Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          t+BFxsgqV0XrzZhE8GpmBfiz+IELdZgSen6XNdRWiXs=
Subject key identifier:   1A:DB:2D:C9:60:B4:78:D4:92:C0:0C:21:96:AB:13:E1:DC:AD:46:99
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       019A4D3D308BC0FF0732BA2F5D047DED2DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          1715
Signing time:             Tue 04 Nov 2025 05:00:47 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:47 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:47 +0000
Files and hashes:         1: 78X0IG7SGTb_CqUUoAsl9rOEOoQ.roa (hash: dHUSFpGblHkPXU9NYMPaCtIz+bczpLlHXComKZfL/BA=)
                          2: FQcgCQcG__7aM5eRsupFU2EPhlA.roa (hash: xigvLo77r4Zkdva8w7DgHnMdwBCwRTMrZ+SBoUs6iWs=)
                          3: MfGfVoxcZRKcXeryJdrARrFNT30.roa (hash: NP17Awbv8VvBz7g9no++bSqGAeudeK0bPJQ8VG+ovrs=)
                          4: WD7CCMj1boEtISgVQIZGdGTenUQ.roa (hash: 4IOANIE3kXmhVP0/F3MzPDZJAgrgCHcPBEmcnYUkUzc=)
                          5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: Vw/cTrgqnK+PwDJoZ/kw07d8E0FAbPen1Ynud7SDNmk=)
                          6: sjitqywkz9ufiQpRQwXHpL0dJPA.roa (hash: O1YNzqfVoGDW6rve4zWAx2oDjZ7sBc+TeGZe932UNgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:30:8b:c0:ff:07:32:ba:2f:5d:04:7d:ed:2d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Nov  4 05:00:47 2025 GMT
            Not After : Nov  5 05:00:47 2025 GMT
        Subject: CN=1adb2dc960b478d492c00c2196ab13e1dcad4699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:b6:af:62:be:43:78:0d:6f:2d:2a:42:5d:
                    fe:a2:ea:68:bf:f5:ca:ac:07:92:80:f6:43:c2:a0:
                    83:df:84:0b:cb:74:d0:36:03:54:f2:4f:76:81:92:
                    56:12:ed:22:13:46:0a:a2:da:29:f5:c4:d0:ec:0c:
                    96:a5:2b:0b:9d:af:24:e7:b9:ad:03:ac:6b:77:12:
                    9c:9c:cd:cc:16:5b:2e:f4:c0:f9:0d:bd:ba:8c:f5:
                    a1:fa:b0:91:01:99:50:53:e6:97:65:2e:02:e0:3b:
                    38:10:c3:cc:c2:b3:c6:82:93:02:05:84:4a:67:cf:
                    f0:4e:20:d8:49:d2:d5:21:1d:58:0a:d7:3d:fc:91:
                    7b:27:e7:a5:39:75:fb:58:b7:59:9c:cc:cf:29:46:
                    74:b7:29:b5:bb:20:7c:cf:4a:b7:ec:b3:23:44:9c:
                    72:bd:20:ce:73:f0:96:7d:6f:fb:72:c5:3b:24:a2:
                    d3:b1:05:39:e3:33:c7:41:73:06:46:6c:54:bd:28:
                    36:c4:9c:e3:29:c5:23:5a:6c:49:2d:15:df:9a:fd:
                    26:fd:46:ff:92:73:99:5f:c6:a7:b1:6d:cf:33:05:
                    8d:b3:a6:5d:4d:ec:cb:e2:ac:4a:80:2e:4e:66:9e:
                    52:f1:d1:e3:d2:59:ee:fa:1f:6a:f5:5a:95:d4:54:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DB:2D:C9:60:B4:78:D4:92:C0:0C:21:96:AB:13:E1:DC:AD:46:99
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:95:4a:d9:ab:b1:8e:fc:9d:10:c9:cd:ed:50:13:0d:45:e9:
         9e:2e:e8:09:7f:8f:4a:ff:02:84:6d:58:57:dd:b9:26:f9:1c:
         7f:1d:c1:e0:a2:d9:82:91:bc:f5:7d:c3:ac:ac:16:68:42:e0:
         ab:fe:ba:20:06:8f:5d:32:ec:df:f5:19:a8:e9:cf:e8:64:bd:
         0a:b2:e9:8e:7f:0f:cd:a0:e5:b3:9b:80:04:16:95:fc:2b:90:
         9a:e2:7e:a5:75:55:c8:f6:a5:50:12:9f:af:0d:16:60:cc:ce:
         8e:3d:e2:e4:82:27:f2:7b:c5:ea:a0:cd:5d:f5:b5:6d:95:2b:
         88:65:2f:90:6a:a8:3e:47:0d:33:c0:90:3b:64:19:88:7b:0f:
         35:51:33:fc:56:bc:1c:eb:6c:93:1c:ac:cc:e5:79:ca:0c:1c:
         1c:7f:ce:f4:b0:c9:d3:1c:89:88:3d:e1:72:48:df:0b:28:25:
         c9:9d:07:26:e9:ad:99:ee:af:78:06:0a:da:b3:3e:a3:cd:50:
         94:07:49:9e:3b:cb:d1:88:3e:70:38:82:8c:e1:9a:bc:2d:76:
         62:19:fa:5b:c3:4e:50:e2:6b:ad:9e:5d:bc:de:45:5c:e0:ef:
         95:b4:e2:f3:e5:a0:74:6f:ea:6f:a7:c1:c7:e9:0c:da:18:46:
         05:70:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:10 2025 by rpki-client