu3Jfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:a8:17:75:13:78:e7:8c:0b:3f:3d:19:34:4c:38:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
        Validity
            Not Before: Jul 23 05:01:05 2025 GMT
            Not After : Jul 24 05:01:05 2025 GMT
        Subject: CN=876131cb31b834c4be5fcf20c9bc6297a2a5fc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:89:fd:d7:04:7f:63:4d:5d:cb:06:af:69:
                    4f:66:cc:01:01:e9:88:78:5e:bc:69:f9:7b:d8:55:
                    2f:1c:9a:cd:5c:e9:b5:91:b2:7d:4c:91:29:7f:19:
                    6a:06:fa:12:0f:65:bd:00:8d:ce:23:6a:8b:a2:ce:
                    1f:40:c7:f5:0b:25:4e:02:e7:8c:a9:75:b9:90:55:
                    89:50:bb:26:92:09:0c:44:74:fe:03:ed:34:73:01:
                    e4:b7:af:00:fb:a8:bb:e1:e3:a2:f1:99:8c:32:f0:
                    cd:e5:e6:89:56:84:3c:24:07:be:de:8c:70:bc:77:
                    26:36:98:e3:f6:4d:5d:00:a0:9b:c0:93:13:87:70:
                    fc:96:00:10:79:7a:e0:c8:f9:d9:43:9e:2e:94:2f:
                    7a:b7:18:e2:cb:47:86:44:86:fb:21:6a:22:ff:2f:
                    56:f0:05:23:e5:61:05:a6:1f:7c:9e:4e:5f:a0:0e:
                    6e:49:41:9b:61:bc:e8:20:59:67:f8:93:b3:4b:17:
                    bf:64:5a:76:90:85:76:af:9c:2b:16:46:6c:cc:e0:
                    91:4f:65:fc:aa:22:77:42:42:61:57:32:26:fb:c1:
                    71:e7:3c:bb:28:2d:8e:22:cd:98:35:69:28:e7:87:
                    0b:ca:99:e0:fc:34:c4:3f:da:d0:6f:b4:4a:30:3a:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:31:CB:31:B8:34:C4:BE:5F:CF:20:C9:BC:62:97:A2:A5:FC:0B
            X509v3 Authority Key Identifier:
                keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c4:97:76:49:a2:fa:8e:74:8b:af:8c:85:41:55:19:35:9d:
         31:88:88:b6:65:2b:7c:1b:d9:23:1f:2b:49:a8:1f:15:18:f9:
         86:d1:f7:db:27:c5:be:92:76:4f:49:a0:92:73:c6:49:9f:4e:
         9c:83:3f:f4:b7:4a:97:ce:29:b7:02:2e:8b:9a:08:4a:f5:fa:
         8b:56:91:c6:5d:5e:83:38:2c:68:87:9b:6f:f9:20:06:c8:13:
         72:8f:cc:cd:39:88:7c:d5:21:da:a0:14:2d:79:a9:82:71:17:
         02:6d:25:e2:76:40:2f:8c:cd:7d:47:81:91:f6:0e:ef:9b:7b:
         5f:5d:ae:3d:af:2a:fe:ad:9f:cf:bd:25:71:d3:04:d1:42:8e:
         76:ed:65:39:42:65:e0:1e:7c:39:8a:54:63:4c:8e:ee:17:77:
         ef:54:67:36:87:46:63:38:45:18:7c:de:78:85:0e:f4:89:0e:
         47:1c:f1:57:43:27:a4:19:7e:3c:22:86:62:83:94:a1:e1:3a:
         a5:d5:8c:c9:5a:47:0d:96:54:b3:25:c1:0a:fa:ce:34:70:d3:
         b5:c7:d1:34:15:4d:f8:54:24:48:ab:e1:57:6a:89:81:b8:a8:
         8c:ab:f0:09:b2:49:0b:ed:f0:a2:52:5d:0e:e9:e7:b0:c4:79:
         20:9a:32:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg1qBd1E3jnjAs/PRk0TDgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYjY1YTIzMGQ2OTI3ZGJhYzIwMTA5N2Y5NDllMmVhYTI3
MzEyMjAwHhcNMjUwNzIzMDUwMTA1WhcNMjUwNzI0MDUwMTA1WjAzMTEwLwYDVQQD
Eyg4NzYxMzFjYjMxYjgzNGM0YmU1ZmNmMjBjOWJjNjI5N2EyYTVmYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBqJ/dcEf2NNXcsGr2lPZswBAemI
eF68afl72FUvHJrNXOm1kbJ9TJEpfxlqBvoSD2W9AI3OI2qLos4fQMf1CyVOAueM
qXW5kFWJULsmkgkMRHT+A+00cwHkt68A+6i74eOi8ZmMMvDN5eaJVoQ8JAe+3oxw
vHcmNpjj9k1dAKCbwJMTh3D8lgAQeXrgyPnZQ54ulC96txjiy0eGRIb7IWoi/y9W
8AUj5WEFph98nk5foA5uSUGbYbzoIFln+JOzSxe/ZFp2kIV2r5wrFkZszOCRT2X8
qiJ3QkJhVzIm+8Fx5zy7KC2OIs2YNWko54cLypng/DTEP9rQb7RKMDqRLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdhMcsxuDTEvl/PIMm8YpeipfwLMB8GA1UdIwQY
MBaAFIG2WiMNaSfbrCAQl/lJ4uqicxIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDIt
ZGFiOWRjNmRjNGM5LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jZGVjZDItMzhkNi00MGNmLWFiMDItZGFiOWRjNmRjNGM5
LzEvZ2JaYUl3MXBKOXVzSUJDWC1Vbmk2cUp6RWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsSXdkmi
+o50i6+MhUFVGTWdMYiItmUrfBvZIx8rSagfFRj5htH32yfFvpJ2T0mgknPGSZ9O
nIM/9LdKl84ptwIui5oISvX6i1aRxl1egzgsaIebb/kgBsgTco/MzTmIfNUh2qAU
LXmpgnEXAm0l4nZAL4zNfUeBkfYO75t7X12uPa8q/q2fz70lcdME0UKOdu1lOUJl
4B58OYpUY0yO7hd371RnNodGYzhFGHzeeIUO9IkORxzxV0MnpBl+PCKGYoOUoeE6
pdWMyVpHDZZUsyXBCvrONHDTtcfRNBVN+FQkSKvhV2qJgbiojKvwCbJJC+3wolJd
DunnsMR5IJoymQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:45:52 2025 by rpki-client