Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
File:                     G5gog-Hfv0Yz4IwLWMheif_DIQE.mft (raw, json)
Hash identifier:          HtEdbxU012GYSmwj+gWUDrdSM6wFoF6sUw6NhkT5lQU=
Subject key identifier:   27:38:CC:4E:71:B2:30:D3:A9:CE:E8:2E:04:64:A2:65:78:95:C4:C0
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Certificate issuer:       /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial:       0199277D8788186B9E1FADD5D5FBD4CC6E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
Manifest number:          0BC7
Signing time:             Mon 08 Sep 2025 04:02:42 +0000
Manifest this update:     Mon 08 Sep 2025 04:02:42 +0000
Manifest next update:     Tue 09 Sep 2025 04:02:42 +0000
Files and hashes:         1: 9tT1Sn3Qux2-pUIWCQe_vjURo9M.roa (hash: FairLybhS08hCgrNLc9cEd4IlKo+5RTneSM8eV+/6qk=)
                          2: BmpGigL7yj_vU4YrBcCEXhWHHbI.roa (hash: Ppbu0DUb3G/J7ntuuCJmNlJLWLrlVFHUquuws77rxcY=)
                          3: G5gog-Hfv0Yz4IwLWMheif_DIQE.crl (hash: 78hGOuKMslWo66glJ2DPs9xJesSgIBOhnTF7JFd4g+Q=)
                          4: KxqqgwhHr1JBau2ZnEJ99DBtg4A.roa (hash: QCOcE3LD/xRpaRa6zgmKhfyxrFbaW8v4jp9GZFELj38=)
                          5: UjncDvFxOlRCkAGtD0tzYyO0vwY.roa (hash: HR/S3qDlN6tb+Q3T8TNZutyXf0XfoqKmAw4PR5qJTgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:27:7d:87:88:18:6b:9e:1f:ad:d5:d5:fb:d4:cc:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
        Validity
            Not Before: Sep  8 04:02:42 2025 GMT
            Not After : Sep  9 04:02:42 2025 GMT
        Subject: CN=2738cc4e71b230d3a9cee82e0464a2657895c4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:95:63:05:75:e7:e1:60:a5:3e:d3:0f:05:
                    bc:1f:68:ec:22:59:95:05:d2:0b:1d:1c:76:b7:9d:
                    7d:92:3b:04:69:d5:b0:d6:f6:19:5a:7a:fb:56:cb:
                    b8:71:71:ef:3b:b3:66:ee:35:e4:60:b4:a3:f6:23:
                    ad:a5:ed:88:eb:ef:24:5e:8e:0e:2d:ab:4e:6e:4d:
                    db:fd:61:80:ae:a9:5d:18:31:9a:0c:61:b8:18:ba:
                    9d:59:7c:89:47:2d:50:87:63:e2:db:a6:bd:5a:45:
                    30:c8:b7:ce:6c:38:b5:21:ea:63:bb:9f:4a:32:d9:
                    c9:84:db:1f:c0:3a:2e:fe:18:2c:9f:37:00:f9:ff:
                    d0:09:93:89:55:09:c1:4c:c2:a5:92:85:45:a2:ad:
                    82:f6:66:ba:ff:2a:f1:f5:e0:16:d1:6d:08:97:43:
                    32:45:b0:8c:76:f5:45:bf:fb:30:89:21:7f:b5:91:
                    dc:28:1d:d3:cc:ba:5d:cb:ee:f8:05:d9:2f:91:3b:
                    60:27:9f:b0:47:40:1d:7f:70:2e:f5:71:d2:7f:ae:
                    e1:18:ae:33:36:61:3e:6d:d3:90:b2:a0:0e:a7:46:
                    53:25:87:1e:42:6e:8f:52:a6:36:59:15:ea:2d:aa:
