Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File:                     GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier:          P2Me2Mrzi/6XNGnG5l0jbbRjTjQwfvk9gsmNCag8+Qk=
Subject key identifier:   9E:05:37:7E:F1:2D:BD:04:6B:D6:78:6E:DA:CF:D0:26:DC:55:5E:F0
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer:       /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial:       01992F3638766E394AD0D58AE1A3365DBCA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number:          081E
Signing time:             Tue 09 Sep 2025 16:01:46 +0000
Manifest this update:     Tue 09 Sep 2025 16:01:46 +0000
Manifest next update:     Wed 10 Sep 2025 16:01:46 +0000
Files and hashes:         1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: Obn9B3xrLFb8YEKIKQQYhOtU1nhywIA/8Uy1IrIdcUY=)
                          2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 16:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:36:38:76:6e:39:4a:d0:d5:8a:e1:a3:36:5d:bc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
        Validity
            Not Before: Sep  9 16:01:46 2025 GMT
            Not After : Sep 10 16:01:46 2025 GMT
        Subject: CN=9e05377ef12dbd046bd6786edacfd026dc555ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:e6:1b:83:8a:33:5c:57:af:95:fd:99:33:
                    97:bc:00:06:00:3d:26:e5:59:38:fa:fa:5b:d8:25:
                    b6:c4:a5:c6:3a:56:29:39:50:6a:a4:c2:36:a2:b4:
                    3e:6c:e0:ad:95:c4:fe:50:11:dc:b2:7b:3a:fc:ab:
                    37:33:be:9b:c8:15:20:b4:19:17:f5:f3:cd:d4:08:
                    87:b4:bf:2b:3c:91:c1:05:b9:e2:3d:eb:33:59:66:
                    b8:32:ec:87:18:e2:69:d2:7f:76:3d:ee:0e:75:b5:
                    97:d8:21:45:9d:c3:83:4c:9c:cc:a9:3f:a1:31:92:
                    d0:24:8d:08:c3:50:d3:a1:fd:67:17:7d:a4:8c:df:
                    ea:6a:5f:e0:4c:26:d5:aa:3d:1e:94:a6:06:3f:13:
                    10:3a:09:97:04:23:d5:0a:37:42:66:16:9b:db:80:
                    af:89:93:7c:1f:8a:76:99:8c:07:0b:11:80:a4:0a:
                    92:c8:44:27:4c:25:03:b1:d4:2e:60:3f:98:00:a9:
                    08:dd:cd:2a:24:e1:18:1d:64:53:78:d1:c1:1c:f2:
                    4a:11:25:8c:00:2a:26:62:a3:7f:42:56:37:41:5a:
                    5c:b6:01:20:61:60:72:86:b0:b1:98:68:4e:70:ad:
                    f0:54:80:1e:53:6b:f9:c4:51:7e:01:d2:61:5e:7a:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:37:7E:F1:2D:BD:04:6B:D6:78:6E:DA:CF:D0:26:DC:55:5E:F0
            X509v3 Authority Key Identifier:
                keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:00:a5:04:c6:0e:ee:1d:3e:7d:af:5e:dc:6b:51:0b:88:
         b4:4b:81:d1:99:99:57:99:b8:0e:95:b3:c5:03:11:b6:1a:43:
         50:a8:e5:5c:85:83:2d:ad:b6:fa:03:cb:df:f9:32:04:d1:24:
         9d:ef:8e:aa:ce:e8:57:d6:dc:8d:93:68:73:c9:23:0d:eb:41:
         77:e1:9f:23:8e:35:1e:f0:9a:34:22:0e:85:bb:cb:a9:56:41:
         b8:0f:5c:de:4a:07:a1:ec:17:2b:20:10:5f:6e:12:46:0b:9e:
         bb:d6:90:96:5d:30:62:61:18:97:30:b1:4a:c4:c3:a1:21:24:
         78:b7:ac:c5:4d:5d:91:5f:8f:56:dd:62:1d:8e:64:e5:1f:87:
         44:02:47:92:13:0e:78:d9:ec:5c:61:43:4a:e5:82:ef:d1:c1:
         c1:53:bf:6c:d2:b1:f7:d2:19:69:d7:85:b7:71:02:ae:9c:94:
         6f:d5:f1:5b:dd:c4:f7:5d:d0:63:62:ac:f3:5d:27:76:d6:a9:
         46:29:fe:fa:d9:27:5e:66:9d:96:2c:32:46:d8:a2:c8:69:e7:
         d1:10:95:07:50:8e:47:02:73:f1:d8:f1:84:c7:97:ce:72:b3:
         af:a6:1f:6e:9a:8d:8f:b8:a2:07:c8:2f:de:af:4d:bd:a0:3d:
         91:ee:a0:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvNjh2bjlK0NWK4aM2XbyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZGMyMzUyMTE3NjAyMzIyZDc0MWM1MTM2OGNhOGI4ZGQx
YTNlYWEwHhcNMjUwOTA5MTYwMTQ2WhcNMjUwOTEwMTYwMTQ2WjAzMTEwLwYDVQQD
Eyg5ZTA1Mzc3ZWYxMmRiZDA0NmJkNjc4NmVkYWNmZDAyNmRjNTU1ZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk3mG4OKM1xXr5X9mTOXvAAGAD0m
5Vk4+vpb2CW2xKXGOlYpOVBqpMI2orQ+bOCtlcT+UBHcsns6/Ks3M76byBUgtBkX
9fPN1AiHtL8rPJHBBbniPeszWWa4MuyHGOJp0n92Pe4OdbWX2CFFncODTJzMqT+h
MZLQJI0Iw1DTof1nF32kjN/qal/gTCbVqj0elKYGPxMQOgmXBCPVCjdCZhab24Cv
iZN8H4p2mYwHCxGApAqSyEQnTCUDsdQuYD+YAKkI3c0qJOEYHWRTeNHBHPJKESWM
AComYqN/QlY3QVpctgEgYWByhrCxmGhOcK3wVIAeU2v5xFF+AdJhXnr+9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4FN37xLb0Ea9Z4btrP0CbcVV7wMB8GA1UdIwQY
MBaAFBjcI1IRdgIyLXQcUTaMqLjdGj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2Mt
ZDdjMGU5MzkzZWEwLzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2MtZDdjMGU5MzkzZWEw
LzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMcApQTG
Du4dPn2vXtxrUQuItEuB0ZmZV5m4DpWzxQMRthpDUKjlXIWDLa22+gPL3/kyBNEk
ne+Oqs7oV9bcjZNoc8kjDetBd+GfI441HvCaNCIOhbvLqVZBuA9c3koHoewXKyAQ
X24SRgueu9aQll0wYmEYlzCxSsTDoSEkeLesxU1dkV+PVt1iHY5k5R+HRAJHkhMO
eNnsXGFDSuWC79HBwVO/bNKx99IZadeFt3ECrpyUb9XxW93E913QY2Ks810ndtap
Rin++tknXmadliwyRtiiyGnn0RCVB1CORwJz8djxhMeXznKzr6YfbpqNj7iiB8gv
3q9NvaA9ke6gXQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 00:45:06 2025 by rpki-client