Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File:                     gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier:          Xy+eizXOk1B7H82CAMHkfFFG5pKXfjW24cBbuZSrEoQ=
Subject key identifier:   FB:CE:88:A0:66:A4:5D:CC:FF:1A:6F:A9:FE:D9:4F:5E:D6:36:7F:E6
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer:       /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial:       019935DC59D96FFFB5C4A5B97B643C2AD088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number:          167B
Signing time:             Wed 10 Sep 2025 23:00:57 +0000
Manifest this update:     Wed 10 Sep 2025 23:00:57 +0000
Manifest next update:     Thu 11 Sep 2025 23:00:57 +0000
Files and hashes:         1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=)
                          2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: b1BJIIC4BXVd2mTpD423yt6CtJzX+jXsiaULPnfcQq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:dc:59:d9:6f:ff:b5:c4:a5:b9:7b:64:3c:2a:d0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
        Validity
            Not Before: Sep 10 23:00:57 2025 GMT
            Not After : Sep 11 23:00:57 2025 GMT
        Subject: CN=fbce88a066a45dccff1a6fa9fed94f5ed6367fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:7f:c1:b8:f9:d8:32:f9:25:5a:be:69:84:
                    be:c0:fe:06:2c:84:02:61:67:e6:c1:ae:3a:ec:05:
                    89:32:24:9c:ec:77:a2:24:59:f9:42:de:e1:81:77:
                    f3:b3:1a:62:74:7a:f5:61:94:cd:ce:90:bf:8f:5d:
                    a3:9c:52:57:95:5f:cf:4d:32:1b:79:ba:2d:7e:89:
                    e9:a9:75:38:10:59:0e:20:22:d0:18:ad:86:f9:24:
                    86:ce:e9:1c:7c:a3:56:45:06:5d:ed:3a:39:01:fa:
                    1e:ec:25:74:bf:e0:92:33:e1:d9:fe:93:b1:25:39:
                    09:f2:d5:69:7a:7e:73:4e:04:12:29:ba:62:5e:83:
                    43:68:4f:f1:43:16:5f:0c:bb:f6:52:14:1b:7b:53:
                    6d:8b:c5:fe:b8:98:59:75:58:f5:33:c2:ab:ee:91:
                    83:5c:bc:bb:e4:44:3d:36:68:cd:f6:d1:da:ba:45:
                    2f:2c:ae:a1:72:fe:59:d9:92:c7:9b:cd:49:62:47:
                    5d:8d:cf:77:c1:9b:ac:ad:18:64:80:0f:c3:8e:f9:
                    28:20:79:45:a1:a1:1f:e9:c3:84:b5:5b:de:13:70:
                    c7:fc:27:ca:b6:fd:62:00:b1:28:c7:42:c2:37:02:
                    bb:dd:b4:f4:eb:6d:f5:90:96:e2:41:d7:1b:a4:83:
                    9b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CE:88:A0:66:A4:5D:CC:FF:1A:6F:A9:FE:D9:4F:5E:D6:36:7F:E6
            X509v3 Authority Key Identifier:
                keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:92:04:66:88:06:22:5d:0c:f2:0e:24:a0:04:79:c4:3d:8c:
         70:6a:2c:df:42:f9:6e:fe:df:83:40:9e:96:ee:71:0b:fb:62:
         6d:79:79:db:76:7c:18:d7:2f:8f:f8:f1:c5:57:c3:8e:93:09:
         c8:dc:4a:e3:ef:c4:4e:7b:ae:59:bb:0c:c8:4f:92:82:24:6d:
         8b:00:f0:6b:62:72:11:d3:bf:6b:d9:3b:2c:da:9b:2a:cd:fc:
         5b:78:fe:6b:d5:58:3f:cf:8c:6b:55:23:0b:da:a1:b5:c0:ae:
         56:8d:0b:f6:f0:43:ca:9d:e5:0a:a2:7f:a7:85:bc:19:46:d1:
         0e:5d:d4:af:79:c9:23:21:12:7c:75:63:01:94:50:21:eb:26:
         79:5b:b1:38:ee:d2:1a:ef:87:61:18:ae:21:49:63:12:7a:a3:
         41:fa:b7:00:6a:3f:02:04:0c:8e:ef:97:03:42:3a:8f:d2:8d:
         ef:9c:86:27:4f:23:1b:34:a7:3a:ca:bb:64:13:c4:e4:be:bf:
         8b:ce:49:8a:5d:5e:82:1f:6b:ac:22:a2:0b:e3:9d:68:e1:9a:
         20:53:cc:08:ab:30:91:71:4d:22:f7:0d:d6:5d:05:5f:59:cb:
         cd:55:98:cb:56:5c:20:aa:94:fa:b7:e8:3e:e3:c4:49:e6:55:
         6d:9f:23:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk13FnZb/+1xKW5e2Q8KtCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzllYWQ4MzVhOGZjZmFlMGQ5ZWUyODM5Y2QxNjg4MWJh
MTFkZDcwHhcNMjUwOTEwMjMwMDU3WhcNMjUwOTExMjMwMDU3WjAzMTEwLwYDVQQD
EyhmYmNlODhhMDY2YTQ1ZGNjZmYxYTZmYTlmZWQ5NGY1ZWQ2MzY3ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrd/wbj52DL5JVq+aYS+wP4GLIQC
YWfmwa467AWJMiSc7HeiJFn5Qt7hgXfzsxpidHr1YZTNzpC/j12jnFJXlV/PTTIb
ebotfonpqXU4EFkOICLQGK2G+SSGzukcfKNWRQZd7To5Afoe7CV0v+CSM+HZ/pOx
JTkJ8tVpen5zTgQSKbpiXoNDaE/xQxZfDLv2UhQbe1Nti8X+uJhZdVj1M8Kr7pGD
XLy75EQ9NmjN9tHaukUvLK6hcv5Z2ZLHm81JYkddjc93wZusrRhkgA/DjvkoIHlF
oaEf6cOEtVveE3DH/CfKtv1iALEox0LCNwK73bT06231kJbiQdcbpIObUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvOiKBmpF3M/xpvqf7ZT17WNn/mMB8GA1UdIwQY
MBaAFIJ56tg1qPz64NnuKDnNFogboR3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUt
ZWUyOWM5MTM2ZThiLzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUtZWUyOWM5MTM2ZThi
LzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppIEZogG
Il0M8g4koAR5xD2McGos30L5bv7fg0Celu5xC/tibXl523Z8GNcvj/jxxVfDjpMJ
yNxK4+/ETnuuWbsMyE+SgiRtiwDwa2JyEdO/a9k7LNqbKs38W3j+a9VYP8+Ma1Uj
C9qhtcCuVo0L9vBDyp3lCqJ/p4W8GUbRDl3Ur3nJIyESfHVjAZRQIesmeVuxOO7S
Gu+HYRiuIUljEnqjQfq3AGo/AgQMju+XA0I6j9KN75yGJ08jGzSnOsq7ZBPE5L6/
i85Jil1egh9rrCKiC+OdaOGaIFPMCKswkXFNIvcN1l0FX1nLzVWYy1ZcIKqU+rfo
PuPESeZVbZ8jsA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:20:56 2025 by rpki-client