Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File:                     Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier:          ExUg0zUh2hG+JAVycXvm5MYN5eRC1Q9dfPsmiZ1UPUg=
Subject key identifier:   B4:F7:3E:ED:AA:2E:84:DB:6E:FD:DF:FE:9C:04:2A:EE:3D:EE:0C:10
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer:       /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial:       0198786414A0E13EC986AA11D225B1B109BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number:          15AB
Signing time:             Tue 05 Aug 2025 04:01:21 +0000
Manifest this update:     Tue 05 Aug 2025 04:01:21 +0000
Manifest next update:     Wed 06 Aug 2025 04:01:21 +0000
Files and hashes:         1: AI-SjUNk27UlWzeJbfub1LMpR_c.roa (hash: n1P92aXpjrqVVtgYbgV1MuvoAPU8jvz1Hn4J2/+sFwE=)
                          2: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: SZcXwvTtXB7ACGNUHR8ro1FSb25QwDLj7JzLpP/9etA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:78:64:14:a0:e1:3e:c9:86:aa:11:d2:25:b1:b1:09:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
        Validity
            Not Before: Aug  5 04:01:21 2025 GMT
            Not After : Aug  6 04:01:21 2025 GMT
        Subject: CN=b4f73eedaa2e84db6efddffe9c042aee3dee0c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:12:e8:c2:8e:70:dc:83:90:98:b7:e8:d6:67:
                    6a:42:aa:97:bc:99:e3:24:a7:30:c4:e4:31:c5:12:
                    b6:1f:2b:69:47:3f:e9:3e:6e:94:cb:16:3c:06:5c:
                    85:58:5b:98:61:de:fc:d3:62:37:0c:95:9b:36:37:
                    6b:78:5a:39:bf:d9:e0:01:29:6f:4c:16:6e:93:3a:
                    7b:52:4b:55:0e:a4:83:cd:ea:60:a6:b5:a1:97:da:
                    7a:00:ea:e7:eb:4e:e4:5d:7b:4c:32:14:b2:2a:f1:
                    b8:78:78:5c:ae:33:33:d6:5e:af:0a:59:a0:eb:d6:
                    8e:48:22:36:f7:3a:30:8d:59:1e:91:d5:73:01:c7:
                    13:41:dc:cb:9e:de:4d:14:b7:f8:3e:11:af:33:63:
                    ad:35:d0:dc:bd:52:2e:43:6a:e0:78:ca:9f:6b:05:
                    58:33:80:a2:30:1a:e6:53:48:dc:18:59:74:64:0c:
                    42:2f:1a:5e:bd:29:39:9f:0f:19:ee:c4:8d:28:5a:
                    71:e6:72:b7:c4:22:12:c4:1c:24:dc:1f:06:52:19:
                    fe:b2:d1:6b:30:3b:60:5f:08:d4:19:4b:6f:fd:b2:
                    63:99:b8:48:9b:2e:4a:e6:de:ff:15:ea:45:18:07:
                    25:0a:9e:06:68:03:64:f6:bf:0c:81:4d:55:3d:c1:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F7:3E:ED:AA:2E:84:DB:6E:FD:DF:FE:9C:04:2A:EE:3D:EE:0C:10
            X509v3 Authority Key Identifier:
                keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3d:f8:86:9a:16:ac:0c:1c:89:b0:68:4e:e0:8f:3d:41:5d:
         17:44:e8:d0:de:66:56:0d:91:1a:e8:c2:fa:4c:0e:4e:6a:67:
         55:b0:21:7b:6d:2c:33:a5:8c:6a:64:1c:97:3e:20:f7:ea:44:
         5e:87:a5:99:0f:60:e4:19:10:a3:33:d3:01:8a:f0:46:9d:58:
         ff:8e:b6:4b:41:6a:73:f7:f5:8a:a6:46:a4:cb:22:c2:74:c4:
         c4:e4:80:8b:34:f8:3d:71:75:c5:81:00:9a:b5:de:91:2c:cd:
         13:07:4e:ca:33:62:09:0c:fd:26:d7:22:27:61:69:ca:5e:9f:
         13:cc:3f:0e:20:3f:2f:55:de:0a:36:17:59:e7:71:43:9b:63:
         48:01:15:27:d4:a1:a5:62:39:73:36:02:2b:9c:1b:23:2d:20:
         d6:50:de:e5:50:cd:22:fa:62:1b:ba:d6:96:34:07:02:f9:f1:
         3f:27:52:bc:23:8f:b4:47:af:74:09:23:0d:a7:2e:87:05:71:
         98:3e:e9:aa:39:26:f5:93:fd:c5:53:66:fe:78:e6:39:f0:46:
         fc:5c:e0:6e:37:60:23:82:00:95:0f:a6:87:58:fe:15:97:66:
         06:b1:b6:75:38:5e:ad:c8:33:96:fd:33:05:b4:c6:8a:f4:d6:
         4e:e2:f6:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh4ZBSg4T7JhqoR0iWxsQm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOWI3MGVmOTk3NjBhMDY1OWRlYWVmYTY2MDM0NWEwZTYx
MTU0MjMwHhcNMjUwODA1MDQwMTIxWhcNMjUwODA2MDQwMTIxWjAzMTEwLwYDVQQD
EyhiNGY3M2VlZGFhMmU4NGRiNmVmZGRmZmU5YzA0MmFlZTNkZWUwYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxLowo5w3IOQmLfo1mdqQqqXvJnj
JKcwxOQxxRK2HytpRz/pPm6UyxY8BlyFWFuYYd7802I3DJWbNjdreFo5v9ngASlv
TBZukzp7UktVDqSDzepgprWhl9p6AOrn607kXXtMMhSyKvG4eHhcrjMz1l6vClmg
69aOSCI29zowjVkekdVzAccTQdzLnt5NFLf4PhGvM2OtNdDcvVIuQ2rgeMqfawVY
M4CiMBrmU0jcGFl0ZAxCLxpevSk5nw8Z7sSNKFpx5nK3xCISxBwk3B8GUhn+stFr
MDtgXwjUGUtv/bJjmbhImy5K5t7/FepFGAclCp4GaANk9r8MgU1VPcFgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT3Pu2qLoTbbv3f/pwEKu497gwQMB8GA1UdIwQY
MBaAFBqbcO+ZdgoGWd6u+mYDRaDmEVQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jODlhNDYtNzkxMS00ZmRiLWE5M2It
Mjk5MjJiMmQyOTFiLzEvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jODlhNDYtNzkxMS00ZmRiLWE5M2ItMjk5MjJiMmQyOTFi
LzEvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj34hpoW
rAwcibBoTuCPPUFdF0To0N5mVg2RGujC+kwOTmpnVbAhe20sM6WMamQclz4g9+pE
XoelmQ9g5BkQozPTAYrwRp1Y/462S0Fqc/f1iqZGpMsiwnTExOSAizT4PXF1xYEA
mrXekSzNEwdOyjNiCQz9JtciJ2Fpyl6fE8w/DiA/L1XeCjYXWedxQ5tjSAEVJ9Sh
pWI5czYCK5wbIy0g1lDe5VDNIvpiG7rWljQHAvnxPydSvCOPtEevdAkjDacuhwVx
mD7pqjkm9ZP9xVNm/njmOfBG/FzgbjdgI4IAlQ+mh1j+FZdmBrG2dThercgzlv0z
BbTGivTWTuL2tg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:11:09 2025 by rpki-client