Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier:          r2G/oTCyAC/QiOtEufxsACYTXW6kVKzzjchcpGx04Ls=
Subject key identifier:   C4:90:41:DE:63:20:03:C9:51:7A:26:C1:A4:E6:DB:B6:E8:84:B3:AA
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer:       /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial:       019939EF7B83298B0FD78204D54FA73C331B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number:          167F
Signing time:             Thu 11 Sep 2025 18:00:19 +0000
Manifest this update:     Thu 11 Sep 2025 18:00:19 +0000
Manifest next update:     Fri 12 Sep 2025 18:00:19 +0000
Files and hashes:         1: BiweuLnHoWiHw0dJtOKVLYe5VXw.roa (hash: v5I7lbo3yrRW4OdIb5Z9T1Oajdn5oMeqluzGbBuYfMA=)
                          2: KyxetZabMrCwSGQGlQiCSSpLezw.roa (hash: lB6fVKgf9Cm2eRE3kdPJEkhSEzxtd0NAC6g5PlzMoxw=)
                          3: SkHxUs-FrIQyM07xjoxzMJo0A-0.roa (hash: pe66sdl4nqsnLQs5V6pFP+Jxy3p0QpIUCzbid73OCcA=)
                          4: _muTs8Yrozyvhukvws4l05B7mTo.roa (hash: LD706s8S0q0ox0+6TKcyKrOGDjOk87XG1dzJqAoo9NE=)
                          5: dvbWlIR_nyOoTtNcYB_wCKbM8x8.roa (hash: vqMhD9X26YxNwUr/WhYc7U9uIGwJ0S9qj2YKPJvFuT0=)
                          6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: 8/XqMFNZznOUuO3UsqkYVZT+20bxNVcsOgiJdTAxkwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 14:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:39:ef:7b:83:29:8b:0f:d7:82:04:d5:4f:a7:3c:33:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: Sep 11 18:00:19 2025 GMT
            Not After : Sep 12 18:00:19 2025 GMT
        Subject: CN=c49041de632003c9517a26c1a4e6dbb6e884b3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:17:d4:57:05:fc:9e:ed:fa:e0:75:cf:84:
                    7a:e7:2f:d2:4c:aa:e1:61:cf:6b:5f:49:de:fe:8f:
                    0e:a2:91:76:16:0d:28:d8:b9:6f:3c:cb:df:ff:c2:
                    19:c2:a4:d4:b9:e9:73:f5:1d:0f:4f:29:ca:27:98:
                    15:b6:61:1d:6a:ae:a4:e1:2d:e3:60:87:f1:af:ea:
                    24:51:f4:52:bb:2c:fe:66:0a:93:79:62:3f:26:86:
                    cc:75:5f:0d:fa:e0:b5:9d:41:ed:1d:4b:7c:5a:46:
                    f0:d5:3a:a7:68:18:9f:d1:40:f8:93:e5:24:08:ea:
                    1b:1e:b9:c5:34:0e:dc:d4:d3:89:e2:99:c5:0e:45:
                    b8:72:75:1a:8e:43:3c:a1:01:a6:c4:db:dd:ca:80:
                    c0:c3:bf:57:7b:80:5e:4a:72:a5:b9:b8:2f:9c:f3:
                    7c:f7:3e:b4:6f:85:35:61:85:29:b1:ba:9a:dc:07:
                    8a:d8:a8:cc:22:e8:06:8e:07:e0:95:cb:98:91:e9:
                    e1:17:53:7f:81:5e:1e:95:37:79:37:06:a2:a4:97:
                    df:a6:0a:cb:36:4e:b1:0d:1c:a4:ee:68:8e:3c:a9:
