Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File:                     Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier:          pUnzWdXZeaGf9CC3fnsumc8UNb1BIma4LPdwueU4Qzw=
Subject key identifier:   56:92:E0:F5:F5:83:8E:3D:29:35:85:1C:49:56:EC:DC:89:71:EF:06
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer:       /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial:       019938DF9CE4DAED701E8D70EED4020CBCCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number:          167D
Signing time:             Thu 11 Sep 2025 13:03:22 +0000
Manifest this update:     Thu 11 Sep 2025 13:03:22 +0000
Manifest next update:     Fri 12 Sep 2025 13:03:22 +0000
Files and hashes:         1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: dxuw8T2BHQT852DAWVNqDRI8NwvblW6D19kvh7ogQ0o=)
                          2: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (hash: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=)
                          3: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (hash: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=)
                          4: umrbROcVD8F_XU1iMMOs7YeDor4.roa (hash: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 13:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:df:9c:e4:da:ed:70:1e:8d:70:ee:d4:02:0c:bc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
        Validity
            Not Before: Sep 11 13:03:22 2025 GMT
            Not After : Sep 12 13:03:22 2025 GMT
        Subject: CN=5692e0f5f5838e3d2935851c4956ecdc8971ef06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:a6:f3:ee:8e:22:88:55:27:78:24:37:f1:
                    1d:52:2e:e9:0a:32:5b:89:70:6e:06:60:64:84:33:
                    b1:e3:f9:ad:93:23:cc:73:49:26:7d:7b:2b:7b:e0:
                    71:55:c6:3c:fd:39:b9:2e:fa:06:4d:38:3f:45:bd:
                    84:95:f4:c8:ca:6e:a7:08:51:f1:9e:2d:9b:e0:ed:
                    47:a2:bb:a6:b6:b0:80:1b:2a:6c:bd:48:ee:ea:8f:
                    bc:c6:b1:5a:84:9c:09:8b:38:07:1e:4b:39:6f:3e:
                    50:1f:05:a3:0e:56:be:bb:c0:6d:9f:35:97:f5:cb:
                    f7:de:5a:3e:f9:d7:ce:46:1d:14:d4:e9:78:21:9d:
                    d0:46:e4:50:35:83:50:b1:bd:31:78:4a:b0:2d:8c:
                    7c:e3:22:d9:38:ad:3e:1b:aa:9b:b1:1c:57:a4:fd:
                    c8:0d:f1:44:83:36:1a:cb:3a:2d:6e:1b:67:c6:ae:
                    27:1b:dc:ce:30:ef:d6:47:74:9c:1a:2d:e6:0d:b5:
                    67:99:7e:00:b8:cf:a1:7f:63:da:98:a1:e2:6e:53:
                    3a:00:89:81:3d:02:1c:dd:55:f6:68:5c:08:ed:f6:
                    df:02:bf:43:5b:c4:d2:54:bb:3b:26:3a:cb:4c:a7:
                    8e:ce:55:ad:a2:cb:93:51:42:73:86:79:9c:09:d8:
                    4f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:92:E0:F5:F5:83:8E:3D:29:35:85:1C:49:56:EC:DC:89:71:EF:06
            X509v3 Authority Key Identifier:
                keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3f:8c:0e:0a:84:ff:2e:77:cc:76:72:08:6d:09:61:db:f5:
         ef:9a:d2:70:f0:69:58:1e:b7:92:bc:a4:d1:cd:3d:94:20:bc:
         a8:ab:85:46:7f:a6:9b:39:8f:b0:aa:e4:32:b7:45:73:f5:28:
         ae:d3:05:06:6c:90:b2:be:9a:13:8c:bb:ba:fa:3a:84:60:3d:
         60:f0:46:34:4a:fe:bf:fb:e0:f8:d0:52:8c:d5:d1:28:88:86:
         1b:28:b3:8e:46:05:75:8b:db:5d:fa:05:1d:e5:d2:b7:94:df:
         a4:b7:e9:63:5d:60:89:cb:f4:45:df:7e:cd:66:74:3b:31:01:
         ad:a3:5d:c1:b9:96:78:ab:54:16:2f:94:4a:16:f2:99:99:07:
         c0:19:00:a4:73:34:6b:80:09:a6:a4:0a:b0:dd:c7:76:98:7c:
         89:77:ea:54:0b:28:f1:26:46:80:e7:fb:0f:56:00:31:26:a8:
         e9:67:40:58:63:1a:11:c5:ec:db:ec:e5:64:a1:79:b9:26:47:
         70:af:98:80:d4:55:28:dd:89:66:d5:11:59:1c:0d:8f:61:46:
         a6:69:79:5d:e6:0a:f3:15:93:dd:5a:fd:a4:6a:81:70:86:a7:
         93:a0:53:f3:d3:5e:5f:10:0e:8b:1d:bf:34:6c:42:5c:87:a2:
         2f:0e:81:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk435zk2u1wHo1w7tQCDLzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODc5ZGUxYzc1ZmJiZDJjMzFkMWQ5MDgxNDA1NmYyN2Q1
N2Q3NzYwHhcNMjUwOTExMTMwMzIyWhcNMjUwOTEyMTMwMzIyWjAzMTEwLwYDVQQD
Eyg1NjkyZTBmNWY1ODM4ZTNkMjkzNTg1MWM0OTU2ZWNkYzg5NzFlZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOGm8+6OIohVJ3gkN/EdUi7pCjJb
iXBuBmBkhDOx4/mtkyPMc0kmfXsre+BxVcY8/Tm5LvoGTTg/Rb2ElfTIym6nCFHx
ni2b4O1HorumtrCAGypsvUju6o+8xrFahJwJizgHHks5bz5QHwWjDla+u8BtnzWX
9cv33lo++dfORh0U1Ol4IZ3QRuRQNYNQsb0xeEqwLYx84yLZOK0+G6qbsRxXpP3I
DfFEgzYayzotbhtnxq4nG9zOMO/WR3ScGi3mDbVnmX4AuM+hf2PamKHiblM6AImB
PQIc3VX2aFwI7fbfAr9DW8TSVLs7JjrLTKeOzlWtosuTUUJzhnmcCdhPhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaS4PX1g449KTWFHElW7NyJce8GMB8GA1UdIwQY
MBaAFBqHneHHX7vSwx0dkIFAVvJ9V9d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82YTYzMTMtODU0Ni00MDMxLWJlOWIt
OGIyZWJlNGUyOWNlLzEvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82YTYzMTMtODU0Ni00MDMxLWJlOWItOGIyZWJlNGUyOWNl
LzEvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsD+MDgqE
/y53zHZyCG0JYdv175rScPBpWB63kryk0c09lCC8qKuFRn+mmzmPsKrkMrdFc/Uo
rtMFBmyQsr6aE4y7uvo6hGA9YPBGNEr+v/vg+NBSjNXRKIiGGyizjkYFdYvbXfoF
HeXSt5TfpLfpY11gicv0Rd9+zWZ0OzEBraNdwbmWeKtUFi+UShbymZkHwBkApHM0
a4AJpqQKsN3Hdph8iXfqVAso8SZGgOf7D1YAMSao6WdAWGMaEcXs2+zlZKF5uSZH
cK+YgNRVKN2JZtURWRwNj2FGpml5XeYK8xWT3Vr9pGqBcIank6BT89NeXxAOix2/
NGxCXIeiLw6B/w==
-----END CERTIFICATE-----
Generated at Thu Sep 11 21:24:11 2025 by rpki-client