Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
File:                     gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft (raw, json)
Hash identifier:          rDeGOz4XxZ7rs+YvwACjcV1fal3eyj+u3f0A/WpgAmk=
Subject key identifier:   FE:D5:A2:10:9F:FF:BB:A5:22:3F:3E:06:52:9B:73:13:ED:FB:F8:D3
Authority key identifier: 81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75
Certificate issuer:       /CN=81062dce1a791e7341d5f4259811ab4d65f6b075
Certificate serial:       0199239FCFAEB5B26EDF1D725406DAB0FD90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
Manifest number:          1203
Signing time:             Sun 07 Sep 2025 10:01:39 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:39 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:39 +0000
Files and hashes:         1: gPvG8JKXbj-vvJrpNLZ9cDnUs8w.roa (hash: JKRD+vgt19aGbPFmkdV1fkgtJNWsit5Cuia9bEn2uRY=)
                          2: gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl (hash: MwczHYg7Si5P6D+CpofdhybU0/CZKDFA7VZ6UXNhqF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:cf:ae:b5:b2:6e:df:1d:72:54:06:da:b0:fd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81062dce1a791e7341d5f4259811ab4d65f6b075
        Validity
            Not Before: Sep  7 10:01:39 2025 GMT
            Not After : Sep  8 10:01:39 2025 GMT
        Subject: CN=fed5a2109fffbba5223f3e06529b7313edfbf8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ca:62:c4:76:ef:4e:f1:ff:cf:1d:7f:d2:36:
                    01:23:78:94:c3:e9:9d:31:71:78:20:24:12:7b:f7:
                    cf:91:80:be:8f:4f:49:56:ce:d8:09:6b:62:45:85:
                    2a:fc:6f:cb:85:c8:e5:3d:f0:18:11:91:2d:f8:9b:
                    9d:30:14:30:ce:cc:61:88:c5:f3:4c:9b:db:7e:21:
                    30:6e:8f:92:e5:2e:96:7a:e7:53:c4:1c:3a:0e:93:
                    73:43:75:0c:83:29:f2:63:a5:54:d5:b9:cd:b3:a8:
                    53:b3:12:6b:f6:f9:83:c6:dd:be:59:df:f7:cd:3c:
                    42:6f:1e:fe:44:b3:c3:17:cc:51:85:4b:f2:68:d8:
                    d2:e0:8b:13:66:92:95:7a:1f:cc:72:07:41:b0:d7:
                    63:73:2d:ba:bd:b0:6f:a7:26:d4:56:4a:51:94:c9:
                    7e:62:3e:d9:3f:57:8c:48:19:9a:81:d4:9f:d3:15:
                    61:d7:84:ca:de:19:03:b4:d8:91:ee:02:0d:12:e4:
                    48:56:11:ca:98:21:3e:83:36:e0:6a:7f:b3:5b:9e:
                    6d:4d:a9:df:cb:b9:9d:45:7b:a6:64:af:b0:10:c9:
                    eb:77:7e:60:8e:a3:16:91:68:24:c8:68:f0:0d:af:
                    69:a3:2c:02:6a:cf:9e:57:90:a9:54:09:f4:ca:b6:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D5:A2:10:9F:FF:BB:A5:22:3F:3E:06:52:9B:73:13:ED:FB:F8:D3
            X509v3 Authority Key Identifier:
                keyid:81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:38:4d:a0:a4:c7:f8:68:3b:23:c5:ce:21:7a:51:a2:80:9d:
         ec:15:9c:88:62:a3:97:cf:74:65:37:19:31:6f:a2:81:38:a8:
         b4:34:9e:96:fa:5a:dc:22:eb:b5:8c:fd:c8:b4:4c:3b:6a:ec:
         ba:a3:f4:8e:7b:1c:19:6b:a3:b9:5a:50:7e:e3:05:15:2c:90:
         4f:7e:aa:0d:90:f0:aa:a2:e8:9d:fe:69:5a:6d:8d:6e:ea:a0:
         53:6b:c6:f6:20:92:56:df:a3:0f:43:be:d0:e6:af:ce:90:99:
         8b:4e:0a:4a:75:c1:3a:f9:88:f2:68:3f:d7:d9:8f:f3:38:f3:
         2d:b9:b1:67:96:75:7f:16:9a:6b:ac:d1:70:dc:2d:33:cd:3d:
         28:3e:b0:a3:fe:8c:a6:0f:3d:a3:e7:78:77:61:46:8f:6e:d4:
         6c:af:a7:e3:6b:b4:dd:8f:d8:f0:d2:ae:88:e9:c6:50:99:d7:
         96:1f:90:14:b7:97:1d:54:88:89:e4:74:0b:17:54:6b:b2:f0:
         3f:97:73:19:61:7b:44:12:52:47:d1:6c:ee:9d:27:84:4d:34:
         cb:24:00:f3:45:be:69:69:ea:3a:58:0b:48:44:8d:66:99:d5:
         76:c0:72:43:f8:72:1b:93:ff:98:ac:d9:78:a9:7a:03:3a:24:
         33:a8:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:52 2025 by rpki-client