                    71:a2:d9:5a:52:b4:68:42:91:25:aa:23:aa:3c:a5:
                    43:3a:cb:8e:1a:39:b0:98:4b:91:61:4c:1f:9f:e2:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:90:41:DE:63:20:03:C9:51:7A:26:C1:A4:E6:DB:B6:E8:84:B3:AA
            X509v3 Authority Key Identifier:
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:cd:9c:77:03:97:b4:11:80:b2:04:d0:22:4d:e5:cf:97:4f:
         a0:43:32:db:52:14:17:58:f9:c0:b0:d3:ed:6f:dc:7a:9e:3f:
         99:77:20:9d:24:9d:59:7f:54:c3:3e:44:27:4f:86:4d:4d:39:
         ce:ce:b2:cb:ef:c7:5a:2a:e6:fb:29:2e:00:d3:1e:24:1d:88:
         e5:47:e2:c9:e2:2a:6b:b9:f0:e1:b7:2e:3b:aa:37:c5:54:dd:
         a9:c2:0e:69:de:72:32:49:fb:fc:44:dc:35:de:8a:a4:63:ca:
         06:60:ff:20:03:a8:35:1a:43:53:65:a3:81:be:86:e0:f2:57:
         6f:79:d4:b9:9d:2f:e7:d0:db:50:72:aa:96:b0:3f:41:85:0e:
         bc:50:65:dc:7a:d8:06:25:77:83:dd:4b:68:37:d3:4d:42:85:
         0e:b5:11:c0:93:ea:dd:dd:db:19:33:10:a7:e2:60:50:95:de:
         fc:74:87:e9:cf:30:eb:7e:a1:ac:61:04:f1:da:01:30:b9:7c:
         8f:a4:30:62:dd:00:79:f5:06:4c:06:16:2c:5c:a1:0a:2e:42:
         ec:a2:de:2e:6c:c6:37:88:8c:9a:54:2a:50:07:39:59:4d:8b:
         61:d4:51:fd:f7:18:28:87:5c:54:fe:86:07:5a:54:f7:b3:f8:
         2f:bd:31:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk573uDKYsP14IE1U+nPDMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNTFlN2ZiNmI5NjBkNDA2YjIyMzZkMjVlNGUyMGUyNDUz
NTlkYjIwHhcNMjUwOTExMTgwMDE5WhcNMjUwOTEyMTgwMDE5WjAzMTEwLwYDVQQD
EyhjNDkwNDFkZTYzMjAwM2M5NTE3YTI2YzFhNGU2ZGJiNmU4ODRiM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnoX1FcF/J7t+uB1z4R65y/STKrh
Yc9rX0ne/o8OopF2Fg0o2LlvPMvf/8IZwqTUuelz9R0PTynKJ5gVtmEdaq6k4S3j
YIfxr+okUfRSuyz+ZgqTeWI/JobMdV8N+uC1nUHtHUt8Wkbw1TqnaBif0UD4k+Uk
COobHrnFNA7c1NOJ4pnFDkW4cnUajkM8oQGmxNvdyoDAw79Xe4BeSnKlubgvnPN8
9z60b4U1YYUpsbqa3AeK2KjMIugGjgfglcuYkenhF1N/gV4elTd5NwaipJffpgrL
Nk6xDRyk7miOPKlxotlaUrRoQpElqiOqPKVDOsuOGjmwmEuRYUwfn+IJ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSQQd5jIAPJUXomwaTm27bohLOqMB8GA1UdIwQY
MBaAFIJR5/trlg1AayI20l5OIOJFNZ2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjct
ZDNhNDg3Mjk1NDkxLzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjctZDNhNDg3Mjk1NDkx
LzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMM2cdwOX
tBGAsgTQIk3lz5dPoEMy21IUF1j5wLDT7W/cep4/mXcgnSSdWX9Uwz5EJ0+GTU05
zs6yy+/HWirm+ykuANMeJB2I5UfiyeIqa7nw4bcuO6o3xVTdqcIOad5yMkn7/ETc
Nd6KpGPKBmD/IAOoNRpDU2Wjgb6G4PJXb3nUuZ0v59DbUHKqlrA/QYUOvFBl3HrY
BiV3g91LaDfTTUKFDrURwJPq3d3bGTMQp+JgUJXe/HSH6c8w636hrGEE8doBMLl8
j6QwYt0AefUGTAYWLFyhCi5C7KLeLmzGN4iMmlQqUAc5WU2LYdRR/fcYKIdcVP6G
B1pU97P4L70xEw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 23:38:41 2025 by rpki-client