Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
File:                     G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json)
Hash identifier:          uGBAvgQ3dsIJCLZGcV6NvG9rp1Ev2VEllMhQr/se6fE=
Subject key identifier:   06:9C:21:4E:37:DB:D2:6C:BC:3A:CC:B5:8F:05:79:EF:3A:9B:EF:47
Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Certificate issuer:       /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Certificate serial:       01992EC7AC062C8243FDCBB16D58B9800EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
Manifest number:          012C
Signing time:             Tue 09 Sep 2025 14:01:01 +0000
Manifest this update:     Tue 09 Sep 2025 14:01:01 +0000
Manifest next update:     Wed 10 Sep 2025 14:01:01 +0000
Files and hashes:         1: 1-QgVdEVAtmDVzPL1t30XEpMkKpg.roa (hash: Nb18hgZy/dUiDthUh4PrNXR3WH0/oCbuHBjHexDpA0Y=)
                          2: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: GVYZUkJGUuRz4spCsiRNtiQ419kEs7w9BcwT8Zzh+HM=)
                          3: G1iTz--AdrX58wnteKblePSt-Jw.roa (hash: 0Fp+SXPuf0GKZAv8TJo76eTj4M6Vb7IJbISKBHsaJUM=)
                          4: pBdQvnX6dKY3XlqUYWMWUMcKsus.roa (hash: 7HSL2j8DzWASbakGMcnWSJulH/02edTERxWRK0JJXZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2e:c7:ac:06:2c:82:43:fd:cb:b1:6d:58:b9:80:0e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
        Validity
            Not Before: Sep  9 14:01:01 2025 GMT
            Not After : Sep 10 14:01:01 2025 GMT
        Subject: CN=069c214e37dbd26cbc3accb58f0579ef3a9bef47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:ac:81:3e:58:d0:68:3c:f5:b7:ba:f6:fe:
                    ad:11:de:8e:00:b8:b2:76:1c:8b:da:52:86:e8:8a:
                    c6:6a:a4:4a:6f:bb:54:6b:3b:d5:c6:e5:10:07:a8:
                    50:37:a2:64:bf:63:52:e0:aa:4c:6b:f4:97:3d:33:
                    d4:86:35:a0:d7:f3:83:3d:db:17:de:83:47:9b:03:
                    24:bd:37:b5:5f:d2:47:27:00:a2:22:1f:e6:c5:eb:
                    6b:66:19:e3:06:c7:65:bd:2e:54:04:7f:8d:7f:a3:
                    f3:31:d5:70:0b:f7:f5:44:9e:80:10:2d:c8:fb:aa:
                    bd:51:65:c7:8f:ee:f3:6a:d9:da:63:fb:6b:2d:13:
                    c7:74:9f:0d:82:03:d2:5a:0f:99:65:7d:f4:87:2a:
                    cb:b5:00:c3:08:e1:00:44:ea:ce:7c:17:f6:71:bb:
                    0b:20:cd:89:86:d6:19:57:d6:4c:52:44:ae:4b:e0:
                    66:b5:11:3a:49:5c:36:21:23:4b:c6:dc:84:95:12:
                    bf:7d:b8:d2:a3:d1:d5:53:c5:e6:0b:29:a6:fd:50:
                    66:8d:3c:d4:88:db:31:39:6f:8c:0d:0c:f4:da:9b:
                    ee:92:05:67:63:b6:d1:2a:bf:b7:db:ce:e6:c2:a4:
                    45:e7:f0:12:70:7f:c7:82:9c:62:41:df:83:57:7e:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9C:21:4E:37:DB:D2:6C:BC:3A:CC:B5:8F:05:79:EF:3A:9B:EF:47
            X509v3 Authority Key Identifier:
                keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:04:ad:4b:52:20:6b:c9:93:bf:b4:03:4b:84:14:ae:40:
         80:55:6c:a1:19:86:32:8c:0c:2e:09:46:54:b5:cd:e2:f4:17:
         c2:cd:47:41:3d:1d:fa:b9:c5:21:24:17:e1:a3:01:b4:a4:0b:
         5d:9f:09:99:f9:22:2d:e8:1f:3d:85:83:ca:8a:24:2b:81:55:
         e2:0d:8a:c9:ce:f5:80:5a:84:f8:fe:29:59:62:9f:1a:0b:63:
         60:0f:15:c1:05:5d:fd:70:ba:3d:33:f4:fe:86:20:5f:d5:3a:
         5c:b3:f9:73:a5:cc:5e:02:f4:93:2d:c1:4f:87:d7:7e:e4:5d:
         92:92:88:44:07:21:2e:23:33:28:8b:07:8f:4c:ab:b9:79:0f:
         2b:b9:35:b8:57:3c:2b:6f:e1:3b:8a:9b:a8:df:db:e8:dd:4f:
         fa:38:98:51:7b:95:a1:84:de:22:9d:86:2c:1a:bc:8b:47:f4:
         af:91:f1:2b:30:e5:d0:2b:ad:6a:5f:1a:52:24:c8:1a:ae:0a:
         86:fd:f5:6f:2a:cf:c0:cb:cf:7a:6f:c0:77:f5:8a:21:9b:c0:
         04:9c:0c:e2:8b:c4:a6:76:55:22:9b:66:6d:06:3f:79:68:b7:
         4b:83:83:e3:9e:8c:8a:07:a9:1f:05:1a:0c:dd:06:f2:b2:b7:
         6d:7f:a9:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkux6wGLIJD/cuxbVi5gA6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk
OWI0NWEwHhcNMjUwOTA5MTQwMTAxWhcNMjUwOTEwMTQwMTAxWjAzMTEwLwYDVQQD
EygwNjljMjE0ZTM3ZGJkMjZjYmMzYWNjYjU4ZjA1NzllZjNhOWJlZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uCsgT5Y0Gg89be69v6tEd6OALiy
dhyL2lKG6IrGaqRKb7tUazvVxuUQB6hQN6Jkv2NS4KpMa/SXPTPUhjWg1/ODPdsX
3oNHmwMkvTe1X9JHJwCiIh/mxetrZhnjBsdlvS5UBH+Nf6PzMdVwC/f1RJ6AEC3I
+6q9UWXHj+7zatnaY/trLRPHdJ8NggPSWg+ZZX30hyrLtQDDCOEAROrOfBf2cbsL
IM2JhtYZV9ZMUkSuS+BmtRE6SVw2ISNLxtyElRK/fbjSo9HVU8XmCymm/VBmjTzU
iNsxOW+MDQz02pvukgVnY7bRKr+3287mwqRF5/AScH/HgpxiQd+DV36PqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAacIU4329JsvDrMtY8Fee86m+9HMB8GA1UdIwQY
MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut
YTBiY2M5MTJkNzM1LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1
LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqYErUtS
IGvJk7+0A0uEFK5AgFVsoRmGMowMLglGVLXN4vQXws1HQT0d+rnFISQX4aMBtKQL
XZ8JmfkiLegfPYWDyookK4FV4g2Kyc71gFqE+P4pWWKfGgtjYA8VwQVd/XC6PTP0
/oYgX9U6XLP5c6XMXgL0ky3BT4fXfuRdkpKIRAchLiMzKIsHj0yruXkPK7k1uFc8
K2/hO4qbqN/b6N1P+jiYUXuVoYTeIp2GLBq8i0f0r5HxKzDl0Cutal8aUiTIGq4K
hv31byrPwMvPem/Ad/WKIZvABJwM4ovEpnZVIptmbQY/eWi3S4OD456MigepHwUa
DN0G8rK3bX+pGg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 22:20:15 2025 by rpki-client