Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File:                     GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier:          PBESnMhqPXUj5/Ngx+GHFXE3/4EYMd02ved4shUUh1E=
Subject key identifier:   E9:B0:60:C5:78:87:40:23:56:F2:6F:7B:96:20:B1:56:30:5D:FB:67
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       01982859E49D5EEB862BB91E5495CC542FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number:          15F1
Signing time:             Sun 20 Jul 2025 15:00:36 +0000
Manifest this update:     Sun 20 Jul 2025 15:00:36 +0000
Manifest next update:     Mon 21 Jul 2025 15:00:36 +0000
Files and hashes:         1: 3_ZiNbcF_l_fHARs-V4muQ6S87I.roa (hash: u01NktxURzNoH0tA5SjsqobM+AcImV1Of4eOpnXlaxk=)
                          2: 4B3_MshNOWnWjP1BmUx5GXRuYXQ.roa (hash: vtRq/5g0n/DkAaOADbPmajlUlRSvasZCKPeJT99ypTw=)
                          3: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=)
                          4: 9VB1aXOxh3eNHmC250hMI5AYYc4.roa (hash: g7OAsEuuCakaPKvYwJw3TuKmx4U4hqcFPU7PCZgyfGA=)
                          5: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=)
                          6: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=)
                          7: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=)
                          8: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: x/QSWuNarNVapCj+d4G7A/S6ESqFNnQpe2roQBAskPE=)
                          9: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=)
                          10: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=)
                          11: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=)
                          12: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=)
                          13: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=)
                          14: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=)
                          15: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=)
                          16: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=)
                          17: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=)
                          18: sPQj7GNvWjjtxqZ62JF9H42DMMI.roa (hash: O8z6PYZ9T+hNLoZ+Aa1FEdADEMKWYr0nGcdPMi6X/6Q=)
                          19: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=)
                          20: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=)
                          21: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:59:e4:9d:5e:eb:86:2b:b9:1e:54:95:cc:54:2f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jul 20 15:00:36 2025 GMT
            Not After : Jul 21 15:00:36 2025 GMT
        Subject: CN=e9b060c57887402356f26f7b9620b156305dfb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:a3:cc:8b:4a:27:fe:60:a8:ff:91:94:16:
                    fd:0a:e6:b7:c2:09:a2:12:21:d8:c5:f0:88:56:68:
                    d8:ad:39:d9:5f:d7:da:47:a7:c7:e3:c7:16:eb:13:
                    6c:81:22:14:48:b4:09:6b:32:14:18:7c:eb:62:da:
                    34:89:49:e8:6c:92:82:09:95:f2:6e:50:4c:08:c5:
                    e0:2c:25:2b:70:bc:9e:20:17:c9:8d:14:97:17:68:
                    06:a3:3c:da:8c:de:f4:9e:55:28:86:97:56:3d:d9:
                    38:6a:75:bd:6c:e4:84:1c:25:ea:58:c9:f1:d4:eb:
                    f8:4d:9b:76:6e:1a:ee:f2:76:cb:9f:0b:a8:87:80:
                    da:97:b6:ab:80:2b:80:ba:32:c0:73:61:06:ea:83:
                    39:1c:bd:d9:b4:e8:fd:f9:b4:7a:61:38:40:45:01:
                    26:ab:75:ea:5a:d1:75:ef:39:cf:b5:23:9a:49:de:
                    dd:eb:72:85:1e:71:1f:c2:52:a7:72:8d:9f:b4:5e:
                    47:3b:54:de:59:80:d5:6a:45:0e:a8:19:23:c5:c3:
                    99:31:2a:6d:99:d2:1b:0e:72:a2:0e:9a:8c:81:50:
                    43:64:8e:d3:ab:c4:72:4f:ff:09:84:a1:a4:ed:81:
                    80:b8:95:fa:4b:68:5c:f0:3f:ee:f0:50:32:23:40:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B0:60:C5:78:87:40:23:56:F2:6F:7B:96:20:B1:56:30:5D:FB:67
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:75:e8:22:a7:e2:72:db:55:b6:bd:71:6b:3e:12:c9:a8:75:
         b9:a7:0a:fc:18:8f:c1:95:a5:47:dd:c6:f2:45:c0:13:9c:3f:
         76:6d:74:db:d9:4c:05:3a:07:e5:8a:34:e4:60:15:23:30:93:
         19:e0:95:cf:87:85:e3:fe:59:44:11:47:31:9d:98:ca:8e:04:
         27:8f:55:a4:22:bb:73:ef:20:98:95:b0:f2:4c:b6:cc:36:f6:
         0a:e3:a6:a4:bf:2b:5f:83:cd:04:72:c6:49:11:70:f6:cb:2a:
         46:e2:94:32:04:87:4d:9a:94:fd:3e:bc:3c:65:49:62:f5:11:
         7f:79:56:eb:9e:e3:84:5e:05:f3:0d:4a:c1:80:3b:a8:14:fb:
         dd:7a:5b:e2:d3:fc:a6:ac:fe:32:0c:9f:62:30:9a:33:18:e6:
         ff:88:17:c6:3f:1c:91:44:58:7f:1c:fe:7f:19:5c:2d:c6:bf:
         1a:cd:e8:e2:fe:7c:74:c5:0c:d3:a8:bb:12:f7:2f:b0:2c:1f:
         cf:bf:3c:af:c2:ba:b6:30:60:f1:d7:cf:09:1b:e7:af:e3:b2:
         49:29:e5:a5:a5:5b:ea:9e:02:7e:c9:ea:5f:3b:1e:5a:c8:24:
         58:f6:b2:7a:00:59:0a:c0:a5:c1:f0:00:c5:ff:ce:06:df:7a:
         a8:00:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:22:43 2025 by rpki-client