Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File:                     gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier:          ERYAS+1y1RhgNupcrLhGJHxXoZLQtRooIIiVb8Nuu3s=
Subject key identifier:   9B:B1:C2:6E:BD:1C:89:76:4A:E8:33:D4:0F:73:2F:A2:90:AF:4B:A0
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer:       /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial:       01988E46B26B8D8348EA73E00D0C565CA203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number:          1628
Signing time:             Sat 09 Aug 2025 10:00:54 +0000
Manifest this update:     Sat 09 Aug 2025 10:00:54 +0000
Manifest next update:     Sun 10 Aug 2025 10:00:54 +0000
Files and hashes:         1: Kt54sJQgRqTUq_5CeKj_uNxTFL4.roa (hash: 4RVmGcZHz9ixKOs2qOpourGK4cJrBwsGs1fzppEGkHY=)
                          2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: vT1rBMAYS3xOiFwO4I9OUY0BTqIK5HcXTkLZqI2iyho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:46:b2:6b:8d:83:48:ea:73:e0:0d:0c:56:5c:a2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
        Validity
            Not Before: Aug  9 10:00:54 2025 GMT
            Not After : Aug 10 10:00:54 2025 GMT
        Subject: CN=9bb1c26ebd1c89764ae833d40f732fa290af4ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ef:78:3a:2d:84:cc:25:a6:58:07:dc:45:d8:
                    20:2c:92:29:1a:4d:5d:b9:dc:53:ff:4f:a1:c9:65:
                    56:c9:4e:71:ba:ee:de:8d:5e:6b:95:d6:b6:e3:38:
                    8d:1f:71:e1:05:86:83:0b:88:b1:29:fb:a1:97:77:
                    ec:52:b5:5d:32:9e:1e:2e:ef:77:d3:14:b9:07:fb:
                    66:38:e2:3c:c0:ab:17:2c:bf:97:80:9b:5f:8c:7f:
                    1a:95:e1:06:39:ab:7d:64:09:85:8d:7e:64:4f:25:
                    7c:e1:cc:e2:81:7f:41:cd:05:b7:ce:30:05:d9:4b:
                    92:4c:0f:ad:8c:53:cc:b4:da:ec:b0:44:d0:eb:fd:
                    f9:f5:59:8a:cc:0c:18:34:3a:d0:ba:27:63:b0:21:
                    92:07:1f:1e:3a:9a:d5:41:85:8c:e2:05:c8:c7:e8:
                    60:fc:d8:61:25:ef:e0:1a:10:e1:3b:b4:a8:91:09:
                    03:bb:6a:64:d2:78:cd:94:93:15:c8:b7:b6:5d:2c:
                    39:52:fe:84:e2:4b:45:fb:f3:64:09:eb:05:98:10:
                    b5:80:75:12:32:ac:5d:9d:b2:4f:76:c4:b6:1a:c0:
                    8b:09:4a:67:1b:4a:3d:8e:49:37:1f:f2:07:ac:d5:
                    d5:69:f5:03:29:d7:bf:a2:28:0d:6a:e1:7d:37:24:
                    8b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B1:C2:6E:BD:1C:89:76:4A:E8:33:D4:0F:73:2F:A2:90:AF:4B:A0
            X509v3 Authority Key Identifier:
                keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:2b:eb:de:33:c1:9d:8f:e8:f0:7d:8a:49:07:ae:65:99:
         23:35:25:05:53:40:ef:e9:24:84:53:96:d4:2e:f0:d3:46:1e:
         9d:06:b2:dc:b7:fa:12:3a:33:59:03:a2:b5:73:58:16:b6:2c:
         1d:16:3f:fe:74:34:98:bd:da:69:7c:e4:e6:f1:5d:93:76:96:
         e0:ac:75:a1:25:66:0b:01:1b:7b:5e:1d:2c:0b:97:65:e0:d9:
         98:36:53:62:ad:f9:ad:01:3a:bb:78:30:23:1c:00:13:c0:06:
         0d:3d:b1:ee:ac:1a:1f:78:32:e9:59:b5:58:94:3c:39:11:91:
         e3:b2:9d:2f:fa:b2:1b:3c:b5:e6:bb:ed:66:d5:67:c2:f9:3b:
         54:22:86:fa:c5:44:20:4a:53:12:06:d0:d5:4d:b7:31:32:1a:
         df:d5:ca:26:bc:9e:6d:9a:5d:5d:0a:c2:9f:2e:d5:3f:f5:70:
         21:a7:8d:e4:9b:93:59:96:dd:1f:6a:e5:c6:18:86:85:14:b2:
         72:2a:97:1b:cf:af:08:7a:a3:8e:70:e5:15:e4:8b:81:92:9e:
         b4:6f:00:ae:99:59:f3:65:27:6d:e3:10:9c:0a:b0:19:b2:5c:
         fe:d6:2d:05:9b:4e:3e:4b:cf:e0:9d:ec:50:14:16:30:2c:fc:
         28:fd:2f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiORrJrjYNI6nPgDQxWXKIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDZkOTk0YTEyMTkyNTdhM2NlYzllZDkxY2QxODliYzNk
OTNiMGIwHhcNMjUwODA5MTAwMDU0WhcNMjUwODEwMTAwMDU0WjAzMTEwLwYDVQQD
Eyg5YmIxYzI2ZWJkMWM4OTc2NGFlODMzZDQwZjczMmZhMjkwYWY0YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e94Oi2EzCWmWAfcRdggLJIpGk1d
udxT/0+hyWVWyU5xuu7ejV5rlda24ziNH3HhBYaDC4ixKfuhl3fsUrVdMp4eLu93
0xS5B/tmOOI8wKsXLL+XgJtfjH8aleEGOat9ZAmFjX5kTyV84czigX9BzQW3zjAF
2UuSTA+tjFPMtNrssETQ6/359VmKzAwYNDrQuidjsCGSBx8eOprVQYWM4gXIx+hg
/NhhJe/gGhDhO7SokQkDu2pk0njNlJMVyLe2XSw5Uv6E4ktF+/NkCesFmBC1gHUS
MqxdnbJPdsS2GsCLCUpnG0o9jkk3H/IHrNXVafUDKde/oigNauF9NySLWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuxwm69HIl2Sugz1A9zL6KQr0ugMB8GA1UdIwQY
MBaAFIEG2ZShIZJXo87J7ZHNGJvD2TsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEt
YjM1NGI3OGNjOTY5LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEtYjM1NGI3OGNjOTY5
LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOEr694z
wZ2P6PB9ikkHrmWZIzUlBVNA7+kkhFOW1C7w00YenQay3Lf6EjozWQOitXNYFrYs
HRY//nQ0mL3aaXzk5vFdk3aW4Kx1oSVmCwEbe14dLAuXZeDZmDZTYq35rQE6u3gw
IxwAE8AGDT2x7qwaH3gy6Vm1WJQ8ORGR47KdL/qyGzy15rvtZtVnwvk7VCKG+sVE
IEpTEgbQ1U23MTIa39XKJryebZpdXQrCny7VP/VwIaeN5JuTWZbdH2rlxhiGhRSy
ciqXG8+vCHqjjnDlFeSLgZKetG8ArplZ82UnbeMQnAqwGbJc/tYtBZtOPkvP4J3s
UBQWMCz8KP0vVA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:32:11 2025 by rpki-client