Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File:                     GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier:          vxt0wKzUvQkBavk/Vf9aqmSUf+x1sW9ZuH1DnC1yalA=
Subject key identifier:   71:45:0F:26:FB:9D:B9:C5:05:89:17:79:55:62:CD:37:40:C9:03:B2
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer:       /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial:       019A2140420F5E7E19774FCE3AA67F59F341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number:          16F8
Signing time:             Sun 26 Oct 2025 16:00:50 +0000
Manifest this update:     Sun 26 Oct 2025 16:00:50 +0000
Manifest next update:     Mon 27 Oct 2025 16:00:50 +0000
Files and hashes:         1: Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa (hash: sSWEBAjRZaqtAdwjOfykVqgf7b7OWWPQ8cRcY8XqZmU=)
                          2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: 2ldpPPOTRiL3vR4otGn9N4ElcJRxHpzkTNP67vWJ29w=)
                          3: LASNDVJFR7nISIIuLJuen3qOehA.roa (hash: zvljnKWMuxdFNbiIQd7aWSR9xyeCp6tRJSsTE0UC5w8=)
                          4: y0q_mnHeqqODRkh3mN1XsHcA07o.roa (hash: vPYM1qZGBQlB55R1ITXDPJhnP7mpA1SIlCNpOTcVP6w=)
                          5: zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa (hash: N6qZrGzU3tG6EdhOgnUHNSlOSI1pX79eNnDUPpj91So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:40:42:0f:5e:7e:19:77:4f:ce:3a:a6:7f:59:f3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
        Validity
            Not Before: Oct 26 16:00:50 2025 GMT
            Not After : Oct 27 16:00:50 2025 GMT
        Subject: CN=71450f26fb9db9c5058917795562cd3740c903b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:41:ff:f1:5c:a4:1f:66:48:da:b5:c8:a1:
                    e5:dd:87:4f:34:1a:26:3a:bc:65:c6:a5:0f:ec:9b:
                    9f:e5:ca:4d:3f:88:c1:8a:6f:8a:45:91:e4:43:43:
                    61:1b:20:8e:88:bf:56:df:d0:f9:d5:0a:35:f6:ff:
                    33:10:a9:cc:ef:11:e6:97:20:4d:d1:de:41:f9:6a:
                    80:77:39:2f:26:cf:81:b9:98:91:00:c6:91:4e:1f:
                    28:92:0d:ad:3f:f7:4c:9d:53:cd:5b:ce:4d:4a:f1:
                    6e:cc:4c:bf:e4:76:87:32:16:eb:66:21:47:82:07:
                    7a:ce:b0:12:cd:d1:90:58:69:7b:72:d4:32:21:8d:
                    b4:0e:84:dc:9b:69:5a:d8:c8:e2:42:a3:e2:13:2d:
                    a8:17:fc:a5:b8:6f:17:06:d3:5e:ec:10:95:bd:38:
                    58:d3:17:4e:2b:df:bb:3c:20:aa:9b:9e:98:b7:0e:
                    75:74:3e:66:50:d4:29:82:3d:fa:76:f0:c0:24:02:
                    86:d9:b3:2b:91:24:a9:de:1b:9a:5e:48:c0:37:98:
                    c3:94:7b:b3:54:f8:f5:3f:09:9c:09:d9:9f:1b:ee:
                    01:4a:1b:24:b3:df:ee:ff:8a:79:6e:f8:6e:0a:e6:
                    8d:61:20:31:55:71:94:0a:95:28:19:c4:2c:66:56:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:45:0F:26:FB:9D:B9:C5:05:89:17:79:55:62:CD:37:40:C9:03:B2
            X509v3 Authority Key Identifier:
                keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:50:b4:18:ee:f7:48:44:a4:f6:a3:da:bf:0a:1a:53:cf:
         1b:91:9f:17:c6:d0:af:c8:1c:f9:e0:0a:c6:c4:c3:42:76:35:
         05:36:99:b5:8c:bc:73:bf:dd:b6:2b:b0:ed:86:4c:84:d9:17:
         ca:71:1b:53:de:58:71:45:09:75:66:8c:48:c3:eb:04:26:02:
         01:67:e7:b1:13:55:6f:a1:20:77:8c:ee:ac:2a:d0:b2:b7:04:
         5f:9d:fa:e6:ff:1b:d8:84:61:d5:39:79:6c:8e:0f:05:56:ce:
         b9:1a:14:94:3d:40:94:12:05:78:40:15:e5:98:30:37:51:06:
         dd:24:02:77:b9:d2:b3:03:17:ee:03:e0:97:bd:9f:3e:6b:f2:
         df:5e:f9:7d:81:3e:ca:b5:83:20:0b:9e:f6:9f:5e:93:69:06:
         38:bc:37:e8:19:18:e5:38:5b:13:1e:f2:a6:ae:b1:7f:4c:19:
         8b:db:66:bc:18:18:56:3b:8c:05:a2:4d:d2:81:00:d0:e6:c5:
         47:a7:97:25:3f:00:08:3f:1b:c7:c4:77:56:c9:38:f4:e7:28:
         97:b9:1b:9c:a2:57:69:f7:18:c5:2f:a8:85:12:94:26:b4:4c:
         5e:97:ab:5f:21:04:ae:41:e5:5b:a1:4a:f6:2a:06:61:8b:a1:
         da:bc:70:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:18:56 2025 by rpki-client