Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File:                     Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier:          opy+Kfbq/fmvgALeLFETIK6FOBjlRBgpLcqPkHVLdRI=
Subject key identifier:   5A:81:7C:8C:85:DF:EF:67:CC:AE:4F:7F:CF:7B:F2:99:01:DB:06:8D
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       01992BC7059E533C3B58BD3A97CE472B9CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number:          167A
Signing time:             Tue 09 Sep 2025 00:01:27 +0000
Manifest this update:     Tue 09 Sep 2025 00:01:27 +0000
Manifest next update:     Wed 10 Sep 2025 00:01:27 +0000
Files and hashes:         1: FPpOTBKmvHdioInyAceH2PiTSvg.roa (hash: 7KPVyyz4s0tMlqQlKNiyZSMIJyFa//iS/eNcNHIUsks=)
                          2: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: AgxpnSFa3UqCv6ugNMsjesQYWht+DOzm20C44XuCy1s=)
                          3: YUvzYRFbDZwpo5_LDw6OQYXrOWU.roa (hash: A9tNEkwBv00N9f8wPpHIeu7SSAIiBzAHZmfokT+2re4=)
                          4: fbMdnuR0es_HjgTaYkDoz6AE4eQ.roa (hash: b27haQtyNO61SdNpnuLEVI2t6aVsy/NGgbKBT4i0JIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2b:c7:05:9e:53:3c:3b:58:bd:3a:97:ce:47:2b:9c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: Sep  9 00:01:27 2025 GMT
            Not After : Sep 10 00:01:27 2025 GMT
        Subject: CN=5a817c8c85dfef67ccae4f7fcf7bf29901db068d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:07:ee:28:dc:8c:5b:73:c9:52:11:58:6e:
                    a3:54:85:43:81:5c:93:8d:ac:0e:90:c3:9b:8d:ba:
                    23:9c:50:42:0b:af:85:5b:cb:b9:c4:3b:fd:dd:9d:
                    be:6e:ee:9b:43:f3:d3:ae:2b:7c:83:8e:67:18:c5:
                    e5:b2:30:c0:4b:c8:5b:fd:8f:15:83:d3:4f:ce:b5:
                    1e:fd:ea:31:58:a3:08:71:e2:a3:99:da:e4:26:de:
                    1e:c0:d3:13:23:2e:0e:80:b2:c0:81:00:01:95:21:
                    62:66:1a:33:a8:04:b8:ad:41:08:b5:44:f2:ad:61:
                    f2:ac:fd:59:16:ea:39:d1:0f:9c:f5:dc:2d:3b:f4:
                    2b:70:4a:70:86:b1:23:2c:a7:52:2b:6f:ff:b6:be:
                    28:03:5e:50:f1:6e:02:66:a6:44:ce:a3:d1:31:c3:
                    71:2f:a2:22:79:c1:1c:98:47:b2:e0:48:34:b2:dc:
                    55:90:7a:6b:74:2e:b9:98:c9:f3:ec:3a:71:f4:57:
                    e6:7f:7c:42:08:d7:01:bb:44:ae:b7:9d:f6:e4:24:
                    ee:ad:c0:d7:b5:90:02:a7:33:68:93:2e:e9:27:01:
                    41:80:5c:a5:49:ef:95:14:90:3c:d0:b8:c8:27:c1:
                    cf:7c:27:c4:bd:25:4a:3a:38:f9:e0:41:cb:ca:80:
                    ea:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:81:7C:8C:85:DF:EF:67:CC:AE:4F:7F:CF:7B:F2:99:01:DB:06:8D
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:84:20:c8:f1:ac:bf:ad:16:bc:c5:f7:8a:b2:11:66:b7:9e:
         e3:e3:e4:74:5e:43:91:4e:11:22:01:ee:e7:87:a5:81:3a:1e:
         2e:54:7d:47:eb:73:73:39:7f:24:19:62:93:d5:3e:a0:26:0a:
         42:31:31:e8:df:4a:67:cd:e0:56:6a:b9:5e:12:ea:e0:c6:c9:
         23:ad:31:3b:32:ad:f7:7c:9c:79:92:44:b5:c4:45:21:40:09:
         10:bf:c9:f8:3a:ab:45:3a:c8:0e:2d:d6:7d:8d:4a:5f:7d:82:
         d2:89:56:fc:89:36:76:c3:7f:8b:a2:c9:74:bf:c4:af:ae:af:
         27:18:17:c5:1f:c6:cc:25:04:88:b9:7b:7d:80:f9:e0:ce:d4:
         57:0f:04:9a:78:f0:42:62:83:08:06:9c:52:45:fb:79:3a:81:
         0f:5e:de:03:85:1e:d9:5f:b4:3c:e9:8c:65:cb:44:9a:2f:86:
         85:9a:9a:d2:e4:f6:92:b6:fc:e1:25:37:d2:63:9a:9a:68:99:
         a9:d1:dc:be:e9:d9:57:00:9f:df:d5:82:7f:b0:5c:54:f4:84:
         fc:da:28:85:56:39:90:ae:ee:ef:9f:6d:6b:48:6e:3d:81:73:
         9d:fe:3a:eb:fa:6d:a8:41:47:81:24:7c:e7:fa:a3:89:63:30:
         21:9f:3c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:13:37 2025 by rpki-client