
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          ykrVF3Bk0YfQ66sE5R78lBO4unGvqWHHbk46N5V2I/M=
Subject key identifier:   A1:36:49:92:29:29:2B:02:39:64:09:33:76:41:E0:44:BF:A3:EC:AD
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       019A4BF3D1E432AF6092B4DE2251A9D443A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          09C8
Signing time:             Mon 03 Nov 2025 23:01:01 +0000
Manifest this update:     Mon 03 Nov 2025 23:01:01 +0000
Manifest next update:     Tue 04 Nov 2025 23:01:01 +0000
Files and hashes:         1: 8830yksUtOARQk3UFlh-4PNgBiA.roa (hash: EmMvReS/jq/SYrfMRIBrAHCck7YrsLYqaTcJWkpKgFg=)
                          2: EFk_WP_A_QvGCbPv627jqVmsHfg.roa (hash: k68DoPvpgB6wKb8qFWWLmBs9+urZUeVvssLhdMSBf6k=)
                          3: Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa (hash: mLCh1eZnjR+MrenmFjvdAR50ujw/VIYVRd5MKC5x8OQ=)
                          4: ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa (hash: ULlmWYQOwziva5U7xH3+US8Vy16wr3u3qWj4qpwczMo=)
                          5: c3zA2IV4VwS8jnesB0LpZBsDyEU.roa (hash: hofK+2Uxhr/bTuv6Zx9VkqisU5DNhllbJwm0jIPd9ao=)
                          6: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: blnozgPQWDs4g+yZu4IpvyYwoDtI1Pi9nuVGsjvlNno=)
                          7: xufGdiw8vu26zsmML7UeTUou5hA.roa (hash: FPD/rr/c4+/3+ME4ysyP2eNMHG6cFBZQMwG4yZOWY+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 20:30:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4b:f3:d1:e4:32:af:60:92:b4:de:22:51:a9:d4:43:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Nov  3 23:01:01 2025 GMT
            Not After : Nov  4 23:01:01 2025 GMT
        Subject: CN=a136499229292b02396409337641e044bfa3ecad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:2e:1e:80:01:c9:c3:f1:c8:25:0e:53:46:
                    cf:53:76:b2:4f:52:2d:76:1a:5f:76:b6:e2:7a:59:
                    e1:16:67:45:e0:9d:6a:3e:22:52:07:16:ba:66:a1:
                    57:a9:ce:f8:9d:ec:01:9b:e0:96:38:63:46:9e:95:
                    78:ac:83:b0:9e:37:31:86:82:27:81:13:90:5f:59:
                    82:7e:28:fe:dc:b8:13:e2:77:14:83:b5:40:2b:aa:
                    77:e3:74:fe:9d:f5:44:50:ed:76:f2:c1:a3:b2:98:
                    58:76:40:35:ba:0b:de:9b:c8:5b:0f:58:2e:98:8a:
                    db:73:8d:0b:db:e6:c1:b9:d0:d1:d3:5d:d9:c5:a6:
                    75:87:cf:eb:19:9f:b7:37:25:1d:61:7f:58:d2:fc:
                    d8:30:df:1a:80:26:4d:93:96:c3:1b:2c:f9:10:d4:
                    fd:45:aa:a2:c2:ef:d2:d2:38:8b:c1:5a:0f:ab:00:
                    74:60:d9:8b:30:23:4f:db:f4:91:89:a5:d8:10:7c:
                    9f:ba:9c:08:92:d1:1d:2b:32:15:18:86:5e:af:39:
                    08:cd:23:8b:e1:31:07:05:fa:b5:cf:e4:cb:a6:83:
                    a6:29:2c:ec:27:fe:c9:65:bd:6a:3a:39:86:64:4c:
                    c3:57:dc:b0:3a:c1:80:f3:76:69:8c:80:48:a6:77:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:49:92:29:29:2B:02:39:64:09:33:76:41:E0:44:BF:A3:EC:AD
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         88:29:7b:a9:b2:94:c8:90:7d:42:62:f6:06:0d:a3:d0:46:9e:
         66:90:b0:a3:ad:d6:76:be:f9:5f:fd:38:f5:68:61:65:8c:75:
         55:eb:cb:36:5c:0a:fc:d7:da:41:7b:33:d9:4a:43:0d:16:3f:
         4e:b8:e1:e0:f0:9a:6a:d9:03:2c:c3:71:e4:cf:d3:8b:e8:da:
         94:85:8d:89:d4:14:b8:fd:9b:5c:1c:7d:46:a6:dc:9a:4b:b0:
         80:7d:d8:82:ac:1a:5f:4d:45:47:bc:ee:f8:ce:d1:42:cf:1a:
         5b:28:ab:f1:f6:9b:f7:2c:9f:68:f0:d8:46:aa:e2:51:12:3a:
         a0:12:62:54:50:86:ba:1d:51:99:1e:40:af:ec:5d:ef:f2:78:
         91:a6:90:98:cc:ec:11:73:9a:45:91:2a:d5:c3:12:58:40:1b:
         a7:cb:33:78:39:6c:24:88:06:fe:dd:44:98:f8:65:30:83:5a:
         79:d4:1e:51:7d:20:36:e7:c0:a9:de:3b:24:ed:ed:95:ba:78:
         55:f6:df:a8:0c:1e:5a:b8:47:0c:52:c3:3d:4b:34:98:d2:71:
         91:c1:0e:63:c5:78:f3:5b:f0:3a:c9:6c:79:78:96:0b:61:1b:
         4e:f8:a1:82:03:a3:b6:be:ef:de:f0:e1:e9:d6:63:0b:13:5c:
         c8:f7:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 03:21:42 2025 by rpki-client