Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File:                     gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier:          Zaec4v8BFU5tJ48uJ7UJOm/JmXid9++BPOMEaqdu960=
Subject key identifier:   F7:BF:BA:0F:90:FF:90:7A:9D:21:98:C8:9A:DF:FA:AF:E5:5A:C5:15
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer:       /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial:       019A2B1E6EAD7596F3D3162AD4C35B87E314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number:          16FB
Signing time:             Tue 28 Oct 2025 14:00:05 +0000
Manifest this update:     Tue 28 Oct 2025 14:00:05 +0000
Manifest next update:     Wed 29 Oct 2025 14:00:05 +0000
Files and hashes:         1: EgJWkP_ATvd-WaK0hqp6IaIW95g.roa (hash: Qp/vVw2n2OIqo8aQ+vDa79aTq8YN8BxSb8x/nDkT+pg=)
                          2: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: l5raIyfnHc+1QTRsqCn4LvRaa9ymnemz1vY03UdBSfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2b:1e:6e:ad:75:96:f3:d3:16:2a:d4:c3:5b:87:e3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
        Validity
            Not Before: Oct 28 14:00:05 2025 GMT
            Not After : Oct 29 14:00:05 2025 GMT
        Subject: CN=f7bfba0f90ff907a9d2198c89adffaafe55ac515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:1c:e0:a4:17:ee:14:26:f0:e2:fd:63:6a:
                    4b:06:67:64:c2:52:e8:fa:e9:26:44:5d:c3:fe:41:
                    bb:6c:8a:1f:64:d4:24:07:66:c8:a0:ce:04:c6:5b:
                    ae:4e:7b:79:65:92:8a:80:e8:23:ee:e2:8b:73:ec:
                    e8:26:1e:bf:d8:ac:58:eb:2e:28:dc:8d:be:b5:34:
                    8b:ee:5f:78:71:fc:b0:71:a3:62:c3:e9:84:e0:67:
                    3a:89:68:27:0b:c3:a9:b8:07:d6:54:31:93:28:04:
                    2c:5f:0e:01:10:c1:02:5d:db:80:ed:aa:79:37:d9:
                    24:c2:f0:f8:34:41:2a:9c:88:f9:e8:bf:d8:38:6f:
                    8d:8b:3d:72:8c:32:ff:20:2f:79:fc:ff:75:28:76:
                    8f:99:d2:60:95:61:06:1d:f5:12:32:75:d3:ce:42:
                    63:9a:3c:f8:d4:20:e6:e1:39:e9:e7:69:5a:0c:fd:
                    25:2c:12:8c:9b:6e:9e:3e:ab:c8:50:06:cf:2d:8f:
                    5e:ac:8a:e1:ac:ba:ab:ce:db:24:d7:50:22:3b:b4:
                    35:dc:d4:d8:66:d6:2e:c3:c2:a2:a9:c3:6a:7e:f7:
                    d0:2a:0e:c7:31:77:75:d8:58:f1:34:87:82:88:e4:
                    f4:be:0f:38:90:0f:92:c2:bf:32:43:ce:e6:77:55:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BF:BA:0F:90:FF:90:7A:9D:21:98:C8:9A:DF:FA:AF:E5:5A:C5:15
            X509v3 Authority Key Identifier:
                keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:df:95:d4:ae:87:6e:d0:b3:43:04:89:56:e9:e4:ea:ba:24:
         d5:51:77:11:84:78:66:12:cd:03:ac:c4:3f:87:e0:b2:d0:76:
         51:c7:6a:35:a0:5c:fc:f2:39:8f:9c:e4:15:bf:c0:60:0d:df:
         49:f9:13:22:16:8c:9c:60:d9:21:11:6d:45:ce:5a:3e:f4:ec:
         df:a0:fa:15:bb:e0:55:71:a4:31:91:d3:aa:f9:1e:a5:83:4c:
         8b:66:23:6c:15:99:95:5c:de:b4:e1:e0:30:2f:a8:e4:5b:fd:
         45:50:78:7d:19:91:3d:63:c7:83:6c:ae:b9:36:54:b5:34:6f:
         79:d3:57:41:01:c1:bc:40:05:3a:11:df:40:96:62:2c:cc:c3:
         71:87:34:03:f0:6d:77:f2:5f:d9:50:e0:fc:69:e6:ed:26:5a:
         a3:8e:21:8d:ff:d8:a6:69:50:62:5b:a1:45:58:42:99:43:13:
         f1:94:46:3b:27:6e:6e:6c:2c:92:09:58:64:a0:2d:21:11:e8:
         cd:09:e2:91:de:02:c6:83:f9:da:43:16:09:3c:07:54:c4:25:
         0e:cd:45:fe:cb:81:11:5e:24:e8:cf:20:56:b9:ff:b0:b7:b7:
         fe:5b:7f:1d:fe:dc:e2:45:ea:49:a3:0b:1a:40:fc:29:26:ad:
         d2:60:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:11 2025 by rpki-client