                    c7:9e:d7:82:58:9f:ac:21:be:b3:81:ed:6f:19:c9:
                    74:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:38:CC:4E:71:B2:30:D3:A9:CE:E8:2E:04:64:A2:65:78:95:C4:C0
            X509v3 Authority Key Identifier:
                keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:e8:27:bf:8d:c4:8d:ee:f5:75:2c:05:c7:ae:85:6b:bb:
         d8:9a:8d:a1:0d:2c:3f:7a:ec:63:c3:ea:30:d7:aa:6a:5e:57:
         3c:de:93:16:9b:67:26:fb:80:6a:46:db:eb:5f:43:ef:6f:21:
         11:cb:98:d0:ca:7e:46:56:c0:0d:47:09:01:9e:8a:5a:fb:80:
         dd:d0:7a:e5:22:58:35:49:55:9c:ea:c4:01:d7:7f:42:16:6f:
         39:97:0a:35:0e:11:89:5f:76:9e:2f:98:e0:61:c9:de:d4:67:
         12:13:29:51:71:7b:f7:4e:8f:3b:71:7d:72:13:e0:dd:e5:d0:
         47:65:54:61:1c:c9:f7:13:76:14:06:85:aa:1f:3e:59:b7:29:
         7e:ef:42:ff:c9:31:6a:52:d9:2e:1d:87:1f:4f:76:e6:07:21:
         4c:3f:a1:6a:aa:ef:ce:7a:22:93:d7:a0:92:f8:82:42:d1:76:
         19:2f:82:e3:e1:74:a5:81:52:7e:c8:cf:a9:9a:16:fb:65:59:
         46:0e:11:d8:81:43:4f:be:b7:e4:fa:73:c1:a9:a9:19:9a:90:
         7a:84:aa:0a:a7:bc:cf:35:c0:94:b1:c0:00:2b:eb:4f:71:03:
         60:88:14:db:2b:e6:5e:7c:55:96:e9:50:f6:19:8f:44:53:cd:
         16:9b:e1:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknfYeIGGueH63V1fvUzG5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTgyODgzZTFkZmJmNDYzM2UwOGMwYjU4Yzg1ZTg5ZmZj
MzIxMDEwHhcNMjUwOTA4MDQwMjQyWhcNMjUwOTA5MDQwMjQyWjAzMTEwLwYDVQQD
EygyNzM4Y2M0ZTcxYjIzMGQzYTljZWU4MmUwNDY0YTI2NTc4OTVjNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRmVYwV15+FgpT7TDwW8H2jsIlmV
BdILHRx2t519kjsEadWw1vYZWnr7Vsu4cXHvO7Nm7jXkYLSj9iOtpe2I6+8kXo4O
LatObk3b/WGArqldGDGaDGG4GLqdWXyJRy1Qh2Pi26a9WkUwyLfObDi1Iepju59K
MtnJhNsfwDou/hgsnzcA+f/QCZOJVQnBTMKlkoVFoq2C9ma6/yrx9eAW0W0Il0My
RbCMdvVFv/swiSF/tZHcKB3TzLpdy+74BdkvkTtgJ5+wR0Adf3Au9XHSf67hGK4z
NmE+bdOQsqAOp0ZTJYceQm6PUqY2WRXqLarHnteCWJ+sIb6zge1vGcl0ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCc4zE5xsjDTqc7oLgRkomV4lcTAMB8GA1UdIwQY
MBaAFBuYKIPh379GM+CMC1jIXon/wyEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2It
ZDA3OGVlYzgyYjJhLzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2ItZDA3OGVlYzgyYjJh
LzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOboJ7+N
xI3u9XUsBceuhWu72JqNoQ0sP3rsY8PqMNeqal5XPN6TFptnJvuAakbb619D728h
EcuY0Mp+RlbADUcJAZ6KWvuA3dB65SJYNUlVnOrEAdd/QhZvOZcKNQ4RiV92ni+Y
4GHJ3tRnEhMpUXF7906PO3F9chPg3eXQR2VUYRzJ9xN2FAaFqh8+Wbcpfu9C/8kx
alLZLh2HH0925gchTD+haqrvznoik9egkviCQtF2GS+C4+F0pYFSfsjPqZoW+2VZ
Rg4R2IFDT7635PpzwampGZqQeoSqCqe8zzXAlLHAACvrT3EDYIgU2yvmXnxVlulQ
9hmPRFPNFpvhQw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:17:49 2025 by rpki-client