Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File:                     gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier:          qDvfDLBvVfn5c/ttf/TEDdLPwTjWpQR0mGYYuUo6pqg=
Subject key identifier:   AD:81:16:CB:37:0F:8A:E4:3F:45:98:9D:FF:B5:3C:A9:B2:38:91:C9
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer:       /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial:       019940980A41FFC2354B3289396DA3C1DDFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number:          164E
Signing time:             Sat 13 Sep 2025 01:02:09 +0000
Manifest this update:     Sat 13 Sep 2025 01:02:09 +0000
Manifest next update:     Sun 14 Sep 2025 01:02:09 +0000
Files and hashes:         1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=)
                          2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: bjXL65n5Ymqdy7OYQgkONLj58pyykU1M3DzI4WEq/Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Sep 2025 01:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:40:98:0a:41:ff:c2:35:4b:32:89:39:6d:a3:c1:dd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
        Validity
            Not Before: Sep 13 01:02:09 2025 GMT
            Not After : Sep 14 01:02:09 2025 GMT
        Subject: CN=ad8116cb370f8ae43f45989dffb53ca9b23891c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:2d:d8:52:75:7b:21:6a:0e:99:c4:65:26:
                    77:65:da:72:19:73:70:fa:70:ec:64:86:87:a9:3f:
                    74:a4:a1:9c:e8:06:7c:aa:fa:8d:ed:28:cd:ba:33:
                    64:9f:43:af:71:de:b1:02:d9:bd:9a:26:22:49:c2:
                    18:11:3c:87:02:56:f4:63:8d:98:19:fb:8c:34:80:
                    3d:00:2b:0f:e7:b4:58:3f:f6:1b:43:08:af:9b:5c:
                    8e:14:c0:9c:2b:08:1c:c3:6b:8e:59:e6:f3:b0:ef:
                    b7:ed:8a:a7:80:00:71:72:1a:61:14:87:ce:a8:72:
                    1c:b5:26:1a:41:ce:5c:48:bb:6e:9d:b4:23:80:74:
                    66:76:5c:86:40:30:45:69:5d:4a:95:09:74:0e:26:
                    af:c4:7d:d4:83:02:f3:48:08:f7:b8:9a:46:0b:7b:
                    e4:c9:01:b3:96:58:dc:b8:57:0b:8a:ab:5b:aa:04:
                    e8:6a:81:d9:f1:71:68:68:33:25:e3:13:56:b0:13:
                    51:d1:ac:04:a8:12:9f:cf:81:d5:72:df:4a:b1:25:
                    b2:1a:27:15:5a:0d:aa:34:b3:a3:8e:91:4c:37:04:
                    21:cf:8a:5c:d1:bf:4f:ef:6f:cb:c6:56:93:15:ed:
                    21:f4:a4:0d:7c:bc:be:e5:64:be:62:2a:78:22:eb:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:81:16:CB:37:0F:8A:E4:3F:45:98:9D:FF:B5:3C:A9:B2:38:91:C9
            X509v3 Authority Key Identifier:
                keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5d:f5:c9:ea:d6:83:ab:87:7b:0f:84:e8:09:f1:35:58:17:
         54:d4:02:18:03:1f:97:e0:25:bc:9f:26:88:2f:c4:6a:85:86:
         69:c7:01:1d:28:e4:77:6b:c8:e6:47:f7:10:5b:6d:a5:bf:63:
         d4:d3:5e:ab:79:8b:09:98:9a:83:60:05:96:80:74:cb:e6:65:
         88:d5:a5:58:5c:b2:76:e6:d3:7e:d6:07:ed:ac:54:fb:65:e3:
         23:55:6d:67:f4:01:fd:37:c5:b0:41:95:87:d0:cd:5f:f5:96:
         08:d0:36:cc:65:81:8b:e3:24:e2:0f:d4:9f:a1:d9:47:c7:c0:
         61:46:54:4d:53:98:72:0e:84:d6:de:ec:08:50:1a:a9:51:00:
         b8:93:0d:47:2a:15:64:e3:99:fe:ba:d5:83:65:1a:4e:cd:2e:
         84:6e:f4:d4:94:9d:97:8d:8d:12:e9:50:d1:2f:12:e0:7b:8c:
         24:ac:6b:e4:0e:95:e5:0c:08:8a:40:1a:d2:98:32:11:8a:c6:
         e8:e0:4a:14:13:07:00:40:32:04:f9:d9:c8:65:76:5e:5d:98:
         be:46:a0:ec:2f:74:17:e3:40:8e:84:c8:5a:c2:5f:e0:f3:5d:
         8d:d7:0a:79:76:08:a1:53:8a:ac:ca:26:73:07:c5:82:b0:e7:
         e1:5b:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 07:15:28 2025 by rpki-client