Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File:                     gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier:          HsMjQSY4BCAohfX9e0+H2FbyV9cspG2ZB6E4TwqAK70=
Subject key identifier:   BD:49:9C:94:14:12:9A:93:AF:54:98:64:2A:0D:EB:22:1E:D9:F8:F0
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer:       /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial:       01994F9BCDF24821A4F0C4A0098FAA7F6EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number:          168A
Signing time:             Mon 15 Sep 2025 23:00:34 +0000
Manifest this update:     Mon 15 Sep 2025 23:00:34 +0000
Manifest next update:     Tue 16 Sep 2025 23:00:34 +0000
Files and hashes:         1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: dNgO0liPgGO6s3Wcko3hD//CVvflZP1slTQo+ieOaE4=)
                          2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 17:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4f:9b:cd:f2:48:21:a4:f0:c4:a0:09:8f:aa:7f:6e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
        Validity
            Not Before: Sep 15 23:00:34 2025 GMT
            Not After : Sep 16 23:00:34 2025 GMT
        Subject: CN=bd499c9414129a93af5498642a0deb221ed9f8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:36:09:77:6a:5f:be:9c:c4:46:83:ae:80:
                    0d:9f:b4:4c:0b:2c:59:62:9e:34:24:20:43:42:77:
                    72:d6:b4:e2:99:65:16:cc:41:29:2b:e4:ed:21:ee:
                    20:d1:4e:59:d7:90:c7:fa:b6:7a:90:2f:3a:fe:ce:
                    06:62:aa:9f:16:73:16:41:82:5d:83:eb:59:3d:5f:
                    18:64:d1:eb:aa:de:b0:86:c1:8c:9c:0c:f4:cc:b8:
                    bf:8e:51:b8:86:b3:9b:a4:92:4d:35:42:46:c1:f9:
                    2e:a2:d5:d4:1f:1b:14:0d:74:54:53:53:25:37:bd:
                    2c:6b:a6:52:fa:68:5e:f6:52:45:b4:cb:a7:12:6f:
                    6f:1d:5c:f6:37:78:3a:ee:dc:e5:e3:b0:1b:ae:cd:
                    27:87:70:67:c0:1d:b5:51:5f:6c:6c:58:e7:17:11:
                    b8:73:82:87:d0:45:96:eb:61:41:24:e3:f0:ce:62:
                    e2:d5:af:b9:c1:f7:b2:d5:16:0c:11:6a:77:8a:54:
                    c0:4a:b6:c3:77:39:71:e0:38:dc:9e:a6:7a:6b:eb:
                    fa:35:83:c2:a7:f1:db:a2:00:bb:82:b0:1e:60:db:
                    33:61:bc:31:aa:60:f7:6c:fe:d2:f0:99:02:84:6c:
                    0e:dc:e2:d9:08:18:28:02:9b:6c:e0:35:20:8b:27:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:49:9C:94:14:12:9A:93:AF:54:98:64:2A:0D:EB:22:1E:D9:F8:F0
            X509v3 Authority Key Identifier:
                keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f5:90:b5:2c:f2:4d:12:5a:a5:81:31:bb:5d:ba:72:89:5e:
         39:c3:f0:c8:ac:f9:4f:41:2a:7f:c1:33:cb:f7:22:1f:77:e5:
         ef:a8:92:d4:02:54:b4:0a:80:39:28:da:1d:55:71:b8:e6:f3:
         1d:e3:47:bb:47:46:4b:97:08:a2:91:94:03:0f:eb:1a:4e:92:
         a8:b5:c6:2b:49:a0:2d:33:0e:7b:d4:13:02:a9:34:b5:cd:91:
         b9:a4:b7:a2:95:9a:e9:83:78:fb:91:ed:18:ba:97:a2:c2:32:
         42:40:68:bb:5e:4d:96:74:dd:0a:48:ae:47:6e:f3:d6:77:0d:
         59:d4:5d:5b:70:77:36:e5:df:96:a9:e3:99:1e:17:86:57:cf:
         69:68:73:a2:fc:8d:96:b6:28:15:a7:58:55:31:91:3b:dd:71:
         6b:e9:09:5b:b0:2c:fd:4f:b7:c2:ad:2e:48:f1:0f:3a:63:84:
         42:83:66:4f:cd:9a:f0:0e:30:e2:7d:29:d1:d0:97:73:21:6b:
         2c:7b:65:b8:c3:eb:bd:b4:a3:ba:4e:f2:3d:d0:49:e4:0b:81:
         75:55:3b:2c:66:c5:ea:be:eb:f2:2d:7b:77:6a:c8:7b:1a:39:
         2a:74:c5:0e:79:6b:1a:64:03:5f:d3:bc:25:62:0c:bd:f2:36:
         11:10:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:24:19 2025 by rpki-client